Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k1-RJGNr8__3bx5txti4jAO1xR0.roa
File: k1-RJGNr8__3bx5txti4jAO1xR0.roa (raw, json)
Hash identifier: B8T+P5EAgHKwx9GaslfAxeKKFQK1dL28o8FDM2LBvQg=
Subject key identifier: 93:5F:91:24:63:6B:F3:FF:F7:6F:1E:6D:C6:D8:B8:8C:03:B5:C5:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A3E5630D6BF820FDBDF6A58917C4A78A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k1-RJGNr8__3bx5txti4jAO1xR0.roa
Signing time: Sat 29 Jul 2023 23:04:26 +0000
ROA not before: Sat 29 Jul 2023 23:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:a3e5:2fde/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:e5:63:0d:6b:f8:20:fd:bd:f6:a5:89:17:c4:a7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 23:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=935f9124636bf3fff76f1e6dc6d8b88c03b5c51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:48:77:1c:76:48:28:97:bb:e4:9f:b9:e4:
96:e8:09:93:66:f7:88:d7:ef:34:e9:5d:73:60:15:
84:98:b5:e1:03:d1:2b:2f:a8:13:f4:c1:19:79:a5:
d2:9f:99:4f:f0:af:ae:95:55:8f:d7:9e:ce:06:8b:
7e:4e:06:55:ae:e5:b2:a1:24:a2:26:eb:59:2b:14:
7d:2b:a5:fd:d7:eb:46:dc:90:38:c4:e7:c0:7d:68:
e3:77:ab:f3:33:2a:06:05:24:ee:c6:8c:f2:d0:a8:
0e:28:0b:e8:81:3b:b6:9a:ef:fd:81:e6:9a:0b:da:
64:76:ba:c7:51:df:48:10:ed:13:e0:ad:3b:6f:21:
75:02:68:77:26:1d:8c:85:16:6d:74:81:db:d6:ef:
a9:84:ac:07:ad:eb:1b:56:88:83:c9:f6:be:e0:b1:
f2:ce:4f:8a:1c:5e:4b:5d:90:65:cc:37:e7:a9:c6:
6d:bf:e0:4f:b6:a4:1e:20:9a:4f:ba:b7:fd:67:06:
9f:f4:b1:f3:ac:0b:fb:4b:8b:55:33:61:57:dd:e9:
55:2c:87:f5:cc:05:e0:e2:84:1f:7f:d3:36:dc:66:
02:dd:88:75:ae:e6:0b:d2:88:83:c5:32:d0:ee:e3:
e5:64:73:1a:1f:02:f0:11:d0:7a:4e:be:0d:1c:f8:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:91:24:63:6B:F3:FF:F7:6F:1E:6D:C6:D8:B8:8C:03:B5:C5:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k1-RJGNr8__3bx5txti4jAO1xR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:9b:7f:9e:3b:0d:00:50:ea:c6:06:f8:2b:00:19:a8:fd:f2:
dd:85:2a:d2:3f:07:ed:09:ce:64:2c:e0:7d:17:6c:2f:94:57:
a6:a0:ed:df:3a:aa:44:ed:c5:ae:80:a1:49:f4:7a:31:24:7b:
f6:f6:5c:90:1c:c4:ee:89:c7:da:24:21:0c:f9:87:80:ba:a3:
ed:8b:5f:85:d2:3a:e3:44:e3:6d:0e:0e:70:75:89:30:97:b0:
d9:53:84:c8:32:63:e1:1c:99:82:15:66:42:93:f9:f7:d9:61:
ce:e9:1f:4a:b5:23:50:8a:cb:ef:38:57:38:6d:28:e7:7a:42:
96:c3:75:a3:12:67:53:b3:31:69:db:4f:d1:6e:84:eb:8e:d2:
cb:9d:22:ab:5a:35:f7:59:ae:0c:ab:43:30:37:ac:fb:34:e5:
93:d7:31:69:c3:0f:68:92:c5:15:36:1f:8c:6c:fb:aa:8e:e2:
04:86:c9:04:b5:8e:e0:4b:69:43:14:e4:46:01:e1:78:84:82:
71:8c:da:b8:5b:15:57:03:85:70:f3:6a:b7:3c:9e:d6:2c:99:
da:a0:29:62:c5:a1:d9:80:30:11:92:ac:e1:a0:88:8c:1a:06:
fb:61:ed:46:2e:44:de:76:1e:ff:e0:bb:fc:a7:4a:76:b2:0b:
44:77:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:31 2025 by rpki-client