Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5DfDTgdeKNrCP8jjVK3j8C5rzU.roa
File: J5DfDTgdeKNrCP8jjVK3j8C5rzU.roa (raw, json)
Hash identifier: nXqUWB6FoPYrT5kAoWzPnEp9nJiQdQDzNovBfY3h7CQ=
Subject key identifier: 27:90:DF:0D:38:1D:78:A3:6B:08:FF:23:8D:52:B7:8F:C0:B9:AF:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C263E65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5DfDTgdeKNrCP8jjVK3j8C5rzU.roa
Signing time: Sun 20 Feb 2022 03:08:26 +0000
ROA not before: Sun 20 Feb 2022 03:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814445669 (0x6c263e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 03:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2790df0d381d78a36b08ff238d52b78fc0b9af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:1b:94:a1:a1:95:d6:a3:a5:06:c6:99:89:
62:ab:78:48:1a:9a:30:5f:95:8b:0e:28:86:65:23:
43:cb:ad:af:55:83:b7:8f:48:82:da:85:8b:2c:e7:
ac:c4:45:03:dc:d4:9c:77:4a:af:bd:79:15:08:ea:
d7:6c:d4:a3:59:83:3a:22:67:de:f2:2e:d0:22:07:
e2:d0:2f:04:81:1f:0f:8e:c6:dd:5f:3a:61:a1:f7:
e7:e6:df:01:9a:ac:05:b5:5b:cc:45:7d:e3:7f:75:
d2:20:b6:8a:e9:b1:3c:ea:c8:e0:4b:42:61:6c:a3:
73:34:39:28:4e:71:f3:51:6a:2b:56:92:b6:18:ae:
c7:de:6d:8a:a5:ff:cc:f0:22:5e:87:51:24:ce:2d:
ad:22:de:1e:94:f1:41:ca:f2:21:86:f4:c5:65:70:
d8:5a:84:df:1c:bf:1a:d0:46:71:a3:3a:de:c1:29:
1d:c8:21:95:c7:eb:02:90:b2:09:96:d4:e3:b4:3f:
2d:e1:42:e8:15:f2:16:f8:cf:8a:3c:b4:66:4d:d5:
4f:ea:70:1b:c4:66:93:5c:e7:a3:7e:cd:e2:f7:ae:
cb:ec:02:3c:13:43:48:32:8e:43:a5:28:45:b8:a7:
94:51:e7:e2:9d:0a:c2:b1:b2:4e:4c:11:c0:19:09:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:DF:0D:38:1D:78:A3:6B:08:FF:23:8D:52:B7:8F:C0:B9:AF:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5DfDTgdeKNrCP8jjVK3j8C5rzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f9:02:20:f2:dd:d8:83:7e:2c:07:99:7c:bb:fe:12:04:ac:
e8:73:0a:80:cb:40:79:ec:c3:f1:7b:75:11:1a:47:0c:8a:75:
42:fd:e8:29:ee:a2:ff:49:bd:f5:d1:84:ab:31:db:6a:e1:32:
4a:c6:f3:a0:80:62:4d:bd:2a:93:e6:d3:ee:47:64:27:2a:a4:
ce:4f:e7:02:9c:5d:fa:3c:53:b2:b1:41:57:69:88:dc:d7:66:
7b:73:d3:b8:d0:ab:93:60:d4:dd:fa:4a:db:ea:cc:1c:4b:70:
5c:c2:da:31:70:b5:4a:71:70:0b:73:26:e7:c6:ca:1b:b5:33:
8a:01:9e:ed:98:6f:78:08:ac:11:5b:ce:41:be:3f:4b:52:72:
16:cb:a9:26:26:91:d4:69:81:5a:ff:b4:94:c7:ec:6d:9a:03:
2a:bc:59:3f:73:3b:26:12:49:f0:4d:ce:c0:b0:eb:be:f3:a2:
f0:c6:e7:cd:be:75:50:58:5b:02:0d:ab:f5:4f:13:75:cf:f6:
29:94:6e:56:b1:28:a4:58:2a:a7:2a:01:c6:72:f1:b3:12:63:
7b:76:1f:59:9b:53:d5:cf:55:a2:4f:cf:c3:19:d0:71:ad:81:
96:65:37:a1:79:e1:86:6d:1b:95:c0:15:a6:27:35:f9:28:77:
9c:ce:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:00:41 2025 by rpki-client