Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jhcdfwLn1vR3NqRxk51mXx7-lxo.roa
File: jhcdfwLn1vR3NqRxk51mXx7-lxo.roa (raw, json)
Hash identifier: sD1u9YsHxAlZtYKR8mdrio36qOPe/byiXQPbkc7TwRs=
Subject key identifier: 8E:17:1D:7F:02:E7:D6:F4:77:36:A4:71:93:9D:66:5F:1E:FE:97:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3E030347044A8A68868D921CE6E2A8A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jhcdfwLn1vR3NqRxk51mXx7-lxo.roa
Signing time: Mon 28 Aug 2023 21:18:19 +0000
ROA not before: Mon 28 Aug 2023 21:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:03:03:47:04:4a:8a:68:86:8d:92:1c:e6:e2:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 21:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e171d7f02e7d6f47736a471939d665f1efe971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:bc:92:eb:09:5c:cb:39:04:d4:08:2b:48:
4b:8c:b5:ec:4e:58:5a:46:7b:0b:48:ba:90:63:f5:
1d:0a:67:92:d1:19:d8:cc:04:02:69:6a:b3:d3:28:
95:74:fa:dd:cb:14:f7:7c:e7:48:36:79:64:82:e1:
d4:5b:45:35:06:6a:f6:43:49:91:22:7a:bd:a0:e6:
80:7e:b9:97:89:f0:ba:34:e7:a9:fc:ed:20:85:c5:
66:b1:04:7a:92:ad:f3:f8:44:67:f5:57:9d:24:e9:
f2:9b:b8:97:fb:b3:18:ef:d3:0c:3c:29:29:86:b9:
38:9b:40:cf:bd:b8:02:49:ef:e2:4b:f3:07:13:8d:
9c:a7:2d:9f:5e:22:51:13:24:bd:e8:03:f5:5c:c9:
a8:c7:fd:62:9b:0b:fe:04:32:76:a2:01:80:60:b3:
4a:d5:5a:67:9a:2e:87:4e:07:e7:94:9f:3b:3a:72:
9b:d2:0d:6b:79:d5:40:5c:7a:52:0d:91:1d:7f:72:
b8:c1:cb:af:3d:d0:0d:0c:c8:be:ea:f3:e5:88:e7:
cf:f7:3c:d8:7e:e4:68:96:90:fe:21:08:51:8c:6b:
d5:ee:df:d5:b8:a3:90:4d:9d:c4:75:8e:54:47:07:
f3:59:f3:e0:ce:12:49:b2:36:32:3a:bf:7c:b6:53:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:1D:7F:02:E7:D6:F4:77:36:A4:71:93:9D:66:5F:1E:FE:97:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jhcdfwLn1vR3NqRxk51mXx7-lxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2c:c5:db:e7:4e:27:79:98:94:43:08:74:5e:ff:83:67:a3:
c4:4d:5f:41:70:99:be:a1:4a:10:9f:c9:3d:af:fd:82:6c:f2:
37:95:d1:21:4c:8a:01:85:0d:5f:0d:cb:f6:5c:8f:46:cd:e5:
df:2d:29:37:5d:6f:52:fc:57:62:43:ce:20:32:19:c0:ce:1d:
6b:4c:ce:93:77:d3:b8:df:52:52:53:a0:67:b9:e0:5c:3a:50:
4c:7b:ab:fd:06:f1:f5:5f:14:2a:fa:13:9f:b1:d2:04:bc:b4:
b0:dd:ee:2a:dc:00:e0:8d:9b:9d:16:0d:8d:de:44:12:b3:24:
98:47:20:fb:72:12:50:8c:29:1e:c4:e3:da:cf:d6:72:55:42:
ed:84:7c:11:bd:3a:28:1e:17:4e:f3:cd:54:32:4e:0a:ec:aa:
d7:cc:ef:2a:ab:80:52:b1:09:1e:5e:38:c2:8d:89:2b:0c:f0:
46:95:4c:37:8f:e8:59:e1:10:90:96:eb:3b:e9:e8:cd:02:82:
e8:37:a4:d0:51:30:66:6c:84:34:1c:27:8a:4c:36:e6:7b:da:
21:08:06:2d:8e:2c:0a:3c:08:29:c0:b5:9e:31:86:87:c4:2f:
a1:07:d0:fd:0e:6a:d9:e0:13:91:6f:29:e1:26:5c:1c:9b:15:
c6:56:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:19 2025 by rpki-client