Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1lDjRQs_OOXRaK7XlVA3keEgAQ.roa
File: J1lDjRQs_OOXRaK7XlVA3keEgAQ.roa (raw, json)
Hash identifier: bu1c0qyGO5md7GZQTpdyNfxXmALA/wtsp6j2EI4fFgs=
Subject key identifier: 27:59:43:8D:14:2C:FC:E3:97:45:A2:BB:5E:55:40:DE:47:84:80:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E183807A920F96BB6A7A57DEFD94111C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1lDjRQs_OOXRaK7XlVA3keEgAQ.roa
Signing time: Thu 10 Aug 2023 22:13:58 +0000
ROA not before: Thu 10 Aug 2023 22:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:83:80:7a:92:0f:96:bb:6a:7a:57:de:fd:94:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 22:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2759438d142cfce39745a2bb5e5540de47848004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:7b:32:a1:70:43:2c:07:3b:ed:ea:b8:39:
ea:3b:0c:7a:a0:a4:06:11:f5:ae:88:42:59:86:be:
82:a7:cc:37:6c:49:4a:c3:94:ff:34:c1:94:3f:8f:
84:01:a2:97:eb:80:da:45:b1:4f:93:b8:67:1f:5c:
16:cb:53:29:36:b9:e5:ab:94:64:7a:76:0d:9e:c4:
ee:09:f5:a0:2c:cc:67:fe:43:3d:d0:37:2c:fc:e5:
36:e8:20:8c:c8:8f:0e:36:10:06:a9:9d:96:50:90:
74:1c:4a:d3:95:fd:fe:5f:00:e7:b5:ff:d9:6a:30:
05:52:f5:50:98:7c:99:9b:da:fd:c2:44:21:1e:d5:
30:45:84:d6:3b:d1:59:f6:de:f9:b1:d2:34:5e:fe:
55:0f:82:28:1e:df:cc:76:f0:48:99:96:98:71:b3:
43:c5:17:32:e2:2f:16:9f:74:de:92:c6:dd:e8:f2:
ba:53:08:4b:f7:db:de:58:dd:22:4c:ca:0d:f6:5a:
8b:12:8b:e9:12:a5:07:67:89:66:a9:eb:68:87:7a:
a2:ec:af:4e:e3:73:05:cc:d7:bc:13:98:8f:dd:df:
73:36:dd:e2:7e:79:a4:73:c9:63:0f:83:4f:df:3a:
94:ba:10:9e:1b:2b:a5:b2:53:c8:ee:65:86:e0:ad:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:43:8D:14:2C:FC:E3:97:45:A2:BB:5E:55:40:DE:47:84:80:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1lDjRQs_OOXRaK7XlVA3keEgAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:33:ed:f4:aa:c9:e7:70:43:50:67:e0:8e:b6:fe:4b:81:cb:
2b:bc:c5:67:7f:85:76:a5:0c:67:8a:b0:ff:45:90:3f:d7:b8:
d9:95:5a:49:cd:46:11:aa:3f:be:69:0c:a1:c6:da:3d:4b:7c:
83:71:f1:f3:78:c4:07:9d:8c:eb:53:f4:30:7a:9f:d8:68:1c:
7e:f7:68:0b:d2:84:c2:d4:d7:9e:b0:d6:77:5a:26:65:dd:a6:
4e:d2:79:47:51:f9:6f:3e:18:21:1f:32:b0:3b:6e:69:c9:83:
90:ad:d9:38:6b:11:56:bf:50:15:ea:f2:62:b7:3e:38:97:dd:
11:7d:96:61:46:d9:c3:0d:d9:35:e5:ec:45:87:67:7d:94:dc:
5e:b2:31:80:86:46:f7:4f:e0:6e:3d:9d:ad:6c:76:16:4f:b7:
be:dc:eb:37:3e:38:4a:bc:e0:d1:41:50:1b:52:41:8f:32:09:
e1:1e:92:a3:b5:14:54:4c:84:f7:61:85:19:8e:87:7b:01:16:
66:ce:18:3c:b1:85:9d:4e:df:1f:a7:f3:bd:1d:fd:43:8b:8a:
26:6e:77:d6:a7:bd:c1:25:e6:e3:ae:2a:0b:5b:3d:b6:20:cd:
f4:8c:da:22:96:86:71:55:7a:75:15:3d:7e:39:5b:c0:d0:57:
65:ff:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:02:13 2025 by rpki-client