Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JM0roEQXZ00VMu21CbNyevAEHTs.roa
File: JM0roEQXZ00VMu21CbNyevAEHTs.roa (raw, json)
Hash identifier: QhnOEa9x+pI/uUZK4vD6yqS++JjiWOICHTmMzkneCbU=
Subject key identifier: 24:CD:2B:A0:44:17:67:4D:15:32:ED:B5:09:B3:72:7A:F0:04:1D:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863B3B9EDEF056730ACAA8C0C561F9F6AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JM0roEQXZ00VMu21CbNyevAEHTs.roa
Signing time: Fri 10 Feb 2023 12:10:08 +0000
ROA not before: Fri 10 Feb 2023 12:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:3b:9e:de:f0:56:73:0a:ca:a8:c0:c5:61:f9:f6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 12:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cd2ba04417674d1532edb509b3727af0041d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:9a:d0:8d:98:d6:46:a6:7b:5b:34:3b:bc:
51:f0:1d:dd:cc:1d:59:f6:3f:3a:01:f0:3e:1a:0d:
ea:88:e6:4c:92:f5:0f:c3:8b:62:3d:91:25:e8:02:
4b:1c:4f:4d:3c:65:d0:e9:7b:a5:1a:da:3d:82:97:
87:2c:bf:80:74:fd:9e:6d:4a:47:76:8d:5c:bd:ba:
2a:ee:bd:f5:02:dc:27:41:eb:33:90:5f:af:ca:a8:
fc:00:64:ae:27:ee:30:5f:2b:b9:77:c6:9d:33:1a:
fc:a3:e3:1b:19:38:40:98:75:fd:27:f5:fb:1b:8f:
c8:cb:16:e3:e0:0f:00:b3:c3:7e:ff:56:bc:e1:cf:
b4:3f:3f:23:5a:d9:2d:4e:b8:a5:79:4b:9c:8c:8e:
4c:3e:2f:00:8e:5b:7a:75:52:ca:e4:e6:da:b3:6b:
92:6f:2c:19:f7:83:62:29:5e:5a:5c:10:a1:d9:e1:
ea:39:fc:b5:16:24:19:3c:18:64:a0:f8:ab:b6:b3:
eb:c6:97:0f:18:1f:d8:a9:be:6a:1c:63:9b:7c:82:
88:55:f0:82:14:8d:76:05:c5:f2:7b:75:81:49:d1:
8b:67:bd:53:e5:aa:7e:81:49:b2:d4:9a:97:ae:de:
01:4b:20:98:44:b4:ad:d1:63:30:ca:e9:08:e7:dc:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:2B:A0:44:17:67:4D:15:32:ED:B5:09:B3:72:7A:F0:04:1D:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JM0roEQXZ00VMu21CbNyevAEHTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:4c:76:2e:1a:2f:0a:8b:ab:c0:f6:3e:bc:da:dd:d5:8f:2e:
44:95:78:d1:cd:1f:39:39:f4:7b:f2:29:80:82:9b:b0:6f:88:
20:71:af:98:ae:d4:bd:b3:c5:aa:82:23:10:ca:71:99:92:e4:
82:94:cf:79:20:eb:a7:9a:97:71:ea:a4:80:75:ac:f6:ee:ef:
9e:d7:1c:9f:46:f5:dd:9f:82:5d:8c:49:0c:2c:fc:a2:c2:02:
b2:ff:f4:0f:46:1f:3f:b6:96:bb:ea:9e:dc:6d:e8:05:4e:0f:
48:62:58:6a:2c:8e:fb:71:25:14:55:97:93:2b:c0:1a:ef:4f:
2a:a6:d6:0d:24:e0:20:96:7d:68:1d:17:92:60:75:89:c1:90:
ae:9b:d4:85:57:eb:81:6f:11:5e:36:48:3c:cb:a6:14:a7:2a:
25:b4:f7:36:63:25:89:13:f0:a7:4b:76:48:d4:59:55:1e:e5:
3a:66:6f:05:9b:c3:91:90:1c:30:c3:ef:8f:77:34:4a:1b:48:
7e:ab:4b:82:79:dd:25:78:0b:6c:10:ad:26:10:2e:a8:78:6c:
a5:3a:af:5f:f5:8a:d4:b0:f4:62:78:0d:73:3a:3c:ce:d1:82:
31:43:13:36:c6:ea:f4:ae:3b:06:90:1d:ca:57:f3:d1:c4:74:
75:4d:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:02:37 2025 by rpki-client