Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8nD8LAciIL9rMyar7c7yQowMAc.roa
File: J8nD8LAciIL9rMyar7c7yQowMAc.roa (raw, json)
Hash identifier: KjIxoANyiUr2VzYteV2E3QYilo5kcr8qD9dvcuvSdDs=
Subject key identifier: 27:C9:C3:F0:B0:1C:88:82:FD:AC:CC:9A:AF:B7:3B:C9:0A:30:30:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E1C92FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8nD8LAciIL9rMyar7c7yQowMAc.roa
Signing time: Sun 27 Feb 2022 08:09:15 +0000
ROA not before: Sun 27 Feb 2022 08:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847366397 (0x6e1c92fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 08:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c9c3f0b01c8882fdaccc9aafb73bc90a303007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:2b:0a:65:67:0a:20:69:d4:0a:87:e0:00:
56:51:a8:df:20:84:b0:b6:2b:ff:8a:04:e9:dd:6d:
7c:43:a3:3e:bb:78:5e:ea:71:18:ef:f4:70:38:8b:
f6:23:22:a9:72:2e:93:22:ec:54:20:90:2d:39:94:
80:3b:23:d5:5a:77:15:33:0e:5c:3c:f4:e0:62:d1:
f5:28:fb:c9:6c:f1:52:b1:79:38:35:c1:b5:4d:f5:
d6:c0:63:65:13:55:69:37:8c:1e:51:7a:af:2a:8d:
0d:9b:46:73:0a:c6:58:2d:1b:7a:bc:22:3f:1c:4d:
14:6f:16:24:98:68:c4:bc:56:52:6a:fd:2b:eb:d7:
e1:ad:6a:d0:31:4c:7c:18:48:6d:83:f1:a3:70:2e:
e8:f0:83:bd:00:6f:94:30:9f:13:4a:3d:89:dc:92:
4a:7a:b8:82:df:9c:d7:b9:a0:67:5d:cf:29:20:f9:
45:ef:d5:76:4c:d1:8c:cd:6b:bc:c8:29:54:2d:95:
17:c7:96:c3:df:a3:3e:d3:91:26:a1:18:3d:e7:2c:
d1:28:f8:44:6e:7e:4d:ac:05:e3:c5:a6:24:49:3d:
d4:01:95:b9:5b:13:45:e5:41:46:8c:e3:9c:57:5f:
f4:cc:32:fe:5d:76:1c:36:6b:0c:d9:c8:fa:79:7e:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:C3:F0:B0:1C:88:82:FD:AC:CC:9A:AF:B7:3B:C9:0A:30:30:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8nD8LAciIL9rMyar7c7yQowMAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:90:55:1f:ca:a0:22:7c:18:b9:fb:d2:8c:c0:42:bc:4f:b2:
c3:4b:37:bb:9e:a6:00:7c:7b:39:ed:37:0c:60:55:d2:c4:3f:
05:48:bb:2d:80:0b:f9:77:ad:57:cc:05:d0:13:69:73:1f:55:
f1:0f:f5:03:5b:38:14:c4:62:5d:5c:6d:1e:08:9d:e9:a2:d8:
97:a2:6f:50:2b:9e:f5:37:4d:95:bd:59:de:29:82:1d:b1:b2:
10:9e:f0:26:5d:a1:d7:9c:1a:a0:59:8d:c9:00:39:d2:1d:04:
41:74:1d:58:ee:c0:ff:19:c6:64:a0:ef:82:07:ff:91:07:e7:
dc:74:ef:29:d4:b7:dc:2f:6b:80:77:26:18:58:8f:33:e1:3c:
0d:a4:13:9c:20:4a:d3:20:73:81:5c:be:fd:47:7e:d5:02:25:
2f:ad:1f:75:4f:f8:3e:7f:e2:e7:79:bf:05:3d:33:ee:07:c5:
61:bd:a0:ff:98:e2:e5:ee:9b:ac:76:46:89:33:1f:c2:aa:4e:
41:01:3e:7e:7e:30:cd:60:7c:2a:55:a0:11:85:58:e3:01:df:
86:27:a5:52:ab:dc:d0:b2:0c:97:82:c8:f6:1e:b9:9d:c2:25:
77:fe:d3:8f:fd:db:f5:d0:6c:00:d5:82:21:b1:e1:39:81:1f:
23:cc:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:37 2025 by rpki-client