Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlOtOHDMcR0zj3z72uhbxI7URWg.roa
File: jlOtOHDMcR0zj3z72uhbxI7URWg.roa (raw, json)
Hash identifier: huUOxbpsOf/z/wLXB+BACURWkKuCPA9pMdvICTzrUxA=
Subject key identifier: 8E:53:AD:38:70:CC:71:1D:33:8F:7C:FB:DA:E8:5B:C4:8E:D4:45:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A19E9C3ADFE4399C26DC690731CB723F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlOtOHDMcR0zj3z72uhbxI7URWg.roa
Signing time: Mon 21 Aug 2023 21:04:24 +0000
ROA not before: Mon 21 Aug 2023 21:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:19e9:ad73/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:e9:c3:ad:fe:43:99:c2:6d:c6:90:73:1c:b7:23:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 21:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e53ad3870cc711d338f7cfbdae85bc48ed44568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:5f:df:0d:d5:de:c5:94:a7:21:88:6b:20:
ef:b5:ee:b9:64:0e:05:ee:0d:06:9a:b4:97:d1:0e:
79:96:d1:03:3b:9c:80:9f:84:4d:13:3f:8a:b9:8d:
dc:ee:8a:fd:f2:76:92:41:5b:a5:e6:3e:07:3d:43:
5e:b8:e9:40:92:3a:db:07:4c:f8:1c:7a:e9:97:9c:
36:b9:96:22:46:7f:79:d3:03:24:18:0f:ca:5e:47:
57:46:c1:d6:10:80:47:cb:2a:96:6b:95:58:69:1e:
33:ca:d9:9e:8e:3d:11:90:c8:74:97:3f:3e:2f:b5:
8a:e3:38:57:85:b8:1f:13:28:ad:c4:b9:7b:5a:b2:
87:16:dc:b8:82:6e:66:bd:a5:ea:41:e0:a2:98:fd:
ab:fc:b1:2a:31:6c:d0:70:55:4c:14:ab:50:78:6f:
b2:3c:4d:af:3b:c6:d4:59:f3:c9:73:c4:ee:fc:48:
a8:14:cf:b2:19:c9:cd:c3:fb:46:60:03:d9:26:60:
53:02:21:48:c7:c3:4e:4b:fe:69:1c:0d:57:b6:e8:
2b:8c:d4:0f:d9:52:29:ef:02:00:63:0c:53:a0:3e:
ed:24:98:09:59:03:f1:27:d5:fd:11:6a:8e:4e:ef:
56:e1:5f:05:bc:b1:2c:a2:91:d1:92:2d:4b:04:58:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:AD:38:70:CC:71:1D:33:8F:7C:FB:DA:E8:5B:C4:8E:D4:45:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlOtOHDMcR0zj3z72uhbxI7URWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:d3:ce:89:2a:a4:f9:e7:fb:b5:2f:1c:25:f4:af:7a:d6:32:
00:cf:37:a8:b5:f5:7c:63:ce:85:cf:88:04:9e:bc:30:37:ab:
80:7b:59:71:49:6b:31:b4:e5:7b:5d:3b:17:a4:33:48:99:e2:
42:57:df:97:c9:47:e7:15:c7:f4:74:85:fb:1a:26:23:94:99:
1e:93:01:cd:85:87:cc:06:80:f9:9d:f6:10:fd:82:ef:dc:09:
d3:56:fe:7a:41:9d:94:7e:db:c1:16:c2:49:4f:f4:84:0d:86:
54:67:31:59:c1:f1:b4:8f:b1:68:1f:26:32:07:11:c0:4c:3a:
a7:ec:52:d8:76:75:b0:ec:1b:54:7b:94:12:df:67:93:3c:de:
d0:f8:6b:6f:b7:3d:d8:c1:8b:15:10:6e:d5:15:ae:76:28:db:
c8:60:61:8c:c3:3a:a0:5e:14:33:1d:c6:aa:2b:39:3a:91:45:
42:d9:52:76:dc:1f:86:39:cf:c2:04:f8:db:40:f2:07:cb:83:
76:f0:2f:91:a2:dd:82:ac:42:23:00:98:31:56:d7:88:c9:50:
4b:79:4d:c6:80:27:7e:9a:e1:dd:d3:69:73:8e:b0:1c:97:96:
5a:30:98:41:56:48:2a:7f:d6:fa:46:32:1a:d3:29:02:f0:e4:
43:22:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:33:20 2025 by rpki-client