Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jXknMQlbERhluRVyv9W81qoPkfM.roa
File: jXknMQlbERhluRVyv9W81qoPkfM.roa (raw, json)
Hash identifier: Cotu9AMpBDt+O5pLxOQfIMypbRGXaAI+vGAQG1gHW2c=
Subject key identifier: 8D:79:27:31:09:5B:11:18:65:B9:15:72:BF:D5:BC:D6:AA:0F:91:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187454A10A78A807FC41D31145430AE2D9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jXknMQlbERhluRVyv9W81qoPkfM.roa
Signing time: Mon 03 Apr 2023 04:04:54 +0000
ROA not before: Mon 03 Apr 2023 04:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:4549:ed06/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:4a:10:a7:8a:80:7f:c4:1d:31:14:54:30:ae:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 04:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d792731095b111865b91572bfd5bcd6aa0f91f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:28:c8:c0:f2:42:66:cb:b7:ea:92:98:16:
be:17:4d:a0:15:d2:1e:5d:cf:06:f5:32:9d:73:d3:
53:a6:1c:34:3f:0e:4d:7f:eb:d0:9e:a6:ea:04:3a:
e4:fa:45:7a:a9:6d:f1:96:52:2b:05:b1:c5:13:21:
60:87:c2:6a:f3:87:61:70:7d:86:38:0e:e7:90:57:
36:b2:39:78:9f:d7:37:b9:34:4f:47:bc:03:27:98:
13:19:2c:de:f8:ef:ca:5d:3a:88:40:d6:ce:2d:34:
9b:a0:e0:27:81:0a:43:05:2a:0e:41:ab:90:fe:52:
e3:e6:3a:45:e4:b5:f4:57:48:f5:4d:a4:2b:a8:94:
e2:44:e6:d4:9f:69:92:6d:ab:bb:22:e9:c2:cb:d1:
7e:8b:54:ec:89:37:ad:a1:75:56:b6:4b:81:b2:e5:
99:54:19:93:3c:cb:41:78:86:0b:03:da:54:7a:6a:
bd:c1:50:24:f3:81:bc:af:7d:b2:4a:30:7e:0c:27:
28:d5:14:47:04:d7:5f:8b:82:af:8c:6c:95:8a:f8:
12:a9:0a:81:a8:6c:12:3b:68:de:80:cb:7b:18:96:
38:2f:7d:2a:82:99:5b:6f:67:33:78:c3:58:3b:0c:
d7:22:bf:36:3c:0e:07:90:a5:e9:63:f1:ea:69:39:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:27:31:09:5B:11:18:65:B9:15:72:BF:D5:BC:D6:AA:0F:91:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jXknMQlbERhluRVyv9W81qoPkfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:a6:ce:47:c4:78:5d:c2:3b:65:22:cb:32:ba:71:ec:38:2f:
37:19:bd:46:1c:f0:3c:72:db:60:10:b1:ca:eb:89:d5:e9:63:
46:c2:60:50:f8:2a:c4:28:57:3a:9a:82:64:d4:dc:76:3d:5a:
16:82:55:e7:8d:48:c1:61:4c:ce:0a:3a:38:76:22:29:5c:18:
31:c8:ee:52:a7:57:0a:e5:24:29:fb:48:de:c0:4e:48:3c:1d:
c6:ad:53:5d:74:d0:01:54:2c:dd:d4:36:fd:49:7c:2d:95:0c:
54:77:21:38:d0:e5:95:45:2e:ea:b4:6a:bd:30:f8:f5:f1:b0:
b2:1b:9b:15:4a:5a:fe:53:c9:ee:4b:f5:8f:a3:8d:c6:b9:38:
fe:e1:45:9f:f6:6b:b2:68:58:1a:23:b1:4d:cd:37:22:b4:99:
f5:69:52:9f:ca:78:97:2b:84:58:5c:55:84:b9:de:63:ba:ad:
b5:f3:24:84:06:90:b0:c0:45:ed:b7:c7:63:7d:5f:33:a1:e8:
06:19:dd:b0:1f:88:c3:fa:5e:ed:85:3e:98:48:e9:38:af:85:
9a:21:95:47:81:9a:d3:07:57:c6:b0:14:23:d7:e1:b6:0c:0d:
f5:8e:b4:3a:0b:c1:0f:03:e0:4a:16:2f:0e:39:dd:70:ce:88:
53:02:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:43:56 2025 by rpki-client