Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J4c-oEbKQGpuAUf9GQ0yzqi9b58.roa
File: J4c-oEbKQGpuAUf9GQ0yzqi9b58.roa (raw, json)
Hash identifier: e/ih2B2uWOC2uzBke/GNvzghoX5nX17XDC7buaHcgdw=
Subject key identifier: 27:87:3E:A0:46:CA:40:6A:6E:01:47:FD:19:0D:32:CE:A8:BD:6F:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 745E3135
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J4c-oEbKQGpuAUf9GQ0yzqi9b58.roa
Signing time: Mon 21 Mar 2022 07:11:36 +0000
ROA not before: Mon 21 Mar 2022 07:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952330037 (0x745e3135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 07:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27873ea046ca406a6e0147fd190d32cea8bd6f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:13:eb:02:02:e6:63:b6:e7:b1:b5:b5:fb:
ff:e6:f6:6e:61:c8:74:bc:fd:0c:dd:c9:80:22:41:
08:85:26:42:f4:e8:70:c7:51:fe:51:a1:d4:a8:97:
69:bc:80:86:0a:d6:00:f4:35:36:3c:67:a4:53:3f:
ba:77:da:88:df:f8:c5:2c:8e:82:40:ee:dd:90:17:
f8:f9:d3:f7:c9:6d:a0:cf:bc:ca:42:c0:18:e3:53:
57:08:d1:70:85:0e:81:0d:f5:5d:67:44:f9:f1:98:
72:6d:24:56:0e:b6:f3:31:80:e2:89:19:02:f9:36:
56:8e:1a:f2:08:3c:d7:e9:47:96:77:50:72:7b:1a:
2d:32:f1:ad:c9:91:9f:4f:b2:80:74:ec:6e:d9:dc:
ee:66:a7:c2:cb:01:90:e0:99:30:fe:21:02:b8:bd:
99:92:32:13:e7:34:18:b9:e1:76:10:f8:ee:e3:53:
03:9f:2b:18:fd:2d:8e:a8:c6:84:0c:33:f0:d8:b1:
26:33:53:85:e5:86:30:9f:b5:bb:a2:63:29:46:8f:
44:ae:19:29:cf:a4:3a:c1:79:9e:cb:01:48:ed:13:
12:f4:4d:90:00:41:59:b6:d0:58:d7:19:6d:1e:12:
89:57:1a:df:99:b6:ae:56:27:1c:a0:17:f2:ad:c4:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:3E:A0:46:CA:40:6A:6E:01:47:FD:19:0D:32:CE:A8:BD:6F:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J4c-oEbKQGpuAUf9GQ0yzqi9b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:70:c4:1f:db:3a:e1:3f:56:ef:a4:d3:53:0e:4d:2d:f0:a6:
64:6b:ea:2e:03:2f:a6:4b:81:3b:2e:6d:d7:5d:1f:61:03:fb:
fd:0e:0e:47:f5:d6:8d:59:5b:9b:2e:1f:03:83:cb:ed:04:26:
1e:cb:ef:4a:b0:19:81:ff:93:d4:46:c7:f1:cf:1b:ae:95:1f:
45:c9:4a:55:ed:f9:e2:9d:7b:ed:84:7b:80:6c:a3:c5:09:a8:
03:1b:78:cd:f6:b5:5e:ed:d1:29:03:89:14:82:b2:6e:c1:82:
28:ca:ea:c7:ff:b9:97:7a:fb:63:eb:a6:c0:d5:46:b0:a6:b0:
45:8a:aa:3a:f4:a6:fe:1d:3c:3e:cf:22:73:14:6f:8d:ac:34:
b1:78:c6:1b:6e:35:fb:79:d7:5c:87:4f:b6:af:af:56:88:4f:
c8:83:c6:28:af:90:41:e0:86:c5:39:5e:d7:f6:65:c4:11:e0:
e2:a9:31:f5:41:2b:5e:d2:fd:3e:da:6c:e8:aa:6e:d3:78:6c:
e8:a2:24:d1:31:8a:75:c3:9f:32:af:41:2e:21:0b:99:54:77:
04:a5:2a:45:22:67:1e:4f:99:23:89:c1:6e:e9:4a:01:5f:31:
45:d5:2e:b1:bd:b3:97:01:3f:8d:b1:68:6f:48:50:f9:3d:d9:
56:53:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:01 2025 by rpki-client