Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjZB3fLBuIADZLNeeKht85i-yNw.roa
File: rjZB3fLBuIADZLNeeKht85i-yNw.roa (raw, json)
Hash identifier: NXtUBL7Y5oVINGA48Gc50Lp//yrUeChGOSse8b64dSM=
Subject key identifier: AE:36:41:DD:F2:C1:B8:80:03:64:B3:5E:78:A8:6D:F3:98:BE:C8:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878956860E405635D760044C0A8FA09383
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjZB3fLBuIADZLNeeKht85i-yNw.roa
Signing time: Sun 16 Apr 2023 09:12:41 +0000
ROA not before: Sun 16 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:89:56:86:0e:40:56:35:d7:60:04:4c:0a:8f:a0:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae3641ddf2c1b8800364b35e78a86df398bec8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:73:39:0f:66:a3:e3:c8:d4:76:13:82:6f:
9f:a5:54:5c:32:5e:26:06:df:b1:ff:0c:4c:8e:f2:
f8:77:71:8b:d3:30:45:a3:21:19:92:98:4d:b0:dd:
a3:9a:62:5b:a1:2b:69:ea:35:42:ce:9a:c5:ac:28:
37:8b:f7:2d:08:2c:88:a6:02:25:ef:6d:df:61:78:
f5:dc:cb:eb:bf:05:61:66:09:c7:88:e7:c7:8e:d4:
f4:ac:1d:4f:35:c4:9c:54:f7:29:91:2a:46:c6:b6:
74:63:e9:82:a8:2e:88:d5:32:58:63:82:c0:97:75:
47:dc:c0:40:db:52:35:75:f0:30:94:7b:d9:8a:18:
14:5f:12:f2:62:bf:b8:cc:0b:84:07:9b:5f:54:1c:
29:0b:aa:22:0e:f3:b0:88:3f:02:c6:7b:75:93:fe:
fa:7c:8f:92:8f:68:69:35:fd:8e:5d:22:c8:33:7d:
98:a7:23:76:05:e2:0c:73:93:0f:e7:02:09:83:46:
30:f3:a4:46:22:53:87:a0:61:fe:4c:c0:69:3f:18:
a7:ea:c2:8b:94:13:3c:6d:b7:76:26:5c:8f:0a:37:
c7:ca:bd:15:40:15:fd:e1:ec:1f:cb:8c:56:c9:94:
1f:be:dc:e2:fd:d5:68:a9:24:9c:a4:73:01:bd:30:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:41:DD:F2:C1:B8:80:03:64:B3:5E:78:A8:6D:F3:98:BE:C8:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjZB3fLBuIADZLNeeKht85i-yNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:85:8a:b3:e1:aa:b6:9f:e6:c2:b6:a7:ea:88:32:58:12:8a:
0d:c5:2c:07:19:24:f6:81:42:3a:bc:2c:54:69:29:82:ea:03:
66:15:94:af:9e:cf:ad:b5:8e:8d:d3:09:3e:51:bc:4a:3e:23:
be:30:26:34:55:00:2f:09:ea:60:ec:e8:b8:b2:c5:7b:90:b9:
b8:56:88:9d:6a:d4:ee:df:53:42:a3:e6:55:66:af:31:69:e7:
02:e0:a2:07:26:43:fb:cf:23:e1:0b:7a:56:cd:39:84:9a:58:
0a:87:a3:d5:24:f1:94:cd:0f:08:99:f4:ab:9f:5f:ef:1f:be:
3c:79:bf:e8:52:a6:95:a0:38:78:6b:b2:3f:50:82:f3:d9:ab:
87:07:16:12:d0:ed:ca:16:6a:09:39:57:0c:76:29:0e:41:b9:
ee:55:b8:97:a0:97:4d:4b:08:66:79:f6:c9:92:59:f1:35:12:
22:cd:71:68:58:4d:35:24:b2:05:93:60:4d:4c:78:50:a1:b1:
b8:64:32:0f:7f:7e:7a:5d:32:50:0c:19:57:0a:05:2a:cf:01:
b4:1c:43:4b:0c:99:87:37:cc:60:b4:31:2c:5a:46:48:86:7f:
05:48:f9:7a:4f:d0:db:73:b3:b2:84:3d:6a:f3:cb:70:75:72:
eb:7a:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:29:52 2025 by rpki-client