Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQwTtz4o4dUmSMu2JhejZkqf964.roa
File: JQwTtz4o4dUmSMu2JhejZkqf964.roa (raw, json)
Hash identifier: ksnQKRrJ6CqV7GB6n5TTbf5RhyXWTIhrGdjXZGnTW8k=
Subject key identifier: 25:0C:13:B7:3E:28:E1:D5:26:48:CB:B6:26:17:A3:66:4A:9F:F7:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75E10586
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQwTtz4o4dUmSMu2JhejZkqf964.roa
Signing time: Sat 26 Mar 2022 14:09:32 +0000
ROA not before: Sat 26 Mar 2022 14:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977681286 (0x75e10586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 14:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=250c13b73e28e1d52648cbb62617a3664a9ff7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:43:81:2c:51:ff:98:dd:57:cf:b5:bb:d0:
73:1f:a1:83:8b:5c:d7:27:d6:1a:b7:98:95:14:f8:
58:94:46:a6:60:15:e6:28:46:9a:49:4c:5f:82:25:
01:18:7f:24:cd:5d:8d:25:1e:e6:e4:de:f1:0e:45:
d7:fb:c1:1b:97:01:96:b3:ae:11:06:b7:d4:5e:f2:
04:5b:12:d0:68:c1:ff:43:ca:f1:8a:a1:a9:06:19:
80:b4:31:85:53:8e:77:fa:46:32:71:df:d8:09:4f:
8a:4e:f7:d6:8d:2f:58:a0:20:e5:10:91:a9:ec:84:
39:16:d0:36:0d:43:6f:a6:d0:15:9f:89:a9:14:ab:
d5:34:9c:ab:98:91:69:e3:4a:1c:18:c5:27:64:c6:
d2:69:1e:71:5f:91:ff:7c:0f:98:c5:9f:2c:27:70:
f0:d2:05:c1:3c:0f:02:e2:10:57:90:d7:5e:47:c8:
c8:4e:a9:f9:eb:55:3c:02:dc:d4:c1:6e:44:85:88:
7d:cb:50:d5:16:22:e7:d6:fe:e5:61:48:de:8e:1f:
53:6e:0d:37:7e:58:9d:40:14:ee:23:f4:db:9b:60:
e7:df:d0:1a:ed:64:2f:01:ab:15:30:f1:00:ab:1d:
14:06:3f:91:27:5f:03:e8:15:0e:9a:12:f7:ae:ac:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:13:B7:3E:28:E1:D5:26:48:CB:B6:26:17:A3:66:4A:9F:F7:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQwTtz4o4dUmSMu2JhejZkqf964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:7d:74:90:8e:10:7f:9b:18:01:e6:8d:4f:58:c8:b5:fc:b9:
d2:c8:02:af:08:2e:ae:53:cb:fe:f8:f2:3e:be:1f:a5:6d:71:
9a:73:b6:7f:11:be:a4:1d:4c:a9:9c:ae:0d:da:15:1b:e8:e0:
1a:77:f7:f9:af:7c:a2:93:f5:13:7b:14:8c:52:43:a7:78:5a:
01:c4:bc:ff:9d:5c:1c:2d:4a:00:75:4c:fd:3a:79:af:2e:71:
39:97:a8:74:e6:af:fc:4b:1e:2a:10:0b:8d:38:72:01:86:76:
c0:27:c7:1a:4e:44:80:c3:59:28:5e:d2:3d:18:e3:dd:c0:0d:
b9:43:ab:c3:67:68:6e:b2:a7:8e:8d:75:c2:f5:57:88:6e:c4:
b8:27:fa:2c:f1:3f:52:3d:07:26:3a:89:b3:23:12:d1:44:0f:
77:d6:61:f1:68:79:68:0f:1f:c1:09:f8:66:86:3c:ed:02:ba:
94:1d:1f:b2:f5:7d:10:c8:33:c8:34:93:16:0b:10:75:f3:12:
42:b7:1b:da:66:09:5c:13:ae:6c:58:da:60:9b:67:a3:bf:c4:
10:48:28:d3:73:a7:c1:50:8b:d0:1a:55:9e:86:27:cf:ba:20:
47:6a:7f:00:3d:02:a8:a6:b1:e6:f2:f6:cb:b4:bd:3a:cf:ed:
f9:dd:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:21 2025 by rpki-client