Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ji3fCyITZba7t1taYQ6TJZVIMYY.roa
File: ji3fCyITZba7t1taYQ6TJZVIMYY.roa (raw, json)
Hash identifier: q28+jl6pOBKgzLOh0iGf6WE3JZrVTsxK4lfP3HhPYDA=
Subject key identifier: 8E:2D:DF:0B:22:13:65:B6:BB:B7:5B:5A:61:0E:93:25:95:48:31:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C93BFBEC29A8CB385B7AD21A032B7C11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ji3fCyITZba7t1taYQ6TJZVIMYY.roa
Signing time: Sun 06 Aug 2023 05:04:58 +0000
ROA not before: Sun 06 Aug 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:c93b:b5a5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c9:3b:fb:ec:29:a8:cb:38:5b:7a:d2:1a:03:2b:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e2ddf0b221365b6bbb75b5a610e932595483186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:42:58:ac:07:76:dc:b3:92:b0:fb:d2:df:
55:f6:92:98:31:93:2e:72:89:30:7f:95:e5:6b:8c:
46:cd:ea:58:7c:a9:e4:87:85:01:a5:35:fb:70:4e:
7a:50:57:73:f4:be:8a:38:b1:fc:a6:cb:01:61:8b:
50:f2:bd:7c:18:92:b6:d6:6f:01:af:59:c7:af:0e:
d3:76:0e:e9:4c:83:f5:2f:41:4d:25:79:00:44:dd:
d8:86:10:15:d9:dc:38:43:09:54:12:b8:21:32:37:
26:86:53:c7:54:d0:8a:17:2b:ff:77:bc:da:46:1e:
4e:8b:62:7a:50:a4:db:cb:15:74:a1:e0:cb:06:c8:
08:51:72:e6:97:0a:11:71:a1:af:aa:ab:69:d9:24:
2f:19:ce:33:19:00:b9:89:0c:d2:4a:e2:80:86:2d:
32:e5:d9:7f:0f:88:84:bf:69:e4:ae:a4:cc:16:d8:
4a:7f:aa:b1:e1:4c:3f:db:a3:ec:17:1b:0a:76:36:
63:ab:56:9b:a7:74:db:e1:9b:ee:35:42:a7:bf:cc:
fc:c0:9b:62:bb:50:fd:49:be:ef:8d:27:27:b8:89:
15:4b:9d:ef:70:04:f9:9a:39:b4:91:2b:5c:6a:60:
af:55:97:71:83:07:f7:16:58:40:f2:aa:9f:ab:aa:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:DF:0B:22:13:65:B6:BB:B7:5B:5A:61:0E:93:25:95:48:31:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ji3fCyITZba7t1taYQ6TJZVIMYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:a5:a4:c7:d6:49:33:9e:25:61:d3:10:f9:60:92:85:ea:db:
e9:7d:06:8a:8e:0a:88:83:fe:cb:3f:2b:66:de:ba:c4:a4:d4:
26:de:42:3d:2b:e8:94:a1:73:d7:f8:1b:8a:08:78:c9:c9:13:
0c:7f:81:30:de:63:74:bf:45:9d:cc:58:26:38:b2:4f:96:95:
fc:21:9d:3d:1d:10:9d:8a:f3:fc:0d:02:d5:08:88:e0:7c:a2:
b4:9c:6b:26:59:14:72:0d:7e:72:2a:1b:5a:34:05:9e:4e:65:
64:8f:b7:14:6c:f8:9d:af:67:a6:80:8b:24:fa:da:d0:fc:c4:
3d:07:3a:2a:7a:3d:04:0e:e3:66:a8:73:0d:68:e3:cc:d5:a0:
86:eb:33:58:d9:cd:5e:86:ec:b6:41:0e:22:fd:21:7c:57:bf:
87:b8:e0:0d:f1:d6:f0:9b:12:a3:69:8d:18:5a:40:d2:05:06:
6d:02:52:4c:6d:3c:df:af:f1:4d:74:b4:80:05:bd:c4:0f:23:
67:cf:0b:51:54:fc:1b:e7:32:59:ff:8c:01:ad:1c:ea:0b:93:
88:d5:41:15:d6:92:40:6f:28:85:c7:c6:d8:0f:cb:bc:82:fd:
c1:d1:a6:bd:5a:96:93:0c:3b:34:56:b5:b4:df:1b:df:a2:96:
08:1b:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:16:18 2025 by rpki-client