Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLSuVIabhXQ-o2dzePxEvHSwGsY.roa
File: jLSuVIabhXQ-o2dzePxEvHSwGsY.roa (raw, json)
Hash identifier: YUuLylJrpqJ4Am05OUh16G9MqmP6bIyYFureTJLw3Ro=
Subject key identifier: 8C:B4:AE:54:86:9B:85:74:3E:A3:67:73:78:FC:44:BC:74:B0:1A:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837C7A8772BD5FC3C89B0186E729C902DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLSuVIabhXQ-o2dzePxEvHSwGsY.roa
Signing time: Tue 27 Sep 2022 01:05:48 +0000
ROA not before: Tue 27 Sep 2022 01:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:7c79:c4cd/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7c:7a:87:72:bd:5f:c3:c8:9b:01:86:e7:29:c9:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 27 01:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cb4ae54869b85743ea3677378fc44bc74b01ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:d7:08:60:b2:3a:c2:16:18:50:0f:f9:8d:
bb:59:9c:a4:55:ac:5d:ad:58:d9:19:3b:1b:3a:7d:
e9:8b:e8:1f:35:4c:ad:14:eb:92:cf:c5:87:c3:71:
34:06:59:d6:02:c3:dc:bb:82:1a:48:0c:5e:f0:98:
67:d7:bc:7c:46:09:14:01:a0:43:8c:a7:94:f3:28:
58:c9:e1:4e:f9:2b:45:be:d3:e2:99:21:7f:72:e3:
e3:bb:5d:5f:ba:9a:d5:78:62:ea:66:67:ce:41:a1:
9a:fb:fe:8f:16:1e:a2:2f:93:a5:09:9a:c0:5c:b4:
c2:52:9f:2c:9f:46:07:b6:f3:a0:03:1e:57:5e:08:
06:e2:55:1e:73:be:a0:aa:57:cc:e4:55:db:87:15:
68:01:ef:de:a1:17:e8:ba:63:fe:57:91:4d:7a:13:
f6:b6:6c:0a:a5:bf:3c:68:c1:5d:4f:a7:44:42:f6:
5d:df:b6:57:9e:64:62:fc:fb:db:2c:69:9f:cf:a8:
e3:aa:bc:d6:20:f4:3d:e8:a1:2e:0c:ec:4d:01:08:
6f:ab:4f:31:18:ca:3c:96:84:5d:91:41:e1:9d:87:
cf:b8:ed:72:23:19:a9:e7:d6:80:9a:fb:7b:14:0c:
e4:5d:94:bb:bb:25:2b:97:ca:7f:89:5b:61:15:12:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:AE:54:86:9B:85:74:3E:A3:67:73:78:FC:44:BC:74:B0:1A:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLSuVIabhXQ-o2dzePxEvHSwGsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:95:58:ba:98:98:6b:e7:62:a0:a9:ff:5f:0e:80:61:7d:e0:
22:24:69:73:a4:bf:ee:4d:04:b7:d8:e5:16:54:1e:e7:f6:6a:
e8:1a:8d:ea:48:6a:5a:f5:20:f7:4d:00:e7:28:85:6c:fb:8c:
9b:fb:76:8b:9b:06:4e:55:b4:5e:9b:e2:a6:fd:ef:03:39:09:
54:43:7f:c4:56:2b:a4:5a:10:b9:de:45:de:3b:68:de:4f:7b:
bc:a6:22:33:da:b6:6e:04:20:8b:5c:49:74:b2:5d:63:5c:29:
1f:53:4f:3d:59:54:c2:0a:a0:52:94:d0:2e:29:5a:b3:20:5c:
01:a2:00:9c:28:89:91:35:5b:d9:a9:51:bc:76:12:3d:7c:99:
67:e7:5c:94:31:8c:ea:b1:2a:ef:41:56:d5:1c:4d:5d:45:22:
1d:68:90:d1:8a:15:e6:2e:dc:0a:ee:3d:1e:71:6d:31:93:c5:
20:56:4a:1f:f9:4c:23:44:2d:87:82:5b:ba:ba:f7:9f:97:a2:
b2:6d:0a:dd:2e:95:69:c1:42:1c:ab:71:1e:c4:c0:2b:65:80:
7f:4b:96:ed:c5:36:f2:24:07:71:23:c9:be:9e:28:99:ed:2c:
7c:41:58:f6:73:58:46:37:50:44:08:b4:be:46:0f:60:ff:eb:
3a:cd:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:52 2025 by rpki-client