Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JADrt2--Oa0pSiDIZeHaoiCGqsU.roa
File: JADrt2--Oa0pSiDIZeHaoiCGqsU.roa (raw, json)
Hash identifier: 5H1vZNbytg+wTL5Xea4MwmQ2shWJzYpxFi0iNLtxI9c=
Subject key identifier: 24:00:EB:B7:6F:BE:39:AD:29:4A:20:C8:65:E1:DA:A2:20:86:AA:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69CD4D38
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JADrt2--Oa0pSiDIZeHaoiCGqsU.roa
Signing time: Fri 11 Feb 2022 20:09:29 +0000
ROA not before: Fri 11 Feb 2022 20:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775062328 (0x69cd4d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 20:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2400ebb76fbe39ad294a20c865e1daa22086aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:63:32:ab:df:14:b2:89:aa:1e:b8:ff:2f:
d3:45:72:bd:7d:fc:29:27:5e:6c:ec:12:84:27:12:
a2:5c:00:f7:18:da:11:ff:af:ec:bf:83:ea:b0:34:
e9:7e:49:a1:c1:1b:c5:68:ef:e8:8e:46:40:eb:c1:
b0:70:26:27:56:d3:67:f5:08:8d:08:05:d2:cb:88:
ff:91:af:b3:57:8d:54:b1:d0:44:a9:6a:07:2f:76:
95:10:9e:5b:f0:04:af:d4:0b:1e:97:3a:4f:ef:0f:
a4:d6:26:c5:2a:d2:ff:30:c8:1e:56:58:40:cf:a9:
2d:16:26:90:8c:d1:20:c2:a0:c2:b0:e2:74:25:31:
b9:77:00:c5:9f:99:d1:72:69:7f:bd:23:d7:f3:e3:
14:f0:b3:16:14:c3:e3:e1:70:7a:a7:e0:64:e4:e4:
f1:8e:db:0d:75:ac:19:c6:21:d2:fb:30:eb:45:7c:
df:45:c1:0f:ea:30:bd:8f:3e:9b:32:e9:da:86:b2:
3c:f7:20:44:2a:da:5a:53:4d:d9:6b:e4:e8:24:2a:
c4:fe:95:45:45:83:49:01:b9:33:63:bc:f6:43:bf:
19:4c:e9:ff:53:c9:39:e9:9a:19:40:b1:a0:03:35:
ee:ca:1a:cd:39:ee:8d:f4:28:78:d5:7f:e6:09:3f:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:EB:B7:6F:BE:39:AD:29:4A:20:C8:65:E1:DA:A2:20:86:AA:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JADrt2--Oa0pSiDIZeHaoiCGqsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:15:26:15:39:5f:68:49:c0:fe:ad:c3:81:ab:b0:ae:bb:36:
64:93:ec:32:ba:4d:5d:79:b1:4f:e6:28:7e:dd:bf:78:4f:c7:
7a:0d:68:72:1b:80:3a:5b:4f:28:28:f6:d1:c9:e6:c6:4b:30:
8e:87:e5:b7:2b:d2:fc:9e:1e:64:5b:33:1d:34:b6:02:fc:01:
35:d4:cd:e3:9a:e6:77:82:a0:02:89:35:ae:7a:1e:ac:a6:ee:
82:b5:b8:86:5c:6d:d9:7c:a9:cb:28:bc:c5:69:78:c9:18:e3:
d9:a8:3e:9b:4c:c5:8c:dc:de:72:f5:41:de:6b:fa:7d:01:74:
58:00:67:5f:79:1b:84:d7:e7:f7:b2:9c:7a:36:39:40:e5:c7:
97:e7:b1:36:54:79:25:3f:8b:35:7d:63:05:1b:80:d8:5d:85:
47:6e:51:7f:64:9e:63:c5:9d:f4:73:ec:07:3b:25:c1:bb:03:
51:6d:87:18:d7:86:18:0a:7f:67:54:a4:72:25:46:6b:ff:14:
c7:d0:77:9c:c7:fe:01:35:aa:9f:80:03:8a:15:ca:1b:b1:59:
e6:a4:90:c7:43:e0:6b:64:60:b9:e3:33:70:64:35:94:53:a1:
78:31:a8:75:22:fb:98:b5:89:b9:f9:9b:a6:d5:39:6f:f2:d8:
35:ee:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:33:51 2025 by rpki-client