Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlBeH1AD3h1vPj74_JlvsrshRIw.roa
File: jlBeH1AD3h1vPj74_JlvsrshRIw.roa (raw, json)
Hash identifier: ZCe2xKgQEMSFSnI9dWcptHxr3VLwI1UI6ZQ6Jyq9G0c=
Subject key identifier: 8E:50:5E:1F:50:03:DE:1D:6F:3E:3E:F8:FC:99:6F:B2:BB:21:44:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A38343E5B391B5546D7F1C0218AC3526
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlBeH1AD3h1vPj74_JlvsrshRIw.roa
Signing time: Fri 21 Apr 2023 11:11:41 +0000
ROA not before: Fri 21 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:83:43:e5:b3:91:b5:54:6d:7f:1c:02:18:ac:35:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e505e1f5003de1d6f3e3ef8fc996fb2bb21448c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:2a:7d:60:35:b8:49:d9:dd:75:97:90:c8:
4f:3c:27:ce:fe:90:d9:da:75:9d:4d:3d:0e:d5:9b:
f0:2f:7b:75:37:f8:3b:1b:8a:ab:d8:7d:12:66:15:
ca:7a:21:19:cc:d5:e1:ed:02:cd:70:7b:d0:ce:f9:
84:30:4a:8a:ee:46:ca:cc:a6:a2:48:3d:85:84:fb:
e7:f1:e8:f7:28:75:98:db:ac:9c:53:ac:80:d7:7b:
f1:9b:9c:6a:5f:e9:aa:9f:25:3e:1c:7b:18:52:a2:
e4:47:74:73:f1:aa:93:eb:64:aa:f5:c9:b7:ce:ef:
d7:83:98:98:e7:12:d1:b9:79:bb:14:af:cc:95:d0:
0b:82:f8:09:24:15:55:52:38:b4:da:8b:24:c7:bc:
59:bc:bc:aa:b0:b4:fa:c8:4b:c9:4f:ab:f5:5f:8f:
9e:22:a4:cf:45:a3:6c:23:ae:6d:bc:b2:bc:f3:69:
b0:cd:b8:36:03:c5:e6:8d:b9:aa:e5:50:e8:8c:eb:
e9:92:2e:61:45:95:53:56:a1:3a:8a:8a:95:4d:77:
ac:79:e8:e3:bf:7f:6f:7a:93:2a:bd:0c:30:a2:7c:
ac:ac:22:c1:e3:95:bc:c7:43:39:01:62:e2:d8:b6:
44:23:da:69:58:99:b6:41:40:9b:15:28:b4:2f:52:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:5E:1F:50:03:DE:1D:6F:3E:3E:F8:FC:99:6F:B2:BB:21:44:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlBeH1AD3h1vPj74_JlvsrshRIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:0e:a9:f3:a7:c8:44:9f:f1:67:00:d7:2d:1b:86:06:02:e0:
a9:74:86:a8:b0:00:49:e5:bb:35:1d:77:90:be:cd:79:35:89:
d3:07:af:e9:94:a7:e0:f6:38:f7:d1:4d:c1:2d:f9:fd:60:90:
f9:10:03:63:f2:37:5d:41:a1:60:ea:42:b9:9d:b2:9e:dd:ba:
cf:43:64:3a:9f:1e:d5:96:60:e3:61:25:cd:22:36:70:79:fb:
48:15:84:d3:aa:29:73:33:14:2e:0d:43:dd:d9:6a:a5:db:07:
16:4f:c6:e5:ac:8a:13:db:a1:5e:11:9d:6c:ec:7b:fc:23:54:
f5:db:1d:f3:51:f3:c8:4c:3c:58:d2:73:5c:fd:76:ea:0a:85:
95:bc:ed:11:81:7c:11:2a:43:41:b4:81:83:43:8b:3f:66:a5:
1d:b2:0a:31:43:a6:da:7b:c6:d1:42:f6:78:3a:bb:bd:52:e8:
8d:84:97:4e:ee:da:6e:60:20:8f:96:b9:26:c0:f0:37:b9:36:
61:1e:db:a3:0d:3a:db:e1:64:17:b3:2a:c4:5e:84:76:32:be:
b2:c5:6e:ed:3b:52:13:d2:be:bb:26:04:db:47:25:a3:84:c1:
55:23:c7:b3:c4:87:34:86:92:c9:a9:a6:4a:54:cb:c6:e6:f6:
f3:1d:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:45:50 2025 by rpki-client