Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JWzv4XMulFTy4jClihhZwZCe3Ag.roa
File: JWzv4XMulFTy4jClihhZwZCe3Ag.roa (raw, json)
Hash identifier: 4UP1p/+Qay3pNy9WfedRrS8hS6EKIfX0f60c4AiWbZk=
Subject key identifier: 25:6C:EF:E1:73:2E:94:54:F2:E2:30:A5:8A:18:59:C1:90:9E:DC:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A391480895628D5F4D4F050B92CE1DE84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JWzv4XMulFTy4jClihhZwZCe3Ag.roa
Signing time: Sun 27 Aug 2023 22:19:19 +0000
ROA not before: Sun 27 Aug 2023 22:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:14:80:89:56:28:d5:f4:d4:f0:50:b9:2c:e1:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 22:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256cefe1732e9454f2e230a58a1859c1909edc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:0e:2b:6d:fd:a8:0d:3b:05:6c:c4:88:43:
4f:77:53:df:7c:09:f1:be:82:f9:61:0e:48:7c:d2:
25:1d:c9:d9:02:99:ea:d5:8d:01:82:60:fd:45:ae:
67:de:50:bb:3c:fb:4d:b3:c9:c8:d8:db:70:1f:c0:
e0:18:bd:fd:ba:d6:1d:c3:71:df:62:94:7c:f6:0c:
ff:6c:7f:09:24:66:a3:23:82:5b:9a:c1:89:9c:00:
73:16:9f:18:ae:56:3b:ee:4e:9f:c9:e9:ba:b3:01:
42:54:bd:59:25:04:9f:88:40:6f:7f:64:97:1e:ad:
ef:97:57:d2:92:a3:34:3a:36:31:3b:2f:d4:93:fc:
19:68:10:17:d3:90:45:51:ac:2b:65:76:04:e2:bc:
85:71:00:90:a2:0f:6f:01:01:58:72:c4:04:c2:2c:
5d:36:c3:5e:64:99:41:a2:0c:68:80:e9:5e:d4:fc:
9c:23:5d:e1:91:66:33:b8:c4:50:22:d5:a0:3c:7b:
25:d5:2d:87:5b:94:79:01:06:0e:c2:a4:4f:19:3b:
20:43:ea:92:9c:55:e7:34:f2:cf:e6:80:b5:af:c1:
de:63:18:a7:d1:57:c7:04:b3:e2:87:8f:4b:42:e0:
30:f1:9b:0b:ac:7a:83:3b:aa:a1:f5:be:73:1a:21:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:EF:E1:73:2E:94:54:F2:E2:30:A5:8A:18:59:C1:90:9E:DC:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JWzv4XMulFTy4jClihhZwZCe3Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:ba:2a:a2:3e:bd:bc:96:18:37:01:1e:d0:08:4b:83:af:e6:
7f:03:83:d4:7c:ee:5b:a5:52:4c:0a:f4:ce:81:35:78:28:04:
ea:0d:4e:f0:ce:ac:09:b8:02:2e:91:cd:22:9c:2b:df:12:5e:
55:46:60:8d:f3:a5:31:1d:20:07:18:f6:70:10:93:31:7a:98:
3a:2b:29:e9:d0:83:cb:8f:bc:b6:f1:c6:e5:62:f6:7e:f8:ba:
e8:04:11:03:53:47:d4:e8:3d:f3:93:a0:b4:a7:6d:d0:f7:df:
1c:1d:d3:1d:9d:6d:4e:71:9e:b9:ed:82:b8:7c:82:a1:ce:c9:
3f:1f:9a:57:4e:df:3a:5a:7c:78:c6:70:8e:1e:70:10:0c:4b:
4f:96:7e:1d:a0:ac:f5:77:b9:5d:34:a1:b4:eb:da:e6:03:af:
3c:0d:6f:c0:79:29:1c:f2:6d:e1:0a:45:d9:b1:28:e4:3f:12:
7a:46:05:81:da:5c:42:68:84:93:ca:00:bb:22:20:32:3f:0a:
27:92:88:6f:b1:5e:20:64:0d:62:f2:6b:61:3f:5a:29:3d:6d:
68:73:a5:39:e4:2a:5b:70:6f:a7:95:49:cb:7f:db:cb:10:d1:
61:49:c9:91:56:6c:d1:33:60:77:09:90:1c:0e:d6:1c:57:5d:
00:a6:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:48 2025 by rpki-client