Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Ouz-NGXJW6EPlrwqxidYnbvp8.roa
File: J1Ouz-NGXJW6EPlrwqxidYnbvp8.roa (raw, json)
Hash identifier: XnNs8fRCveCKAe5CSHBftxUSPSedG0O3Geu4HwfbhVU=
Subject key identifier: 27:53:AE:CF:E3:46:5C:95:BA:10:F9:6B:C2:AC:62:75:89:DB:BE:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186093BFF8044E177F15403826037E6FE5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Ouz-NGXJW6EPlrwqxidYnbvp8.roa
Signing time: Tue 31 Jan 2023 19:09:32 +0000
ROA not before: Tue 31 Jan 2023 19:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:09:3b:ff:80:44:e1:77:f1:54:03:82:60:37:e6:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 19:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2753aecfe3465c95ba10f96bc2ac627589dbbe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:12:ff:88:9e:8c:b0:c8:d6:98:fd:49:41:
88:9a:b2:52:e1:29:a2:68:88:0a:62:a8:35:08:5c:
65:7d:ad:be:8c:d2:ea:de:87:95:ec:83:55:50:5c:
c1:51:95:7d:e0:1b:34:a8:41:67:84:bc:0f:59:aa:
56:42:08:f0:87:ba:fc:94:19:58:83:bf:37:7a:20:
67:f2:cc:be:0d:03:40:40:b1:93:9d:41:ef:5e:d0:
da:86:96:9c:15:2e:1d:d5:be:3e:03:10:5a:04:6f:
ce:57:6e:5e:5f:35:8d:44:e1:7f:21:88:9d:96:ed:
6d:e3:a6:d6:1d:bc:0a:94:03:0b:56:22:68:6d:d7:
f6:c0:6d:6f:5a:0a:b3:5b:62:db:e3:dd:0b:f6:ad:
b0:c0:2a:1d:c8:07:c2:3c:c8:a9:c5:0c:14:ef:ca:
e3:dc:35:bb:d2:32:90:29:09:ef:d1:4a:e5:e4:d8:
4f:1a:27:42:5b:fc:0b:bc:d9:da:54:53:90:f7:77:
64:3c:5f:7b:0f:ff:49:d8:12:22:2f:d4:ff:59:cc:
66:73:92:bf:51:0f:cd:b9:46:0a:8d:14:de:6f:41:
7f:6b:b6:99:b3:00:e8:be:ee:43:41:92:76:10:04:
91:8d:a8:4c:97:f7:cb:f0:2a:45:c9:78:d5:86:57:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:AE:CF:E3:46:5C:95:BA:10:F9:6B:C2:AC:62:75:89:DB:BE:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Ouz-NGXJW6EPlrwqxidYnbvp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a6:e6:99:02:91:7e:db:66:e7:dc:1b:9a:56:d4:69:b8:dc:
2c:b9:39:ea:51:78:e6:10:ed:f7:ff:7e:7b:50:71:4a:8c:ab:
1a:aa:12:24:d2:17:22:ed:6f:a2:f8:99:94:cb:22:59:b5:0d:
d2:b7:07:fe:86:11:93:47:e0:79:61:88:19:e7:41:74:83:cd:
22:80:2f:b5:2b:8a:58:2e:a2:a9:36:c2:a5:79:ec:53:04:7e:
b7:61:6a:69:72:78:14:f2:3e:8b:d4:4f:6e:06:23:f1:b2:0e:
dd:cb:61:58:74:ce:bb:00:89:e2:21:28:6e:50:9a:c6:33:e9:
88:b5:0f:46:35:48:99:f6:99:3a:9e:f7:8d:97:56:86:44:62:
7c:0e:7d:0a:ae:46:52:07:b3:a9:86:64:6f:55:29:30:a7:1b:
74:cb:fe:bc:d0:d2:5d:2f:92:dd:8f:0d:12:51:d2:e8:cc:8c:
a6:02:5e:0f:1c:c3:3b:9f:0f:1a:ae:cb:fc:29:e3:fd:81:d3:
43:24:98:43:f9:ae:fc:3d:19:01:05:c5:00:d0:44:5c:ba:59:
64:7e:27:a4:2b:5d:59:4a:66:b8:f5:69:7a:8f:5d:4a:8b:60:
bd:ff:32:89:fd:06:03:e0:48:0e:86:2d:44:23:e7:ee:5b:4e:
96:8d:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:59:54 2025 by rpki-client