Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWjtWbkszEW34dMaSZCPOPuZCr4.roa
File: jWjtWbkszEW34dMaSZCPOPuZCr4.roa (raw, json)
Hash identifier: xeQPwdum50EJZjjkL4jdbuW9jR5r4Z6li81SrSJz+Q8=
Subject key identifier: 8D:68:ED:59:B9:2C:CC:45:B7:E1:D3:1A:49:90:8F:38:FB:99:0A:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EA1624BA4859D4E52DC74B30FE2085BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWjtWbkszEW34dMaSZCPOPuZCr4.roa
Signing time: Fri 05 May 2023 04:05:32 +0000
ROA not before: Fri 05 May 2023 04:05:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:ea15:495a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:16:24:ba:48:59:d4:e5:2d:c7:4b:30:fe:20:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 04:05:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d68ed59b92ccc45b7e1d31a49908f38fb990abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:dd:ed:1d:10:cf:7f:9f:9e:cd:22:61:9b:
9f:e6:e5:67:11:ae:58:1e:45:40:6a:7d:1b:1e:41:
ca:53:a8:89:e1:04:0b:01:da:eb:13:ff:b0:d0:95:
ff:d6:0c:18:11:cc:94:f5:54:42:b9:1d:18:eb:09:
f0:e5:eb:b3:1b:bf:19:68:1a:4d:51:8e:fb:e0:cb:
b0:62:4d:4e:97:aa:f6:2f:74:25:df:12:15:45:03:
a2:c6:d5:fa:e1:ee:6b:68:17:6a:22:90:62:77:ba:
74:02:e5:9d:9b:17:66:ec:b1:c9:63:c5:5d:db:81:
41:6e:c3:9e:12:07:20:dd:86:c2:3b:93:70:cd:fe:
04:b5:91:10:b7:0e:75:37:66:74:37:16:6a:7d:f6:
3c:49:b3:51:bb:7c:b1:b0:38:85:5f:61:42:f4:1c:
15:ab:e0:ff:0c:f6:32:f0:32:24:32:11:e6:8b:f2:
9f:3a:63:51:03:8f:44:b6:ce:57:ba:d6:a2:5d:ee:
f0:c7:7b:3c:d3:a1:14:0f:1a:f0:6f:bb:cf:ba:85:
23:6c:9f:07:9c:37:b9:dd:07:94:c3:f0:5f:42:c0:
d8:e2:23:cd:ca:bb:c3:bb:85:4f:c5:5c:39:91:d3:
71:36:a0:97:a2:f4:fe:d9:7d:3c:ee:ae:23:42:d2:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:ED:59:B9:2C:CC:45:B7:E1:D3:1A:49:90:8F:38:FB:99:0A:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWjtWbkszEW34dMaSZCPOPuZCr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:e5:04:1e:c4:2a:b9:7c:14:8e:52:a2:4c:14:90:51:4f:51:
a0:39:d3:50:1a:f1:1b:83:04:c2:e2:69:b9:ff:7b:d9:96:19:
c6:a7:c6:f8:a4:e4:13:a0:66:35:31:a8:31:44:a0:f4:32:5a:
aa:c0:37:d1:ef:d8:66:df:0a:d7:d5:3b:9a:d6:af:60:eb:83:
17:ba:f8:2c:38:c2:62:1b:65:cb:59:59:1e:cd:35:96:10:7a:
41:49:ce:99:fd:f0:79:0e:9b:c1:29:62:06:b6:0e:85:27:6f:
3a:eb:03:fe:f6:63:85:98:88:74:52:37:72:98:8c:bf:2c:1f:
ca:1d:89:db:e8:8d:40:10:a4:8e:63:8e:8a:18:86:66:a0:00:
06:5c:09:f5:90:83:c7:47:bd:9d:fc:56:9d:0c:96:67:f6:c3:
ff:71:1d:15:76:8c:a3:8c:31:e9:06:31:36:c7:5b:c5:57:c5:
52:9f:02:9a:54:9b:31:89:2f:0b:fc:90:7a:dc:eb:d8:80:57:
d2:0b:ed:3c:cd:62:f5:a9:91:78:3c:af:b0:45:d3:18:4f:6e:
13:e2:48:79:b7:38:a4:29:77:71:ad:ad:57:b5:62:0f:c7:ef:
f6:b7:3a:8f:e2:4c:80:b0:2c:a6:e2:08:cb:bc:73:90:d6:1e:
f9:8e:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:16:03 2025 by rpki-client