Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jqwnRKmcuCvWVRRYbhiL9V7fdmY.roa
File: jqwnRKmcuCvWVRRYbhiL9V7fdmY.roa (raw, json)
Hash identifier: LjU0XsOaDSvxQEhjlSCZXuVCbeEO2bryKhcvMov31ys=
Subject key identifier: 8E:AC:27:44:A9:9C:B8:2B:D6:55:14:58:6E:18:8B:F5:5E:DF:76:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3A88366746407F2B96EC0DB04E65D7C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jqwnRKmcuCvWVRRYbhiL9V7fdmY.roa
Signing time: Mon 28 Aug 2023 05:05:19 +0000
ROA not before: Mon 28 Aug 2023 05:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3a87:55d2/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:88:36:67:46:40:7f:2b:96:ec:0d:b0:4e:65:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 05:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eac2744a99cb82bd65514586e188bf55edf7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5b:f6:97:36:f5:cd:6b:34:5d:37:15:7d:7b:
86:73:51:a1:37:9f:c3:cc:d6:67:72:c7:0b:56:a8:
67:60:8a:13:e2:70:95:e4:05:cb:0c:78:03:b5:e6:
2c:63:4e:f1:4a:15:b8:9e:70:e3:b9:c4:95:47:ee:
30:88:ed:9d:af:2d:d8:c5:89:99:ca:fa:67:d0:d0:
df:cd:b0:af:68:4a:08:95:fc:ef:6f:92:96:7e:d0:
98:0e:4a:3f:2c:2a:74:19:9e:c2:7c:8a:27:08:94:
4a:aa:17:21:1c:18:d8:b3:1d:b1:67:c2:24:32:b4:
d0:ba:4e:51:56:dc:72:64:05:3c:b3:f1:1a:43:b8:
2f:2b:1b:27:cd:f2:af:9d:45:a2:90:21:7a:25:8c:
15:20:7a:9d:16:1a:8b:c4:83:8a:86:4b:78:4e:27:
2d:c7:3f:18:c3:a3:95:53:56:06:b5:5d:9a:8a:39:
12:57:fa:da:74:28:4e:ed:a2:8c:eb:36:8a:f4:e2:
ca:be:b9:14:89:c7:34:6d:c4:01:56:d2:b3:18:1c:
c2:9d:d7:e8:25:8e:e8:70:a9:ad:42:48:50:00:e2:
04:52:92:b5:05:4c:f6:f5:64:46:06:eb:e6:25:64:
c0:79:1a:9c:99:a4:32:38:2f:46:93:9f:e4:c7:b1:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:27:44:A9:9C:B8:2B:D6:55:14:58:6E:18:8B:F5:5E:DF:76:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jqwnRKmcuCvWVRRYbhiL9V7fdmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:ae:46:24:23:c0:22:08:ee:a0:97:c5:1a:1a:c6:e9:7c:71:
9b:7a:b2:6f:83:05:89:b6:4f:1d:a9:1f:41:f3:66:6c:51:0c:
5f:42:0e:1a:07:9d:cc:a9:71:6a:7d:a9:67:78:56:d2:6c:db:
fb:4f:3c:91:2f:41:1d:32:3a:b5:ea:d0:04:bc:b4:be:9e:15:
27:c3:ba:6d:70:fe:bd:bd:52:57:4e:67:dc:bf:c1:3b:0b:43:
00:6d:fd:48:08:bf:3b:95:05:db:01:be:3f:82:91:bc:cc:5d:
b9:c3:a4:b6:40:2b:ba:0e:44:e5:f6:0a:1b:a7:1b:8a:45:a1:
3a:0a:26:67:d0:85:53:94:aa:dc:6f:4b:17:31:b7:02:34:09:
f7:75:06:05:c1:d9:ce:10:75:02:65:c5:68:71:91:84:c5:dc:
c3:0a:c5:15:5b:89:be:1c:c2:dd:ba:dc:f7:00:0e:a2:9e:9d:
3e:ec:f7:a2:7c:08:e8:25:2b:62:13:ac:a8:01:c6:44:cb:bc:
fd:dd:26:52:74:a7:8f:89:bc:50:e4:52:0e:a3:d8:eb:2a:5a:
b6:ef:9b:88:14:80:82:62:8a:c0:07:36:12:c1:44:fa:76:60:
37:ec:2e:92:d2:0a:4e:53:eb:30:a3:95:60:84:5a:4b:a7:a7:
b9:7f:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:29 2025 by rpki-client