Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjDjd8L4bTTu9IlX6_1pbTYoDrA.roa
File: CjDjd8L4bTTu9IlX6_1pbTYoDrA.roa (raw, json)
Hash identifier: /skgFDg+uhO8ZWn1uVDr2R7RPpd6dBfXEbiLrCJT3uA=
Subject key identifier: 0A:30:E3:77:C2:F8:6D:34:EE:F4:89:57:EB:FD:69:6D:36:28:0E:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187022B075402DB3405410D6DB3B096D8AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjDjd8L4bTTu9IlX6_1pbTYoDrA.roa
Signing time: Tue 21 Mar 2023 03:16:27 +0000
ROA not before: Tue 21 Mar 2023 03:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:2b:07:54:02:db:34:05:41:0d:6d:b3:b0:96:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 03:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a30e377c2f86d34eef48957ebfd696d36280eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:84:8b:a8:a4:76:05:40:80:26:61:66:3b:9d:
38:6a:5f:8e:0b:78:b0:a2:1a:78:3c:0c:7c:b4:8d:
9c:30:4f:e7:fa:8d:84:29:24:2b:16:ec:1d:f6:66:
d7:1d:c4:a8:0e:75:1d:59:9d:56:aa:1d:82:57:e6:
6f:3a:16:35:24:90:5c:dc:c5:e0:3f:65:15:a0:e1:
82:67:71:5b:7a:21:d9:68:16:cd:b1:88:83:72:76:
57:d8:4e:75:a7:f8:5a:70:d9:b2:2c:c6:c1:f3:ed:
1e:d2:47:e7:5c:37:7a:f6:2d:35:fc:97:f5:08:61:
20:77:7e:6e:f9:eb:b4:e4:b7:9a:7e:5f:b8:55:de:
de:85:2f:af:f3:37:97:8a:a1:fb:df:bf:36:5a:01:
20:9e:ad:58:eb:4e:99:b2:d7:f0:fa:d4:61:27:02:
c8:de:5c:63:d4:8e:19:12:b4:3b:83:86:51:65:37:
a3:e5:cb:2d:66:b0:52:91:5f:5d:58:4f:6b:f8:ff:
a6:e5:83:a9:ea:45:b2:5a:39:4a:91:a2:e9:da:e2:
b3:e9:47:19:a3:c8:51:13:ef:85:24:b5:44:cb:10:
63:9a:d6:0f:7f:5b:9d:2f:12:43:45:1e:46:88:9e:
23:3a:98:a4:a0:7f:24:81:5e:b0:dd:f1:87:95:1a:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:E3:77:C2:F8:6D:34:EE:F4:89:57:EB:FD:69:6D:36:28:0E:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjDjd8L4bTTu9IlX6_1pbTYoDrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:c4:64:de:bf:02:f4:57:b3:3f:b4:f0:43:e4:bd:24:83:30:
f1:69:8b:0c:6f:2f:70:6e:0f:2a:8b:71:9b:72:e9:e5:29:ab:
0b:a7:b4:7e:2b:af:60:a9:3c:ce:7d:dc:83:0b:7e:24:c2:e3:
02:72:fd:ec:2c:de:32:f5:91:0f:af:94:05:3c:27:8d:4b:7e:
ec:cb:34:52:2c:a2:bc:07:b6:e4:7e:46:79:77:06:62:b6:2e:
d8:09:7a:c3:fc:9f:85:06:d9:95:01:6f:2e:6a:6d:28:ab:c5:
be:ef:89:f8:a6:75:b4:21:28:f6:4d:e3:91:72:9f:69:b7:ae:
62:d7:c8:e3:45:a4:b7:40:a0:95:78:ae:bb:3c:0c:1a:6a:99:
0b:e9:53:ff:58:a8:37:67:f7:3e:60:14:38:a2:40:3a:6d:26:
b3:f8:2b:30:3f:c9:59:40:7b:37:08:e1:1d:48:df:e6:e1:21:
21:71:b1:36:66:e5:83:af:c6:3c:32:c0:13:bd:63:b7:3d:52:
27:0c:24:04:8b:09:a3:32:76:6d:ca:dc:ef:38:11:ad:28:fc:
c6:3b:e0:ff:df:b1:c8:e7:6c:eb:90:a0:4d:89:45:89:53:10:
85:50:2e:b3:14:ed:66:a7:b6:51:eb:05:69:08:03:0f:33:97:
51:9d:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:06:59 2025 by rpki-client