Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN3hlG6Sef7eylaK4sU0Osu_pS8.roa
File: jN3hlG6Sef7eylaK4sU0Osu_pS8.roa (raw, json)
Hash identifier: LuSKzeNOwkLVeh4ja/Q+ujwDjt488S47PPwZn+6UjHA=
Subject key identifier: 8C:DD:E1:94:6E:92:79:FE:DE:CA:56:8A:E2:C5:34:3A:CB:BF:A5:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018786F95CF00120BA5E40BE2F0C1B740F40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN3hlG6Sef7eylaK4sU0Osu_pS8.roa
Signing time: Sat 15 Apr 2023 22:11:41 +0000
ROA not before: Sat 15 Apr 2023 22:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:f9:5c:f0:01:20:ba:5e:40:be:2f:0c:1b:74:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 22:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cdde1946e9279fedeca568ae2c5343acbbfa52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:a8:2e:a7:5c:8e:17:ac:f6:0a:e9:26:d7:
9e:6d:26:d3:3a:e8:98:7c:5a:e1:73:c0:9a:cc:10:
54:3f:2c:30:9d:a0:d3:cd:e5:87:d6:45:3b:3a:1b:
e9:43:71:23:38:93:7f:05:69:cf:2b:c0:87:d4:f2:
6a:db:c8:83:ac:61:78:69:50:34:ec:e6:fb:af:2f:
99:cf:5d:6a:8a:60:73:96:44:7d:dc:41:63:01:a4:
b7:a1:66:2a:17:ee:33:13:93:b8:74:8f:d7:c4:11:
01:08:a2:72:86:48:2e:2d:e0:d1:fe:01:c6:a9:b2:
81:25:95:3c:18:57:6c:16:ac:4b:0d:64:35:91:da:
03:54:cb:5b:99:8a:71:b1:8c:c8:a0:35:93:4b:6d:
06:3d:fd:83:38:08:bb:b5:65:d4:86:db:f0:95:cc:
a8:55:03:d8:82:fe:07:16:35:f0:f4:0c:8a:4c:5c:
5d:6a:5b:17:33:08:9f:aa:06:b4:92:13:70:68:8d:
c8:00:6b:2a:d5:61:23:4c:1d:b8:ce:8f:0f:99:14:
f2:70:84:e9:a1:f7:f0:df:ef:8b:f2:4c:a1:cb:c1:
a9:06:25:39:a1:94:54:b9:46:77:af:a8:6c:92:42:
48:4c:84:c4:27:d6:7d:61:74:8f:04:ed:39:1d:3a:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:E1:94:6E:92:79:FE:DE:CA:56:8A:E2:C5:34:3A:CB:BF:A5:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN3hlG6Sef7eylaK4sU0Osu_pS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:27:65:c7:ab:f6:e7:48:57:9b:51:3b:fe:b3:49:a7:15:00:
23:23:8e:39:c9:d9:9c:1d:a3:14:63:ba:8a:07:16:a5:68:1f:
f1:77:df:54:40:74:ab:c0:d1:a1:b2:25:c5:66:6b:66:98:d2:
a5:18:a8:a2:1d:9b:a4:8b:c2:bd:d5:c3:2b:b4:b7:82:ea:d2:
c2:b8:b0:b6:f6:fc:9c:50:98:c6:7f:af:2b:ac:ec:0f:77:7d:
c5:dd:d8:6c:1a:e2:31:f4:f8:79:66:95:59:c9:97:99:20:2c:
34:b7:b8:8c:4d:c8:73:f3:8e:c4:3d:fc:8b:f6:cf:4a:97:ef:
44:f5:49:d2:6f:63:9f:ec:d8:84:26:ba:c4:fc:b7:f9:2d:94:
6c:cc:b9:58:0d:e9:aa:41:34:38:29:1d:5e:bd:c0:a3:f3:13:
dd:e9:b1:26:bf:41:67:4f:e8:6d:a7:f6:86:b6:d8:8c:9f:d9:
ff:b0:de:e9:34:79:0a:de:20:cd:bf:f6:52:8e:4e:42:3f:3f:
30:f7:6d:55:17:58:29:c1:9c:bb:59:b8:32:d3:b3:75:3e:f5:
0f:e6:e1:3c:b4:1d:75:9a:7e:b7:39:55:71:19:c0:fd:ea:9c:
5e:ed:19:82:52:46:ac:dd:49:02:33:b1:68:71:e7:a5:2b:67:
a7:63:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:37:40 2025 by rpki-client