Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjyCv-P71wdgJLeOTxb1sYvVKoo.roa
File: sjyCv-P71wdgJLeOTxb1sYvVKoo.roa (raw, json)
Hash identifier: grl1ea5uR2IlX9Xk6DBe27DkCYWLzA7SFqlQLqUuQAI=
Subject key identifier: B2:3C:82:BF:E3:FB:D7:07:60:24:B7:8E:4F:16:F5:B1:8B:D5:2A:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B4AC89BCD6013432776A6EEA52C5A720
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjyCv-P71wdgJLeOTxb1sYvVKoo.roa
Signing time: Sun 15 Jan 2023 09:04:44 +0000
ROA not before: Sun 15 Jan 2023 09:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:b4ac:12d2/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:ac:89:bc:d6:01:34:32:77:6a:6e:ea:52:c5:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 09:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b23c82bfe3fbd7076024b78e4f16f5b18bd52a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:d1:48:f6:96:29:d1:87:b8:cc:89:a4:c7:
97:73:48:54:ec:6f:f0:6d:40:b4:d7:24:cb:f8:e4:
0b:a2:2e:27:d5:96:7c:2e:dd:cc:9b:76:26:94:1c:
0f:da:4a:83:ff:07:d2:7e:f3:99:04:37:8a:da:af:
cc:5b:87:4f:ed:cd:2f:1e:5a:04:78:4b:63:04:73:
ea:13:46:eb:74:36:99:26:5f:93:f2:34:c8:e6:a7:
c0:0d:2a:28:4a:1c:c6:d3:53:fe:27:fe:79:99:32:
a4:f2:30:36:59:c1:e5:dd:02:80:8f:67:d8:0f:30:
c7:d1:cc:dd:52:a7:e7:bb:f7:b7:95:bd:aa:cc:d2:
04:79:b2:fd:ea:53:d2:d3:d7:32:81:e6:55:6c:59:
ac:f2:05:75:84:da:f4:e2:7d:2e:bc:de:ac:b4:43:
0b:81:94:c0:d7:2b:64:42:51:05:d1:4d:dd:c2:71:
a2:d8:f2:b3:9b:39:0d:2d:a3:6b:68:c9:98:02:24:
a7:f5:70:43:cd:9f:b7:9a:05:66:f8:5e:90:d2:2d:
d3:7e:72:db:c8:d5:84:12:a7:fe:73:a4:e3:f1:14:
8e:5f:b6:f1:9f:c8:40:cc:39:41:4f:f6:52:29:b2:
06:b2:b0:2c:c4:c5:3a:db:bb:4e:a0:fc:e9:66:79:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3C:82:BF:E3:FB:D7:07:60:24:B7:8E:4F:16:F5:B1:8B:D5:2A:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjyCv-P71wdgJLeOTxb1sYvVKoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:aa:63:95:fc:6f:e7:d5:a3:a5:59:46:55:f2:b4:c0:9e:fd:
6c:14:68:75:04:4b:b2:02:76:12:32:66:69:ef:c9:2a:e2:32:
b3:38:bb:7b:b7:0b:46:42:36:f8:76:93:a2:72:69:06:c6:3e:
cc:e2:3b:cf:b3:25:d4:43:4b:c6:9a:49:8b:31:61:6d:ab:f2:
fa:79:e5:df:16:85:a4:09:8b:c9:82:da:5b:80:a1:7c:2f:90:
64:8e:33:a6:9b:c1:27:4a:85:79:0d:01:a7:e0:10:72:64:0f:
e0:9c:3c:58:da:c9:44:ee:b5:13:ed:b7:a9:72:e1:cd:64:cd:
10:b5:70:3a:90:91:b6:52:18:8c:85:b8:93:16:60:11:86:1c:
bb:22:c2:84:69:ed:60:1b:b8:63:29:3f:4d:e5:09:5e:d9:e7:
14:92:7c:90:d5:45:0e:1f:da:40:17:2e:8a:5a:65:31:49:06:
f6:81:71:f9:96:8c:c2:7d:67:78:fc:87:c1:24:eb:ea:b1:8d:
a4:f7:f5:40:8b:c1:d6:64:b5:a5:7f:dc:db:22:20:f8:89:3f:
c2:4b:a7:d1:1c:39:de:78:93:a0:24:2d:7c:ee:db:58:49:1a:
ea:b9:80:6a:cc:67:02:50:e4:0f:c3:ef:8e:a2:99:98:29:dc:
a6:20:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:22:33 2025 by rpki-client