Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/juFvoLMrQQoo1USQrMYhs7Ee4Dk.roa
File: juFvoLMrQQoo1USQrMYhs7Ee4Dk.roa (raw, json)
Hash identifier: W7IE+Xf3pWVLXvDv3D3wbwCN+5g1UBW7N1n0Ri/q08E=
Subject key identifier: 8E:E1:6F:A0:B3:2B:41:0A:28:D5:44:90:AC:C6:21:B3:B1:1E:E0:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F795AD1C003F7FF78557FC6D2BE3CF1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/juFvoLMrQQoo1USQrMYhs7Ee4Dk.roa
Signing time: Tue 15 Aug 2023 05:05:28 +0000
ROA not before: Tue 15 Aug 2023 05:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:f794:c078/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:95:ad:1c:00:3f:7f:f7:85:57:fc:6d:2b:e3:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 05:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ee16fa0b32b410a28d54490acc621b3b11ee039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:39:97:05:3d:65:32:25:89:5c:5e:36:0c:
91:88:59:3b:4e:56:cb:f0:71:35:9a:9c:b7:a4:d5:
b4:94:9d:83:e7:13:1c:a7:41:c2:d9:23:aa:67:35:
9e:47:fe:77:d2:c7:19:97:08:0b:41:f3:06:62:fc:
30:f4:06:b7:a5:1d:88:74:f3:eb:38:7c:5a:d7:bf:
29:e6:08:25:81:83:da:fe:9e:06:68:08:ce:c1:87:
61:d3:a5:f9:4c:77:90:90:61:8c:e5:1b:f8:e7:c8:
d4:04:14:b4:40:64:a3:1a:88:1f:85:c8:84:e1:78:
66:0c:97:f2:07:06:7f:bf:83:dc:58:b0:55:15:42:
86:d4:b3:86:27:4c:29:6c:58:8e:29:f7:4d:e4:4d:
6e:49:65:51:39:1c:bd:ae:c2:77:d9:c6:66:c5:d8:
63:df:c4:d2:81:e8:e5:15:d2:d1:33:d4:1c:92:5f:
ac:38:3e:0f:4a:31:d6:5e:7e:14:66:a1:9e:86:c2:
59:8a:be:b6:61:6e:3d:35:6e:6c:49:29:4b:1a:f0:
5b:65:5e:3b:ad:9a:ce:b8:36:65:fd:12:04:81:86:
78:f3:fa:0b:7f:d9:03:8c:52:70:92:ba:92:a6:27:
98:d8:9f:de:6a:89:d5:73:91:c0:0a:54:16:f2:73:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:6F:A0:B3:2B:41:0A:28:D5:44:90:AC:C6:21:B3:B1:1E:E0:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/juFvoLMrQQoo1USQrMYhs7Ee4Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:d1:49:e4:72:c0:6f:58:a1:ad:ee:f9:c0:5c:a9:3e:e1:0a:
83:9a:2f:83:a7:78:cc:e7:8d:62:33:5c:31:0b:bc:8b:cf:f9:
f3:bc:44:c7:be:8a:c1:27:55:cd:be:fb:a5:d1:d9:95:20:01:
c2:41:a8:90:8a:f0:56:b8:de:73:97:4d:b4:3a:2e:8c:6d:7c:
7d:25:36:fb:db:6f:9c:24:6f:54:b3:f9:2b:19:2c:05:0b:79:
ec:88:02:29:21:ed:98:04:34:a7:0b:fc:53:a4:c3:f6:35:74:
dd:6d:cc:f4:f4:39:64:35:14:c6:e2:81:cd:d5:de:58:bf:3a:
f4:45:86:53:ee:ce:da:b6:5f:16:a9:04:d1:18:2d:d1:42:0c:
39:02:08:6b:a7:03:4f:e9:02:d9:09:6e:8a:89:c3:66:46:42:
a9:8e:62:53:fc:a3:1a:7e:8f:eb:56:2b:38:9d:bf:a7:50:42:
bf:4d:37:a9:32:61:c3:33:f8:f9:99:6f:05:5f:04:a3:09:73:
61:98:0d:8d:fb:53:e9:67:03:4c:6e:be:fa:f8:30:1f:45:44:
1f:c5:6f:0d:58:28:51:bc:22:c3:17:22:65:07:1a:24:e6:b1:
2f:70:0f:db:b0:fc:a1:b8:33:80:82:62:7c:da:ed:16:c8:18:
0d:20:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:43 2025 by rpki-client