Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JBsIJ6ogPQIx6K98Dkeqqw9ScIY.roa
File: JBsIJ6ogPQIx6K98Dkeqqw9ScIY.roa (raw, json)
Hash identifier: vQoFwDUptTmIzRtD3jlMd3eaQQ+56uqessn/44/zTfU=
Subject key identifier: 24:1B:08:27:AA:20:3D:02:31:E8:AF:7C:0E:47:AA:AB:0F:52:70:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850DBB8DE315F366004BD00880D845B51B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JBsIJ6ogPQIx6K98Dkeqqw9ScIY.roa
Signing time: Tue 13 Dec 2022 23:04:33 +0000
ROA not before: Tue 13 Dec 2022 23:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:dbb:325a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:bb:8d:e3:15:f3:66:00:4b:d0:08:80:d8:45:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 23:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=241b0827aa203d0231e8af7c0e47aaab0f527086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:51:c8:af:3a:ce:b9:57:25:6b:7c:86:6e:
c2:fe:65:3b:c8:d7:1b:17:0b:b0:80:e3:48:c1:9e:
34:23:65:25:09:da:37:2a:b2:71:5b:ea:fd:10:9f:
bb:7b:e6:af:bf:21:fc:4b:1c:ae:27:7b:9d:f9:ca:
99:f0:c4:e7:d2:77:32:61:fc:8a:36:29:0b:44:c2:
f9:26:41:72:da:22:9c:07:5b:aa:fa:12:02:bf:5b:
69:e5:27:41:4b:78:10:83:60:a0:cf:da:4a:1e:af:
60:e7:90:21:e0:b5:18:fc:4c:df:00:c2:c9:f4:67:
e6:33:f8:aa:49:69:ea:a8:a7:a4:97:9e:1f:b5:89:
25:aa:5d:09:c4:cf:5f:6b:05:77:a5:b7:0d:73:0f:
54:f4:56:52:9f:20:98:8d:c3:de:d7:88:f0:5d:32:
81:c9:85:06:f1:a9:2c:57:fa:97:d1:2d:40:97:63:
0f:e8:cb:65:aa:37:88:3b:3f:b5:51:6a:82:5f:cf:
05:6b:9e:cb:4c:13:c0:11:52:85:47:fe:89:4b:e5:
24:1e:dd:8d:27:2b:72:d4:7d:7f:f9:83:8d:33:0a:
43:b4:5d:de:ef:ec:70:70:8f:75:85:99:a1:c4:ad:
38:bc:52:5b:10:b1:de:7c:c3:69:df:0c:0b:2e:44:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:08:27:AA:20:3D:02:31:E8:AF:7C:0E:47:AA:AB:0F:52:70:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JBsIJ6ogPQIx6K98Dkeqqw9ScIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:37:47:21:ea:eb:db:74:f7:77:97:a0:bb:e1:ae:72:09:1d:
70:92:0f:a3:5f:3b:54:7a:26:09:48:fe:76:6d:56:e3:f9:2a:
05:26:0a:06:72:2e:12:02:66:67:48:7e:fa:bd:a8:b5:1b:3d:
8f:49:2b:92:b7:64:ef:7f:86:73:3f:b3:18:c7:68:09:12:3c:
a8:b7:3f:4b:34:a1:83:e3:91:7f:4c:e5:fa:d5:6c:e7:8c:07:
f9:af:8f:ff:cb:91:8d:5d:e5:9c:0e:38:fb:01:44:70:db:5c:
bd:01:8f:4d:f8:fc:63:34:54:a9:26:a5:d1:7a:31:8a:ad:c8:
7c:f2:7f:75:09:ba:b4:e3:b1:53:65:77:1f:f0:2a:37:e7:41:
24:02:97:9e:c6:9e:2c:ea:0d:a4:15:79:5d:5c:29:cf:db:1e:
08:e3:e8:a6:dc:f6:bf:a4:0a:92:b3:88:09:49:c8:07:32:2f:
1a:dd:e1:6b:e1:51:72:3a:83:0e:e1:55:5d:a0:17:9d:57:7a:
a8:9c:16:05:a7:fb:d3:9a:e1:ac:c3:87:8b:4d:0f:ed:57:d5:
48:15:c3:83:fa:65:6c:d6:88:75:46:fc:3c:a5:01:68:ed:d1:
1d:66:24:fe:be:63:a7:2b:24:30:cf:c7:ed:30:12:26:93:42:
3a:4b:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:07 2025 by rpki-client