Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/239JHG3BPnSZbXm1egyMMDx_TUw.roa
File: 239JHG3BPnSZbXm1egyMMDx_TUw.roa (raw, json)
Hash identifier: B8oS8Yg3M/zo580n4hOhD/7nlkyYfBu+Tv7zZzLsrY8=
Subject key identifier: DB:7F:49:1C:6D:C1:3E:74:99:6D:79:B5:7A:0C:8C:30:3C:7F:4D:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018527839D6B4DFDDFD5E6CC95C073573768
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/239JHG3BPnSZbXm1egyMMDx_TUw.roa
Signing time: Sun 18 Dec 2022 23:13:35 +0000
ROA not before: Sun 18 Dec 2022 23:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:83:9d:6b:4d:fd:df:d5:e6:cc:95:c0:73:57:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 23:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7f491c6dc13e74996d79b57a0c8c303c7f4d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:8a:fe:d2:a8:c3:e8:48:a1:e6:5e:72:bf:
b0:ec:be:51:85:70:81:9b:7d:7b:d0:96:4a:04:f2:
0c:e6:47:20:d3:cd:9b:d8:3a:ff:69:64:bb:37:4c:
b5:9a:3d:fc:83:df:83:99:93:67:60:ed:ff:f2:ce:
18:69:39:e8:53:2b:de:26:c2:ea:2a:b9:79:b4:5a:
17:01:b7:9f:da:77:49:b8:39:28:49:51:7b:2e:17:
99:e1:44:7c:ca:35:b4:79:0b:91:76:58:02:f3:18:
3a:9e:a2:77:dc:53:2f:3b:85:2e:f6:47:df:a7:5e:
40:ad:dd:af:42:54:6d:58:88:20:45:bf:e8:a7:0c:
85:da:b0:28:00:ab:8c:e1:d0:2f:df:74:ee:ff:76:
0d:a3:e1:77:bb:5c:73:64:25:16:f8:a0:b4:62:2e:
1f:e4:95:ce:6c:0c:11:ba:a3:cb:c8:d5:ad:44:74:
ca:38:bf:d9:7f:f8:c8:4a:7c:91:7d:83:b3:e1:6d:
b7:83:2e:8f:17:5c:35:07:21:45:a4:9c:55:c2:60:
25:2e:3a:a8:ad:e9:18:f1:8a:fb:51:a8:be:55:44:
04:de:be:39:b0:7c:bb:74:ef:a9:07:c8:e7:30:3a:
49:53:7a:1d:d7:b0:b5:29:0c:9e:72:fd:26:21:dc:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:49:1C:6D:C1:3E:74:99:6D:79:B5:7A:0C:8C:30:3C:7F:4D:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/239JHG3BPnSZbXm1egyMMDx_TUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:05:fc:d0:d8:76:5a:fa:70:4e:b9:e4:8f:7c:f2:fc:4f:9b:
2b:76:f4:61:69:de:3b:05:c3:c6:7c:a0:be:fc:b7:ef:ff:a4:
a3:0c:98:64:18:22:11:07:c4:c5:2f:9b:dd:20:89:b2:5e:94:
a4:11:98:3d:ab:c8:ac:82:d8:e0:c7:3a:f3:e0:4c:22:c3:01:
0b:bb:65:ba:da:09:cd:50:83:77:6f:8c:fe:2b:41:df:47:81:
f6:e6:c8:93:f3:c1:21:88:d3:7d:97:cd:25:ba:02:53:11:90:
bb:14:a5:75:98:64:cb:8c:60:eb:56:ce:c6:03:cf:90:09:8a:
b6:7f:a3:06:48:d1:e0:19:85:98:db:9e:f1:60:39:16:44:f2:
fa:51:74:9e:53:c4:a4:8b:0f:15:cb:23:26:35:23:26:e0:66:
12:0c:1d:c3:57:28:5b:8c:71:f0:a4:df:3e:f8:15:0e:51:bd:
b0:51:7e:0f:de:1b:a2:32:7f:0d:64:e5:72:08:28:7b:aa:11:
f3:39:df:81:6e:29:48:c8:1f:7b:54:ed:e7:e0:39:f5:b8:4e:
02:86:b4:0f:3f:26:4f:5f:5f:6e:77:d6:53:f6:8a:00:fe:b0:
46:c6:18:03:3f:eb:5a:50:6c:a2:7c:25:c6:38:44:84:57:66:
4a:d6:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:35:13 2025 by rpki-client