Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1JJ305dGzRC1c1YVYFTtvn1LpiI.roa
File: 1JJ305dGzRC1c1YVYFTtvn1LpiI.roa (raw, json)
Hash identifier: UE5LoMDwiIChaC2Q5gJ4+t+P+WFET3mXiJQZL4bQsus=
Subject key identifier: D4:92:77:D3:97:46:CD:10:B5:73:56:15:60:54:ED:BE:7D:4B:A6:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A371861FB8A595B07883E6CABC185F4F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1JJ305dGzRC1c1YVYFTtvn1LpiI.roa
Signing time: Sun 27 Aug 2023 13:04:19 +0000
ROA not before: Sun 27 Aug 2023 13:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3718:44c7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:18:61:fb:8a:59:5b:07:88:3e:6c:ab:c1:85:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 13:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49277d39746cd10b57356156054edbe7d4ba622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dc:65:0b:2d:37:7e:92:cc:ee:46:f6:c0:41:
56:91:09:14:89:fa:64:70:2c:3e:f8:bd:4c:85:1e:
41:ea:99:d5:d8:b7:5a:a0:de:b5:c9:ee:71:84:50:
47:e4:fc:6e:f3:d2:08:9f:38:e2:6f:8f:53:90:10:
68:af:ad:4d:42:1e:04:e8:57:ad:f9:ec:6a:6b:f9:
01:de:5e:af:c3:2c:3c:f7:f2:7b:95:7f:f3:ac:b0:
f0:c2:ee:a1:ce:b5:87:fe:e4:f9:20:1c:38:14:b5:
d8:50:71:04:67:45:3b:87:a5:1f:09:0b:ae:ba:d2:
8a:77:67:ab:c2:8d:81:4e:1e:98:ff:89:f8:33:f4:
28:43:ad:a2:31:24:8b:3c:1b:6e:52:bd:ed:aa:c9:
6f:84:a1:e5:16:28:68:2d:6d:38:8f:b2:65:c3:90:
6d:ea:ce:5d:23:bb:a4:b9:2a:ec:4d:df:4f:5a:f7:
0e:c8:aa:bc:10:5e:63:8c:ca:39:20:91:27:c0:4e:
4e:4d:6b:3d:5c:ea:e8:df:bf:88:18:ec:9c:d4:d9:
4c:3a:2f:dc:51:bb:c9:e7:71:fb:b4:df:fd:8f:bc:
54:6f:dc:98:8e:93:14:8e:7d:f0:7f:20:87:ca:37:
9e:6b:c7:ea:ff:dd:10:39:03:b4:a1:b3:8a:ed:71:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:77:D3:97:46:CD:10:B5:73:56:15:60:54:ED:BE:7D:4B:A6:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1JJ305dGzRC1c1YVYFTtvn1LpiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a8:74:3d:ca:d8:a9:de:d8:52:af:58:e5:b1:f8:d5:bd:e2:
eb:8f:54:59:f7:77:9b:00:2a:bb:47:49:4d:cc:61:1e:ba:6c:
82:13:9f:01:6a:e2:d7:52:6f:11:57:7f:52:9a:94:47:a6:dc:
6e:7f:fa:45:5b:e3:d7:04:a2:57:1c:9f:0b:c9:8a:d7:32:10:
0a:33:6e:c7:48:ee:99:10:d1:12:4d:d0:35:68:2f:c5:dc:c6:
71:6f:66:e9:87:c7:fe:85:27:7f:18:d2:f8:00:49:0c:0f:c0:
fb:e2:8d:68:ef:9c:b7:0e:a9:9a:3a:d6:89:56:69:5f:fa:b6:
e1:65:16:a7:35:9d:09:5c:05:83:4c:7c:ae:98:24:6a:22:94:
45:98:5e:64:d2:44:d2:2c:41:30:99:4c:12:30:f8:64:c2:54:
cd:76:81:3f:6e:b7:bd:2a:29:99:14:a7:cc:30:e7:00:c8:ac:
4a:a9:e2:60:18:f3:7d:f3:47:20:ca:b9:de:9e:ef:84:65:9b:
69:5d:4a:fd:c1:7a:1b:2f:a0:b0:62:55:a6:f9:47:66:06:16:
d5:24:8b:35:ba:39:41:7c:9b:17:e9:0b:09:d9:55:20:30:66:
88:ea:29:c9:46:d4:a9:83:aa:70:35:0c:75:39:b8:0d:ec:3c:
91:91:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:20 2025 by rpki-client