Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXnbGlzK6g1dssYTOxW9dz4a3QM.roa
File: JXnbGlzK6g1dssYTOxW9dz4a3QM.roa (raw, json)
Hash identifier: 4ZYJRuwa+U7pM16IFrHu6w8ococ3MRNyQn9pY+svMqQ=
Subject key identifier: 25:79:DB:1A:5C:CA:EA:0D:5D:B2:C6:13:3B:15:BD:77:3E:1A:DD:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B63AFC489389AD34A023D4CA300B7F84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXnbGlzK6g1dssYTOxW9dz4a3QM.roa
Signing time: Sat 08 Oct 2022 06:14:22 +0000
ROA not before: Sat 08 Oct 2022 06:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:3a:fc:48:93:89:ad:34:a0:23:d4:ca:30:0b:7f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 06:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2579db1a5ccaea0d5db2c6133b15bd773e1add03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:51:50:80:ef:ac:0d:e1:3f:7e:25:14:c7:
eb:6a:5d:7f:ae:95:e8:b0:cb:7c:45:12:20:d7:c2:
45:38:74:b0:38:fb:4d:07:85:88:df:50:a6:21:e9:
38:a6:db:e1:20:e7:9d:f4:a6:de:27:03:ed:d5:2f:
39:73:ef:63:8c:ee:72:3f:b4:d7:dd:fd:57:f8:a2:
79:92:02:f2:7f:1c:26:a1:85:3d:76:a1:cd:a7:b2:
2c:5b:81:19:cc:b3:3c:d8:e2:70:b6:b1:66:51:1c:
24:15:fc:ce:99:ab:b1:6f:15:60:96:6c:61:a4:e2:
2b:9f:eb:fd:3f:dc:bc:6b:54:30:c4:30:13:16:fc:
f1:f3:a5:f3:f9:8f:41:58:4e:f6:f1:f3:18:59:fc:
17:ce:c1:13:59:c8:aa:b9:ee:2e:15:b7:9a:18:62:
4f:5c:4a:32:51:40:ed:a3:2b:a8:4c:58:af:e6:9f:
1c:86:95:89:72:d3:bf:a9:79:5b:7f:7f:db:26:5f:
5e:2e:c8:ce:e0:14:11:6a:5d:8a:92:c9:69:7a:8d:
fe:d3:fc:e9:94:22:02:4b:7c:f8:5b:f2:29:26:81:
86:ee:ac:6a:eb:ea:71:5e:42:56:78:fd:62:85:e0:
4e:de:97:7f:c6:e9:e5:ca:b7:0e:57:6e:75:50:3c:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:DB:1A:5C:CA:EA:0D:5D:B2:C6:13:3B:15:BD:77:3E:1A:DD:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXnbGlzK6g1dssYTOxW9dz4a3QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:47:3a:10:7b:4f:a9:b2:27:e2:70:81:9a:b0:56:7b:87:ad:
9f:80:82:73:47:57:32:18:41:9a:c7:c9:63:3c:35:ab:d9:e1:
d4:2f:3c:1c:29:6b:a1:34:0f:ce:e1:60:0c:47:2b:d8:ae:4c:
02:c7:fb:f1:56:10:38:8f:35:68:7a:8b:b3:9a:35:af:11:d5:
a9:50:9b:48:58:25:41:dc:21:90:b8:67:95:59:47:6f:67:63:
4a:94:71:71:1d:ef:99:bc:20:ab:93:f2:8e:15:d9:2d:e8:5b:
b7:f8:ba:f5:41:b8:77:90:4e:45:84:18:18:61:a9:51:80:fd:
d7:f3:dc:ec:95:97:30:cb:2a:48:cd:09:7e:11:44:ed:50:ff:
02:0f:bc:7e:20:8d:1b:28:ee:00:b1:59:65:9e:ed:e1:e9:ee:
ee:9b:6e:17:42:bc:80:e5:f8:ff:bd:0e:eb:45:e9:6d:34:92:
57:f1:6f:86:0e:db:4f:af:41:33:e3:43:79:01:d8:c5:7c:06:
14:e0:d2:25:ba:46:45:8b:48:da:73:20:1c:7b:fa:31:cd:60:
87:7c:26:88:05:b8:e3:a7:e8:59:b2:5a:6d:10:5f:2d:e3:9f:
16:47:71:bb:1f:53:66:c6:e4:75:f5:c9:d8:04:e6:0c:65:d2:
fc:ee:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:58:55 2025 by rpki-client