Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5JykBzLIZJl_krcx0Z8iGgLb770.roa
File: 5JykBzLIZJl_krcx0Z8iGgLb770.roa (raw, json)
Hash identifier: MPJIZ8SpXGEVskixFa4n1qd5lUT4PX9B58e1NJx7CbQ=
Subject key identifier: E4:9C:A4:07:32:C8:64:99:7F:92:B7:31:D1:9F:22:1A:02:DB:EF:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018439168E4F9C91ECA5F23ED9322EFEA5A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5JykBzLIZJl_krcx0Z8iGgLb770.roa
Signing time: Wed 02 Nov 2022 16:04:50 +0000
ROA not before: Wed 02 Nov 2022 16:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:3916:17b2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:16:8e:4f:9c:91:ec:a5:f2:3e:d9:32:2e:fe:a5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 16:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e49ca40732c864997f92b731d19f221a02dbefbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:94:12:81:0f:de:83:cf:97:d0:86:36:f8:
17:77:f8:44:b5:3c:30:57:25:c9:ba:7b:b1:9e:87:
de:7b:af:42:20:f8:36:9c:e9:42:06:df:a5:bc:8c:
7e:16:60:84:9d:7e:ea:e5:be:7c:ce:d2:21:3d:b3:
d4:e2:a3:7c:3f:23:a5:1e:6f:17:51:72:b2:6b:96:
f5:72:e2:26:36:20:06:20:3c:4c:b4:d6:7f:ac:8f:
62:0d:8c:66:5f:36:d6:07:c4:4c:bc:18:be:d4:43:
e7:5f:8c:f1:93:df:7d:f2:07:af:b6:6c:80:34:02:
03:51:ef:1a:fb:55:4b:e4:02:55:a3:a6:59:e9:c1:
61:10:a6:35:da:94:44:53:4d:36:4c:31:bb:76:2a:
33:9e:2b:73:77:ec:60:2f:32:72:ed:cc:63:bf:24:
2d:f0:c7:22:94:a3:8a:c8:9d:e1:dc:92:2d:90:a4:
f1:7e:1e:42:83:fa:3c:ae:a0:11:70:fd:54:c7:fc:
49:fc:55:72:4f:5f:cb:6a:08:21:47:52:27:0d:d5:
2c:7f:58:30:8f:54:10:f4:3f:17:a8:3d:0a:9a:1e:
b8:7d:fb:15:5f:ff:e9:0c:72:a5:6f:4b:0a:68:77:
1d:4e:ca:9c:4c:fd:0a:8f:05:82:2e:01:67:19:b0:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:A4:07:32:C8:64:99:7F:92:B7:31:D1:9F:22:1A:02:DB:EF:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5JykBzLIZJl_krcx0Z8iGgLb770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:4d:96:ae:07:04:95:74:dc:2a:3f:87:4b:f5:98:46:6a:7a:
ae:a4:79:a6:30:8e:9d:72:47:23:66:b6:88:8c:7d:30:82:41:
ae:b3:60:1b:36:c6:28:7e:4c:3d:d1:6b:05:68:53:a0:e8:10:
b1:f5:e5:91:5f:85:86:09:15:92:a3:97:46:80:32:99:29:a5:
56:6e:3b:0d:2c:d3:b0:cb:99:7b:d1:e7:f8:41:f0:5a:7b:fa:
d9:27:9b:f3:a0:65:fe:18:57:4e:f8:9d:45:ae:63:c6:ac:42:
03:e0:09:af:c2:f1:36:06:bc:13:4f:e8:3b:a9:53:63:ed:3e:
50:7e:01:03:7e:73:50:0e:43:93:41:ba:05:b1:c0:90:56:06:
01:a2:0a:b7:f0:ad:35:49:d3:a2:ac:80:e9:0d:74:f8:e9:e3:
bd:98:95:73:c2:fd:5d:62:5f:ae:bd:86:4b:ea:6f:6f:3f:47:
8e:a1:3f:06:69:af:ff:3a:fe:2e:17:5c:1b:db:e6:5a:58:a1:
a6:14:9a:92:d6:1a:99:c6:04:a3:8b:3f:e9:25:e0:a3:7d:a2:
95:d5:85:86:92:91:97:ff:77:db:50:41:b4:c8:1f:b1:d4:81:
75:08:70:41:f8:f0:18:7c:61:23:20:ee:b4:a9:d0:7c:02:dc:
03:3e:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:57 2025 by rpki-client