Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jaWwCCEkC_rtvxzrc0kBDSATlsA.roa
File: jaWwCCEkC_rtvxzrc0kBDSATlsA.roa (raw, json)
Hash identifier: ippmc0ZFDexPA6JbGKkR97nP7S58VsX9Apw3Q4dama8=
Subject key identifier: 8D:A5:B0:08:21:24:0B:FA:ED:BF:1C:EB:73:49:01:0D:20:13:96:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018856762AC29011C74E3E9DB53E43D053CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jaWwCCEkC_rtvxzrc0kBDSATlsA.roa
Signing time: Fri 26 May 2023 05:09:24 +0000
ROA not before: Fri 26 May 2023 05:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:76:2a:c2:90:11:c7:4e:3e:9d:b5:3e:43:d0:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 05:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da5b00821240bfaedbf1ceb7349010d201396c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:cc:d1:58:95:4a:03:3e:ba:48:9d:e4:a0:
da:1d:96:4c:bd:33:f7:ab:0b:0b:ca:31:d6:7a:ea:
a0:ed:25:28:ff:a5:f0:6b:96:22:77:7c:b5:44:81:
c6:9f:21:60:9d:51:bb:6a:fc:50:48:8c:ab:3b:4f:
dd:e5:2e:0b:57:7b:d0:c0:35:74:ef:ab:5f:69:8e:
8f:7b:a9:ad:99:9a:82:84:72:1b:13:1b:58:53:91:
0b:58:2d:60:2c:eb:04:d2:05:dd:a6:57:ba:50:f9:
15:14:53:70:7b:6f:bb:d8:59:de:95:6c:90:70:30:
bd:2b:b8:f9:07:5e:88:98:b3:bf:3d:32:b6:1c:c6:
4a:15:c8:ba:02:55:bf:85:25:40:d2:c2:8e:8e:37:
84:2c:2b:74:17:60:84:07:7e:74:ce:96:df:d2:44:
ca:b1:25:34:fb:c1:84:da:1f:c3:6e:4e:03:c8:af:
ef:aa:b9:49:ff:f3:fd:e5:4e:53:2c:88:ce:46:c7:
c9:ec:80:c8:36:47:3d:60:7e:98:2c:99:f1:60:43:
6d:89:06:21:5a:5e:d0:68:56:d1:18:d6:a4:fc:55:
86:35:14:87:ef:5b:70:67:b8:d3:89:77:65:04:7a:
3a:8f:37:7c:ab:44:45:af:c5:af:6d:8d:f1:af:a3:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:B0:08:21:24:0B:FA:ED:BF:1C:EB:73:49:01:0D:20:13:96:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jaWwCCEkC_rtvxzrc0kBDSATlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:e4:93:aa:45:57:1c:f0:5b:ee:82:b3:e3:f1:e1:b1:21:bf:
84:82:a5:5c:2b:05:ef:c9:8d:9e:93:c4:58:fc:8e:aa:43:3f:
81:79:5c:5b:f0:ed:3a:89:de:22:94:32:eb:e1:0a:0b:45:e2:
b0:0d:8d:75:5d:7b:17:ba:79:c3:57:10:66:1b:9a:a6:6e:4b:
6b:8a:82:26:bd:76:2d:26:11:0e:7b:65:8d:43:b4:54:4e:81:
19:11:07:7d:2b:6f:fa:35:e4:43:82:5e:28:40:f9:57:db:6e:
3d:8d:0b:74:c4:00:cf:38:65:b2:98:96:1c:51:ad:58:cf:d1:
01:92:67:df:2a:84:24:3c:0f:3f:77:cb:05:50:3c:82:53:07:
c8:9c:9c:b2:b2:ce:51:10:d9:61:81:a0:14:56:d3:df:41:be:
42:9b:ed:8a:63:1f:d3:02:e1:4e:fc:3a:79:11:47:90:b4:e9:
ab:d9:c4:77:9d:7b:11:f5:1a:bf:ed:df:8d:c0:3a:4f:27:37:
19:8c:27:57:02:7d:05:6c:66:7b:af:f5:53:0f:42:ee:e3:f7:
14:f7:10:d0:f5:cc:d6:8c:fb:96:23:ee:ab:be:67:dd:14:b7:
36:50:37:3a:e7:14:2a:14:6f:43:4f:b7:72:e7:bf:a8:d0:8b:
2a:a3:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:05 2025 by rpki-client