Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_JmhgMTWjapglpvpqucUPFwVZQ.roa
File: D_JmhgMTWjapglpvpqucUPFwVZQ.roa (raw, json)
Hash identifier: 7A9TgG/iRpSsdztTnjFg/dk76JqjvEH7Mq1+w6BX06E=
Subject key identifier: 0F:F2:66:86:03:13:5A:36:A9:82:5A:6F:A6:AB:9C:50:F1:70:55:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861B44A6A93D4BE6BCF0E30D5F0125C5BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_JmhgMTWjapglpvpqucUPFwVZQ.roa
Signing time: Sat 04 Feb 2023 07:12:09 +0000
ROA not before: Sat 04 Feb 2023 07:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1b:44:a6:a9:3d:4b:e6:bc:f0:e3:0d:5f:01:25:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 07:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ff2668603135a36a9825a6fa6ab9c50f1705594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:80:2c:12:a3:b3:d0:70:e0:91:bb:2a:ed:
02:73:67:69:81:55:49:80:48:65:a8:d5:56:63:47:
c7:7c:fc:2a:58:40:71:75:95:a5:47:a2:27:32:c0:
80:45:0c:31:c7:4a:f1:50:62:d3:14:db:2e:bd:21:
02:fc:6c:aa:9f:e7:c6:86:9a:d9:24:ed:63:ce:5d:
e7:30:5e:1d:f6:2a:8a:64:06:1a:4c:25:a4:35:8a:
b2:9b:01:cd:06:db:5c:6c:36:3f:7f:6d:d5:be:b3:
72:ac:c5:11:61:f6:8b:0e:86:af:45:c8:32:90:9b:
c5:8d:6d:ab:70:7a:6e:5f:e8:5f:c9:7e:16:02:56:
e0:1d:00:a6:78:35:f3:2e:2f:e3:bb:31:61:e1:7d:
40:74:74:57:ed:b3:67:19:c3:f8:af:84:44:a8:41:
19:9a:11:0b:1e:d9:7f:3d:50:f8:4f:2b:b7:6f:e7:
2b:7a:16:74:92:68:c8:d2:4e:87:92:7c:2b:d3:e0:
5b:ed:c7:39:13:ec:72:44:08:4d:65:5f:bd:09:10:
df:62:56:fb:71:3c:59:4c:b8:e2:98:9b:bc:8a:5d:
3c:33:78:ee:01:f7:f6:d6:4a:54:1a:a1:01:44:2a:
89:a5:4f:52:9c:b6:6d:6d:0d:08:38:c9:64:a6:64:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:66:86:03:13:5A:36:A9:82:5A:6F:A6:AB:9C:50:F1:70:55:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_JmhgMTWjapglpvpqucUPFwVZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:26:a0:80:ef:61:8d:44:e7:6f:38:fd:ab:4f:31:fb:7e:c7:
ff:09:41:9a:0d:7a:f7:9e:a7:d6:c3:e1:0a:2a:a3:8d:3b:83:
23:ff:87:7c:2c:37:c8:75:81:9d:be:63:77:9a:3e:af:b5:c7:
bb:e0:0f:c4:06:bd:40:af:42:9f:9d:e6:6b:9b:45:49:d6:15:
18:92:1b:dc:26:9c:2a:00:1b:b5:c2:4b:75:d8:e5:d3:90:e8:
0b:ec:14:fb:fb:a3:34:e3:5a:9a:98:a2:37:03:40:f5:b6:7b:
46:85:6f:b1:56:57:12:1c:c8:90:92:e2:81:1f:c3:e6:2f:ef:
33:c1:64:2e:fc:f8:ca:55:b2:34:f2:f5:44:58:de:db:82:8b:
18:ac:c3:08:46:9f:b7:42:ee:81:24:f7:3d:2c:17:f4:09:04:
ba:cf:94:4f:85:11:0a:1e:63:8d:b3:16:8c:80:9d:74:d7:ed:
61:7d:ca:01:fb:0f:d8:bc:5c:e2:43:a4:20:03:9c:73:95:c5:
17:4b:8d:6a:16:1c:80:e8:78:6c:de:c6:9f:77:73:0a:0c:12:
45:26:37:0d:2d:67:11:1d:aa:0e:dd:c5:58:bb:5a:d8:72:54:
33:c7:44:35:2f:5c:4b:ea:93:d2:03:02:47:de:1c:a4:6d:5d:
e4:ba:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:28:56 2025 by rpki-client