Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J9RkVythjLpwGTx2Sna8yeWTu68.roa
File: J9RkVythjLpwGTx2Sna8yeWTu68.roa (raw, json)
Hash identifier: LK0GAwMSmlAQXCg2EF07oeEemrmi4KZ9EXRKV71mfPQ=
Subject key identifier: 27:D4:64:57:2B:61:8C:BA:70:19:3C:76:4A:76:BC:C9:E5:93:BB:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DCCEFD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J9RkVythjLpwGTx2Sna8yeWTu68.roa
Signing time: Sat 26 Feb 2022 06:09:55 +0000
ROA not before: Sat 26 Feb 2022 06:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842147284 (0x6dccefd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 06:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27d464572b618cba70193c764a76bcc9e593bbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:1f:d1:1e:40:70:9e:f4:20:f7:eb:5d:aa:
09:4c:d6:80:c2:df:7c:83:48:23:b4:db:32:65:2c:
26:b7:07:1c:e4:a5:67:22:be:08:81:71:3c:1b:7d:
65:48:f2:3d:45:9c:fb:9d:be:38:3f:0b:c0:d2:5f:
06:97:0b:ed:a7:56:61:0a:57:8c:c9:1e:b5:46:74:
74:a3:fe:12:47:cc:0b:e5:56:f7:ba:f8:cc:22:3d:
c3:0a:96:15:05:58:0e:c4:8b:2a:11:85:88:09:46:
5c:89:52:35:af:e0:4e:43:c6:c9:a7:f2:d1:eb:ba:
52:5e:34:68:77:bc:4e:60:62:85:02:1d:96:62:ba:
c0:1b:cd:f5:bf:8c:02:bb:96:a0:20:45:13:ee:3f:
4b:54:0e:bf:bc:19:69:83:f8:de:c8:1e:22:f3:b2:
f7:b9:0e:f7:87:27:9d:ed:96:06:48:5b:84:7e:05:
d2:c8:c5:34:7f:66:1a:0d:e6:c6:9c:cd:38:c3:43:
50:9a:19:3b:c2:06:2d:d1:0f:0e:95:04:01:ac:76:
d5:59:2c:c9:71:5b:72:6d:43:63:07:2f:8a:62:e2:
ac:dd:60:f3:8c:e4:48:df:e0:c1:81:0e:9b:fe:0c:
22:99:e0:79:9f:ee:1a:6d:84:81:c1:e5:3f:99:b6:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:64:57:2B:61:8C:BA:70:19:3C:76:4A:76:BC:C9:E5:93:BB:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J9RkVythjLpwGTx2Sna8yeWTu68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:a0:f1:5f:d6:5d:7b:97:44:cf:9f:d0:6f:87:0d:ab:48:ce:
2f:4f:89:60:43:c9:24:84:e6:83:41:6f:4d:b7:d8:ba:17:26:
05:fa:7b:d4:8a:0d:24:5c:0b:cc:22:05:43:0d:ce:36:be:f2:
8e:df:53:e3:fa:bc:44:2a:f2:f2:24:e4:ae:b1:67:dd:82:ec:
d9:42:96:15:56:74:2b:91:7e:bb:8f:42:16:c1:21:55:16:5d:
3c:bb:c5:3d:a2:4d:ae:c8:2c:23:07:b2:dc:df:84:e1:cb:25:
cc:67:29:e3:95:ce:ad:e9:88:68:70:47:66:de:99:e8:71:e6:
dc:4a:16:30:9c:26:a7:ae:c3:e9:92:45:24:d5:89:53:60:d1:
a8:3f:53:8b:cf:73:67:5e:b3:5f:93:f7:49:4b:86:44:f3:9d:
7b:21:26:76:a1:dc:c5:c7:eb:07:18:5c:62:39:67:17:8b:cb:
54:d5:04:5c:69:14:5a:d4:e9:ad:f4:a3:39:ff:68:4b:6f:04:
e3:6c:12:01:eb:cb:e5:5a:a6:8b:5d:5f:00:45:d4:1c:90:18:
17:fe:ed:1e:87:9a:cc:35:33:99:35:7a:f4:a0:0d:db:76:8d:
5b:e0:e5:21:3f:4d:0c:1d:51:7f:f6:0e:bb:6a:2c:b5:76:6b:
8a:d3:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:34 2025 by rpki-client