Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JZb7JHqZWWBlK9NXQ02H4isjFmw.roa
File: JZb7JHqZWWBlK9NXQ02H4isjFmw.roa (raw, json)
Hash identifier: AQ12ebU9prWfvP4z/ZlS04/ESTO5BuQEcmx2vevehDM=
Subject key identifier: 25:96:FB:24:7A:99:59:60:65:2B:D3:57:43:4D:87:E2:2B:23:16:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D706132EAEADC76ED41C3735A1764114
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JZb7JHqZWWBlK9NXQ02H4isjFmw.roa
Signing time: Sun 22 Jan 2023 01:09:37 +0000
ROA not before: Sun 22 Jan 2023 01:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d7:06:13:2e:ae:ad:c7:6e:d4:1c:37:35:a1:76:41:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 01:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2596fb247a995960652bd357434d87e22b23166c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:55:ff:14:f7:c6:83:00:89:15:e3:94:04:
a3:5d:85:48:d5:87:4c:05:f9:ae:15:10:6a:aa:fa:
1e:5d:40:ba:f4:9e:62:b4:75:f3:8f:a6:58:2e:70:
3c:38:8b:87:27:ab:1f:35:c2:39:62:a1:76:5d:38:
22:03:4e:4f:61:26:c7:1d:ab:70:36:df:61:96:8f:
b5:98:b9:e3:83:a4:a6:c5:57:ba:c0:ba:ca:ef:db:
73:56:36:7f:fc:4a:bb:6b:3f:cc:c5:64:b9:fb:eb:
ef:6c:58:bf:ca:94:59:a6:d8:89:ea:e8:c2:49:ed:
5f:c1:4e:ab:79:74:6c:ab:e0:18:77:d0:e3:e3:d5:
c5:55:63:1b:b5:47:b1:d2:78:05:d6:7f:e4:61:b9:
b1:67:88:bf:b3:ec:c1:8c:90:e5:c0:fe:42:92:69:
db:50:84:f9:b1:2b:fb:76:f0:7e:c0:56:71:9b:e2:
09:cf:58:76:81:17:a2:d8:eb:1b:93:20:a5:4e:34:
dc:88:7d:25:77:e4:fb:ca:2e:e4:9c:d5:a9:6f:c7:
c1:51:2c:c1:3f:a0:d5:cd:b4:44:be:4c:cc:5a:58:
a4:0c:f1:c2:10:49:22:e1:ed:98:4b:dc:53:39:22:
08:fc:66:c6:e9:60:6e:26:e6:7c:e3:e9:b8:40:52:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:FB:24:7A:99:59:60:65:2B:D3:57:43:4D:87:E2:2B:23:16:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JZb7JHqZWWBlK9NXQ02H4isjFmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e0:0a:82:bc:cb:5b:0d:7c:58:9f:8c:15:ca:c4:d5:bf:69:
da:bb:64:ea:43:ce:11:fe:75:c9:ad:c4:1a:01:64:00:4b:58:
22:70:45:8b:0a:ab:e0:9f:df:eb:80:16:ef:62:49:31:4c:91:
d7:a8:52:9c:02:11:d3:4f:2c:8e:56:f4:0e:db:78:55:ac:e5:
4e:22:a6:df:d5:21:0c:86:42:8d:c5:af:6f:f1:b0:fc:bf:dd:
d2:9b:bc:dc:98:4c:f0:c0:ba:b3:f6:34:d2:12:2b:61:6f:8a:
8b:cb:28:ae:50:c2:21:d5:58:f0:72:3c:19:bb:40:aa:b4:e1:
3e:e8:f2:42:f1:6f:db:f9:0c:7e:bc:9f:47:37:c0:ad:13:72:
41:5b:1f:45:40:45:50:71:ed:4b:af:e1:8b:8a:e2:03:73:d2:
cf:76:37:f8:ab:38:fd:94:12:73:47:5a:f6:d9:36:03:fe:b0:
db:f5:b1:e8:b3:a2:3a:df:2c:62:19:4f:0d:ae:9e:5c:16:78:
be:66:b5:ac:c9:c4:db:c7:55:29:a4:44:ec:32:d0:be:a0:b0:
30:e4:82:b3:0a:8e:7d:d6:73:88:99:7f:f2:8c:57:40:78:c4:
80:46:bc:fd:8c:46:fb:92:27:89:82:4a:01:f5:6d:f7:32:ac:
90:82:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:14 2025 by rpki-client