Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JCIIT9hqAM_MboldzazVC_bytRI.roa
File: JCIIT9hqAM_MboldzazVC_bytRI.roa (raw, json)
Hash identifier: xeIqyI4YCES+RknVPnx7z6C1eYpC9JdzNEo8YMclxik=
Subject key identifier: 24:22:08:4F:D8:6A:00:CF:CC:6E:89:5D:CD:AC:D5:0B:F6:F2:B5:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8980F83D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JCIIT9hqAM_MboldzazVC_bytRI.roa
Signing time: Fri 03 Jun 2022 06:09:20 +0000
ROA not before: Fri 03 Jun 2022 06:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306930749 (0x8980f83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 06:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2422084fd86a00cfcc6e895dcdacd50bf6f2b512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:6e:c4:81:eb:cb:25:96:fb:d0:1b:29:b4:
12:4f:38:8f:f2:61:32:84:79:ae:01:7c:36:07:df:
df:13:82:09:8b:03:3c:b5:57:00:db:f3:42:9d:ec:
64:19:92:be:9a:a1:9f:a1:ab:77:66:e9:29:ad:a9:
d1:07:07:b1:bc:73:2a:f2:b4:44:6f:1b:1d:5e:28:
2f:a4:e5:29:8d:55:d3:39:0d:da:13:39:80:5c:c1:
4d:f5:b3:89:d9:52:4d:ff:ae:dd:58:e5:b6:b8:6f:
fb:22:e2:a3:b8:80:69:33:e0:c9:12:d0:69:ac:ad:
55:60:35:6b:be:4d:75:c0:e3:b8:00:27:a9:c1:e8:
77:bb:9c:ac:5e:f6:82:d1:f1:8c:b1:9f:51:24:d6:
3c:43:6a:39:e5:53:ba:a5:4b:33:47:3f:5e:8f:c0:
64:4d:43:18:90:32:08:94:50:c6:9d:92:72:de:d5:
65:55:cd:8f:cf:e8:f7:04:72:e6:ff:3c:a6:79:a2:
90:f0:19:c0:b6:e7:1c:cf:b2:d2:34:70:d0:66:91:
c0:ab:fe:7e:f3:8d:d2:f8:ac:c2:67:71:66:f3:d6:
4a:15:96:c4:be:74:06:9e:9d:b8:a0:5a:18:f7:fd:
20:98:fe:96:82:2f:cd:f6:9b:78:f4:80:79:5f:32:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:08:4F:D8:6A:00:CF:CC:6E:89:5D:CD:AC:D5:0B:F6:F2:B5:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JCIIT9hqAM_MboldzazVC_bytRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:93:e9:c9:07:26:ea:6e:9d:4e:dc:1f:6f:22:c3:77:9f:07:
a5:50:92:32:72:d8:69:d3:db:f4:d5:65:51:92:e9:5f:96:d2:
4f:f9:4a:f2:9c:85:d1:42:75:8a:18:ba:49:7c:74:c0:bf:b9:
c2:3b:1d:7c:7a:a4:50:d2:1f:dd:be:08:ee:09:cb:32:14:a9:
f0:0c:45:ff:a7:bb:93:ca:ab:a7:c0:a3:ff:41:98:59:78:f7:
a7:57:b6:68:ce:f4:81:2d:ac:40:96:fd:2b:27:c1:92:df:f8:
73:ca:a5:fe:18:fc:ae:8c:79:94:1d:a8:f3:e9:4a:f0:2b:b9:
24:d5:8f:8a:e8:02:b6:2d:ab:12:67:bc:b0:4d:b8:46:2d:a9:
d1:a6:d0:b0:51:07:67:57:43:f1:99:67:63:63:87:ca:46:fa:
70:1c:42:23:2a:b1:e3:05:39:9c:7c:0e:51:99:e7:35:c9:f2:
0b:cc:ef:96:4a:2e:f0:18:d4:47:fd:10:0a:d8:4c:2d:dd:8e:
43:98:65:e9:f2:f6:86:f8:d7:5a:de:f8:48:e5:7f:bd:85:e7:
b0:dd:58:ce:79:7e:e5:d8:d7:64:80:b4:ed:68:c2:f2:3e:b8:
65:7e:0b:8a:18:74:c5:6b:fc:64:14:cc:84:89:5e:c0:36:91:
39:10:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:44 2025 by rpki-client