Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0JNwMEwOAZE2R6y1PA8Yj37fNMI.roa
File: 0JNwMEwOAZE2R6y1PA8Yj37fNMI.roa (raw, json)
Hash identifier: go6yP6W4l2O+eti96KU3NOeAcPlSGVLrvjQpFbOcxZQ=
Subject key identifier: D0:93:70:30:4C:0E:01:91:36:47:AC:B5:3C:0F:18:8F:7E:DF:34:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D7B9207AFA4408E3F1BFEFE47D708D6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0JNwMEwOAZE2R6y1PA8Yj37fNMI.roa
Signing time: Fri 14 Oct 2022 18:19:37 +0000
ROA not before: Fri 14 Oct 2022 18:19:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:b9:20:7a:fa:44:08:e3:f1:bf:ef:e4:7d:70:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 18:19:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d09370304c0e01913647acb53c0f188f7edf34c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:9e:c5:62:52:89:ec:fd:ea:44:1a:74:fa:
f2:70:34:48:62:79:2d:91:7e:bc:79:57:c2:d9:83:
26:a2:87:8a:36:ae:6a:cb:96:60:b3:3f:6a:b9:63:
fb:6d:11:5a:4d:87:1e:d9:ae:6a:87:11:89:4a:3a:
69:2a:fa:2f:8e:83:2a:a6:62:f3:8b:8f:01:3c:42:
cc:aa:fe:aa:ef:4e:84:06:6e:40:7d:09:35:6a:a8:
d2:34:1f:e0:21:cd:36:4e:20:ef:fa:16:9b:8b:7b:
ab:8b:5d:15:ba:7a:15:f5:00:75:68:4d:59:44:a6:
72:de:9f:dc:c9:30:55:70:f0:05:e0:c1:22:d5:65:
ff:b4:d1:20:a5:c8:e6:c6:5f:13:38:83:95:16:f5:
c2:58:4b:1f:99:f1:51:fd:20:5d:c0:d3:54:57:98:
09:dc:7c:96:f6:53:68:05:b2:37:80:f3:03:d6:5c:
7a:b7:42:66:10:66:85:aa:20:f3:75:d8:7c:c7:78:
99:13:60:c1:fc:76:ea:6e:89:3c:aa:de:88:42:d2:
8f:6f:e8:42:f0:21:dc:85:6f:5e:9d:2e:33:fe:a5:
b3:c4:0b:91:0c:27:e3:d0:25:f0:bf:76:24:07:0a:
47:b0:14:fa:99:a3:eb:4f:b4:d1:70:c2:ad:23:63:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:70:30:4C:0E:01:91:36:47:AC:B5:3C:0F:18:8F:7E:DF:34:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0JNwMEwOAZE2R6y1PA8Yj37fNMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:5f:f7:f4:e4:61:a8:3e:bf:3d:75:14:ca:64:63:04:91:7c:
bd:68:79:ee:2b:53:a2:4f:04:e7:96:25:0e:2c:e7:7d:25:b8:
77:83:f4:c3:a4:ac:a1:3f:b9:c4:a5:bf:d0:c1:75:22:95:b1:
8a:57:a0:9b:a1:d6:0c:3d:62:c5:8f:cb:63:2e:80:0b:60:7a:
53:74:00:b4:58:30:ab:3a:25:df:1d:6d:e7:a4:03:ac:41:7c:
df:fd:b4:8a:96:11:f9:4a:78:34:dc:10:67:ec:6d:6d:0e:ee:
3e:da:01:bc:bb:8a:23:10:e8:cc:64:8e:75:e0:83:0a:36:af:
d3:30:32:5f:61:99:a5:73:63:c8:2d:67:9e:44:39:e8:cf:f9:
cb:68:1d:2b:c0:cb:42:80:00:0b:42:e9:fc:70:a5:6c:04:c3:
9d:71:8f:fd:d5:aa:a0:4b:b4:c1:64:e9:91:40:b6:00:f5:bb:
54:57:a3:87:41:07:1f:83:4a:78:05:cc:cb:1e:46:a3:b2:e1:
32:a1:fa:9d:8a:de:ce:00:63:f5:87:2f:14:87:fd:25:c3:73:
0b:a7:71:dd:84:c7:94:a8:53:f2:d0:8d:3f:2c:46:2b:71:98:
19:3b:7a:36:d7:15:d7:f6:7a:f2:68:b8:67:fd:4f:cd:ed:cf:
17:22:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:54 2025 by rpki-client