Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJYrsNGERAzNYya6vempGADjMCw.roa
File: RJYrsNGERAzNYya6vempGADjMCw.roa (raw, json)
Hash identifier: eEq71r5I8grzSllBuLkPIlfwiE6KerlCEyDdDreS76o=
Subject key identifier: 44:96:2B:B0:D1:84:44:0C:CD:63:26:BA:BD:E9:A9:18:00:E3:30:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873F48479DACC5A3AEA279DEF93B6C8809
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJYrsNGERAzNYya6vempGADjMCw.roa
Signing time: Sun 02 Apr 2023 00:05:14 +0000
ROA not before: Sun 02 Apr 2023 00:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:3f47:64fc/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3f:48:47:9d:ac:c5:a3:ae:a2:79:de:f9:3b:6c:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 00:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44962bb0d184440ccd6326babde9a91800e3302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:a7:32:7f:3c:19:cb:5b:21:04:6d:91:19:
88:16:a1:08:1a:34:06:72:2f:da:ba:25:4a:dd:41:
7e:b8:46:1a:e6:25:72:d4:d7:4b:10:cc:3c:da:69:
2b:29:72:e2:42:45:9c:c6:31:ea:11:2d:9c:02:b9:
f1:7d:79:3c:8c:48:26:fa:2c:e9:86:b0:90:8d:8d:
a0:2a:9c:9d:fc:b7:44:c4:f9:de:00:5c:51:ad:47:
ae:87:ad:64:eb:a5:bb:0b:b9:0e:5e:04:dd:b0:61:
8f:8a:c9:b2:91:8e:11:a4:c8:97:7e:24:fe:2b:d8:
d0:32:33:7e:d7:45:83:50:e8:ed:9c:ac:fd:da:69:
cb:41:65:38:36:c7:94:f5:91:c7:ef:83:1f:31:ff:
46:c0:69:29:b9:8b:cd:c8:2c:94:75:77:af:cb:7e:
de:95:38:f6:0b:c2:c0:1d:2e:93:96:83:e5:96:7c:
34:a1:89:3a:cd:02:89:30:22:f1:87:81:c4:4a:19:
4c:15:03:18:58:0c:2b:37:42:c5:49:6c:4c:8b:85:
3c:5b:2c:7b:96:e9:93:2f:96:39:68:98:11:07:d9:
3b:33:6b:a1:ce:93:62:29:d6:03:00:0c:10:05:0f:
e1:a9:82:bf:2f:34:56:80:87:24:12:a5:e6:7c:73:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:2B:B0:D1:84:44:0C:CD:63:26:BA:BD:E9:A9:18:00:E3:30:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJYrsNGERAzNYya6vempGADjMCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:41:cd:9c:88:01:81:e3:20:6f:eb:14:ca:4f:d6:6a:66:4f:
82:95:d6:6a:1f:95:4f:72:e3:c8:10:e6:f3:44:11:c9:9e:26:
aa:66:d6:d3:a5:30:bd:54:8c:eb:52:3c:df:7f:fb:01:0f:5e:
77:c3:be:bf:d1:a4:9f:21:68:b7:76:0c:46:0e:b4:c4:61:f3:
43:3c:c9:44:94:31:b8:42:72:8f:ff:ff:1f:a0:98:6c:8c:87:
c3:5f:0d:86:28:d0:46:46:4d:d8:59:81:46:80:99:0e:e7:1d:
21:a8:75:c3:a2:f7:fd:cd:10:70:73:54:aa:fa:34:b6:6f:08:
4d:2e:54:34:52:0b:c1:e9:d5:5e:d4:d1:26:ad:b8:e1:02:6a:
99:7e:69:36:22:9a:a1:cc:e6:d8:c2:e1:52:dd:30:fa:31:b0:
e3:5c:c9:86:1f:a1:60:f5:26:02:b0:1e:4e:52:90:bf:6e:6f:
26:c5:73:80:41:4d:9b:83:5c:38:71:17:6a:b5:3a:40:39:bb:
05:30:ab:fe:c3:3d:f2:55:a2:d6:0d:37:2e:24:68:06:b3:63:
a0:24:e8:64:e6:a7:8b:4f:f6:99:2f:4e:55:43:1d:31:75:0b:
f1:6a:bf:61:a0:98:49:b8:bf:b7:37:0b:06:13:a5:90:fe:48:
d4:5d:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:32:49 2025 by rpki-client