Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwxuFcTxRnmN2GEIke2hRrs2Lbc.roa
File: jwxuFcTxRnmN2GEIke2hRrs2Lbc.roa (raw, json)
Hash identifier: TafP17m1w6Nii3HXTwTeACm+LfuXSZBP0xRqGRcRY0Y=
Subject key identifier: 8F:0C:6E:15:C4:F1:46:79:8D:D8:61:08:91:ED:A1:46:BB:36:2D:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A68E00CF9A2F7F03BECCFC0709C1039A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwxuFcTxRnmN2GEIke2hRrs2Lbc.roa
Signing time: Fri 03 Mar 2023 08:19:29 +0000
ROA not before: Fri 03 Mar 2023 08:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:8e:00:cf:9a:2f:7f:03:be:cc:fc:07:09:c1:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 08:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f0c6e15c4f146798dd8610891eda146bb362db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:9d:e7:6d:ab:47:48:dd:ce:fb:ae:91:a6:
9f:70:b9:2e:93:5e:51:b6:af:cb:9a:de:7a:a3:2e:
15:5c:45:15:1c:a7:9b:5a:b5:22:60:de:e3:29:f8:
42:6d:ec:34:0f:6c:f4:fe:fb:de:07:7c:65:cb:66:
b5:30:5b:c2:9c:73:cd:c4:4a:70:10:33:44:28:55:
0e:3f:6c:69:af:85:d0:e8:d0:14:3b:2e:8b:84:14:
a7:90:a8:f9:40:ae:27:dc:18:a6:89:4f:ad:82:be:
c8:2e:54:f2:94:fe:1c:36:ab:59:c9:0d:5b:88:58:
91:34:41:44:71:ac:9f:33:ac:1b:07:85:0a:b7:29:
3b:96:4d:d8:ee:3c:ee:2c:09:b7:80:f9:4a:7f:37:
c3:cf:fa:e0:1f:1b:9a:b8:7c:5a:5c:16:fc:ea:37:
6a:6a:21:58:4c:10:34:c5:03:6a:0e:b3:58:76:3d:
50:2d:ed:66:b8:96:b1:73:5d:a2:d6:a7:6e:c5:1e:
56:6d:cf:4e:59:d4:9a:56:77:2c:3d:96:4d:86:ec:
81:88:c2:75:10:25:3b:34:9e:0a:93:71:1f:fa:98:
d9:56:3d:93:55:94:18:0a:ea:2c:02:18:6e:01:72:
f0:e8:27:37:18:4a:f0:34:f4:45:d4:03:72:00:2d:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:6E:15:C4:F1:46:79:8D:D8:61:08:91:ED:A1:46:BB:36:2D:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwxuFcTxRnmN2GEIke2hRrs2Lbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:fb:8e:74:89:39:df:92:27:e9:6b:43:db:31:1e:95:8e:be:
1d:84:88:54:21:1e:e0:72:03:c6:8b:61:5c:dc:28:0b:5a:68:
5a:a1:56:34:a8:59:fc:29:69:71:c3:ad:c3:f4:2e:18:a3:27:
a5:2c:54:fb:54:ea:f4:b9:3d:90:e3:26:5c:44:ac:44:63:a2:
a8:02:4a:3f:e5:86:02:7d:70:a3:0d:11:f5:84:8f:d7:a1:de:
46:db:45:88:fd:0f:0c:cc:8b:b0:15:03:1a:51:71:bf:69:c8:
55:49:41:25:a5:7d:b8:04:23:37:bb:39:ad:92:a3:13:26:64:
61:c8:6f:b0:5c:04:e2:f1:15:38:18:a1:4b:4c:ad:87:0b:3f:
9d:f4:ee:19:39:06:3d:36:22:c0:b0:fd:d6:c9:a5:27:45:5c:
51:63:a7:62:93:6f:d6:e5:39:ba:19:82:30:20:64:a5:a0:bf:
d5:43:b0:84:0e:af:35:55:bb:97:f6:ce:45:51:3e:5c:b0:9a:
08:87:76:9b:49:6a:51:21:63:29:35:79:79:cb:d3:bf:3f:43:
15:8a:a9:fe:f6:33:87:1e:6e:3a:90:ca:7b:bf:39:fa:42:f5:
fd:e0:36:b4:ca:5b:ab:26:15:c0:a2:fa:fa:c0:7e:6d:9a:6d:
34:59:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:43:47 2025 by rpki-client