Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSyXsSwuAyzcrVas5tjyM71ianI.roa
File: jSyXsSwuAyzcrVas5tjyM71ianI.roa (raw, json)
Hash identifier: 0gGx+fe0rr5XncxFoJpAEnq0cAx9yeNqiQX4KtmGdxA=
Subject key identifier: 8D:2C:97:B1:2C:2E:03:2C:DC:AD:56:AC:E6:D8:F2:33:BD:62:6A:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A37EDCB19B4BEC2A87F37ABE7BC84969
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSyXsSwuAyzcrVas5tjyM71ianI.roa
Signing time: Sat 29 Jul 2023 21:12:27 +0000
ROA not before: Sat 29 Jul 2023 21:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:7e:dc:b1:9b:4b:ec:2a:87:f3:7a:be:7b:c8:49:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 21:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d2c97b12c2e032cdcad56ace6d8f233bd626a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:11:40:49:3d:f6:4a:ed:de:41:8a:98:4e:
8e:fb:86:7d:dc:3f:82:a4:fa:6a:83:71:f3:5e:82:
c8:70:b0:9e:29:ae:f0:9f:e6:96:c9:21:46:fd:7e:
85:7a:6f:86:a6:d4:a9:ab:e1:24:83:7e:44:27:6c:
2d:68:a7:7b:fd:02:18:4c:f7:28:8f:76:27:50:5e:
25:06:a3:65:be:77:37:85:6c:b2:c0:8c:90:fe:7b:
ac:4b:a7:c6:de:51:36:85:e6:56:be:18:ec:69:da:
17:ca:74:77:0b:c0:70:6e:2b:c6:62:c3:05:68:66:
6b:82:de:0a:38:53:13:ea:79:32:8a:79:27:99:fc:
b3:93:8f:3f:d9:64:d5:64:7c:26:e4:08:9e:40:07:
0a:89:3a:ef:2a:e8:06:fd:14:3a:0b:d3:51:5f:e8:
6a:91:c6:30:34:1c:89:d2:c7:12:43:5a:2c:fc:6b:
cb:dc:90:b2:75:5d:c3:fe:68:73:f2:d9:fc:37:6b:
0f:b1:cb:7c:bd:6a:4d:b9:49:a3:55:93:cd:af:84:
d6:4d:39:91:de:fa:87:54:0b:95:aa:e6:6a:a8:a1:
15:46:b5:f5:f6:5c:d7:41:9d:19:b5:5d:2b:82:f1:
b6:d9:85:c2:00:de:2b:86:d4:4f:6f:4b:c6:0e:d5:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:97:B1:2C:2E:03:2C:DC:AD:56:AC:E6:D8:F2:33:BD:62:6A:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSyXsSwuAyzcrVas5tjyM71ianI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:6d:f4:b4:d9:35:26:ab:a4:8c:54:39:a6:a4:bc:a0:a3:c1:
4d:23:7d:13:af:a3:f3:c1:59:c3:d4:49:74:0d:63:af:15:92:
60:17:84:ea:36:5a:a8:f3:7a:f9:f7:6e:34:49:30:c7:52:5e:
75:b4:8f:c8:2c:46:c7:fb:3d:fb:5a:6f:3c:8e:50:a0:b8:67:
82:be:9e:ed:13:48:23:03:9f:25:21:7e:72:99:65:37:c2:ac:
58:de:69:f3:7c:73:4f:1c:28:c3:39:05:54:51:9b:30:bf:93:
39:5c:c7:cf:85:5b:6e:fb:7c:1c:8f:e2:89:a6:8d:71:57:be:
e3:72:06:f4:aa:ed:ef:9e:1e:b5:3b:21:03:80:7b:a4:79:d0:
ee:26:92:81:5b:62:c0:c0:f0:b3:81:45:51:8f:72:e4:67:7d:
b5:6a:4f:eb:43:56:85:18:ef:59:6d:8b:de:1c:d5:64:64:c8:
37:1d:eb:fa:86:06:7e:9b:f6:05:f2:17:c2:49:df:a0:e2:49:
01:b2:a5:ec:4f:c8:0a:ba:30:cd:92:cd:d5:d4:68:5c:b1:78:
73:a0:2c:ab:70:00:5e:da:0f:ef:5f:81:96:9f:e7:43:a2:7d:
7a:c3:a6:78:aa:87:51:03:2c:c7:80:22:87:af:2f:e5:a5:e7:
8a:80:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:01:29 2025 by rpki-client