Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JErEqLQKh9q-zH7vpDuPhBWr2_w.roa
File: JErEqLQKh9q-zH7vpDuPhBWr2_w.roa (raw, json)
Hash identifier: oanUoxmddE12NIugYMQ0nGXdbzSzHFuO2DVLfxp0riY=
Subject key identifier: 24:4A:C4:A8:B4:0A:87:DA:BE:CC:7E:EF:A4:3B:8F:84:15:AB:DB:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E5666DAE659B9C8CCDC7CEFDBC5F019B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JErEqLQKh9q-zH7vpDuPhBWr2_w.roa
Signing time: Tue 24 Jan 2023 20:09:33 +0000
ROA not before: Tue 24 Jan 2023 20:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:66:6d:ae:65:9b:9c:8c:cd:c7:ce:fd:bc:5f:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 20:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244ac4a8b40a87dabecc7eefa43b8f8415abdbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:f4:8e:79:1c:01:6b:5c:f4:55:e6:0b:59:
6f:b0:e1:ac:4b:01:d6:70:a3:84:45:56:69:d7:1c:
cc:82:46:f7:4b:5d:34:48:50:25:db:6b:0c:78:f7:
76:fb:4c:27:eb:15:e0:0b:43:61:e6:9d:29:65:8d:
1f:a2:b5:00:f1:6a:f9:49:f0:57:83:14:33:35:8f:
a4:b9:af:dd:df:d1:e6:30:ca:4b:9a:bc:bf:94:81:
c2:fa:43:92:12:83:74:d8:9d:6f:39:3c:0a:94:48:
1e:04:82:31:5f:49:1d:44:6f:2d:d4:3b:5b:86:ed:
34:e2:c9:ce:ce:fa:68:a4:c4:eb:d6:3c:1c:36:fb:
56:b3:69:94:47:f5:ff:80:c5:a3:ec:b0:90:40:a8:
5f:77:cc:80:43:a2:04:19:8f:21:8f:f6:53:0d:70:
e5:ec:15:72:30:7c:bb:2d:a0:ea:89:f2:49:0d:bd:
39:9b:b9:39:47:f5:4a:35:24:e1:84:e0:30:e4:fb:
e6:b2:d0:4e:3b:3d:44:62:bd:ae:dc:51:2e:3a:f5:
a1:db:b3:91:b2:24:f2:24:f0:15:95:71:c0:ff:88:
6c:ce:e3:fc:d7:07:60:6f:b2:70:75:04:bb:7f:5f:
16:01:25:46:0e:26:81:b8:d5:5d:c9:21:2c:e7:40:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:C4:A8:B4:0A:87:DA:BE:CC:7E:EF:A4:3B:8F:84:15:AB:DB:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JErEqLQKh9q-zH7vpDuPhBWr2_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:d4:9a:09:63:06:72:de:60:7d:e6:9d:38:a8:0f:20:b0:c7:
88:8f:83:ed:da:fe:72:25:3e:cb:6b:69:b4:44:bd:33:1d:fd:
71:d3:0c:3d:95:8f:93:03:f9:93:2a:08:19:9c:77:65:5b:a7:
f6:58:b4:64:2a:f7:9b:34:63:d3:28:ce:80:ca:6a:e0:9c:12:
46:75:3f:e0:2c:4c:a4:db:68:e4:20:6a:51:29:02:60:95:76:
5a:a8:6b:7c:65:1a:43:78:aa:b7:46:d3:65:0a:16:ff:a3:7c:
58:83:bb:89:d6:fe:d3:32:92:ae:44:62:29:9b:93:5d:83:e3:
e3:1c:bb:5c:1e:4d:a1:9e:5e:18:91:6b:4b:e5:a8:a2:a6:e9:
23:bc:ab:b4:db:44:c6:6a:f3:61:3f:6d:8e:24:00:02:cb:42:
91:6e:93:d6:aa:2a:a6:2d:ce:eb:f6:66:3e:dd:d1:42:91:b3:
a3:fc:73:6c:87:e1:2d:1f:d5:28:9d:62:4b:25:a2:29:0b:8d:
2b:9b:3a:fd:3c:5b:65:72:3a:ec:38:ac:72:ae:51:b9:5c:e5:
b1:4d:7c:a9:35:a9:1e:ef:8a:03:fc:78:42:c7:d6:b9:1e:16:
a1:d1:06:b6:6d:ea:72:1a:c6:38:25:7a:c0:b8:b8:63:42:b1:
76:e1:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:12:19 2025 by rpki-client