Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JB_OvdOeig55OI6qegtx3mK-ut8.roa
File: JB_OvdOeig55OI6qegtx3mK-ut8.roa (raw, json)
Hash identifier: H5XP9uHJWYXFubJL50NM1xtxpi1xoIuf4n6GS24xz0c=
Subject key identifier: 24:1F:CE:BD:D3:9E:8A:0E:79:38:8E:AA:7A:0B:71:DE:62:BE:BA:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7083CBC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JB_OvdOeig55OI6qegtx3mK-ut8.roa
Signing time: Mon 07 Mar 2022 14:10:28 +0000
ROA not before: Mon 07 Mar 2022 14:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887685573 (0x7083cbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 14:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=241fcebdd39e8a0e79388eaa7a0b71de62bebadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:9c:d1:64:92:64:af:54:d0:85:a4:0b:77:
83:7f:d9:f2:e8:6c:46:ba:a3:6a:1c:1c:0c:bc:2b:
c4:b2:02:ba:c3:6f:63:e3:98:d8:0b:27:d7:04:f9:
b6:1f:cb:1b:8e:9b:f6:09:20:25:8c:de:c9:7f:9c:
e3:96:fe:5b:2e:79:57:23:23:8d:78:39:5d:e3:c8:
83:da:80:01:8b:b3:72:0b:71:2e:0a:1f:dd:b1:fa:
81:ad:c2:b3:1d:74:9d:47:e1:39:13:a0:76:9b:c6:
b4:02:f8:49:64:1a:fe:c9:c3:f9:d8:77:e5:10:03:
26:fd:44:31:94:b7:90:94:5f:fb:0a:77:0b:fa:ef:
da:ab:76:8a:bf:f0:c2:bb:ad:bb:c4:dc:b2:97:ea:
e7:c0:63:ab:15:03:e3:c0:94:7a:a5:b5:63:96:a6:
11:64:11:4b:6d:f6:b8:c4:1d:79:ee:21:5c:7a:7d:
2e:70:dc:11:92:58:01:0f:17:39:93:7f:57:00:07:
98:a3:58:2e:4b:8a:42:1a:87:d0:f3:e7:de:4a:74:
b3:98:c2:c0:da:12:a5:d4:5d:13:d7:cd:60:3c:d5:
dd:ec:37:f7:1a:0c:18:78:cf:35:2a:1a:8e:19:c1:
e5:a6:b9:58:e7:39:11:13:bc:b1:e7:52:8e:e3:9b:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:CE:BD:D3:9E:8A:0E:79:38:8E:AA:7A:0B:71:DE:62:BE:BA:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JB_OvdOeig55OI6qegtx3mK-ut8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:78:33:3f:0d:bb:9d:31:54:56:ee:17:a8:5a:33:1c:44:6e:
e7:f6:21:ac:9f:dc:bf:1c:27:e5:96:07:8d:6b:98:36:36:26:
c6:07:2a:12:c6:06:d4:7e:4f:91:37:63:da:b0:80:b4:32:8a:
06:af:d8:09:7b:ce:94:7c:85:5b:16:30:83:2e:31:e3:df:0c:
26:44:75:0a:52:8d:e9:d3:75:25:36:65:17:21:7b:fe:cc:28:
98:6b:e0:4a:b4:0a:ec:78:c2:c6:c1:bc:71:1b:08:5e:83:13:
47:c2:c0:ac:98:5e:2b:6b:be:de:f2:03:cc:6b:d7:05:69:e8:
d2:f0:35:91:26:46:e0:bf:fd:ed:1a:47:28:e7:7e:2b:50:fd:
9e:24:74:5c:2d:70:d8:09:b8:98:fa:2d:88:9c:1c:5b:a3:c7:
40:95:f5:43:ee:67:de:2a:c7:ad:fd:5f:95:07:27:d7:5c:4d:
0e:50:37:95:e0:bf:28:d0:df:fd:a8:bd:4a:45:d5:5c:96:ec:
a7:44:5e:cb:06:12:77:07:99:bf:19:ef:eb:32:c1:d8:20:c9:
85:40:a1:16:8e:ee:18:43:b3:a6:0f:8c:83:72:0a:a5:c2:7b:
0e:db:49:5c:ac:79:cd:eb:23:09:72:19:49:3a:ba:74:6f:48:
4f:25:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:15 2025 by rpki-client