Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jdkdib364-BMCHOY5KeA36GI77Y.roa
File: Jdkdib364-BMCHOY5KeA36GI77Y.roa (raw, json)
Hash identifier: PUT0FLbqIHeOIGLnjuqgKEa6t0k0XUkzHfJ9TOOm8V8=
Subject key identifier: 25:D9:1D:89:BD:FA:E3:E0:4C:08:73:98:E4:A7:80:DF:A1:88:EF:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68D6E62C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jdkdib364-BMCHOY5KeA36GI77Y.roa
Signing time: Tue 08 Feb 2022 05:04:39 +0000
ROA not before: Tue 08 Feb 2022 05:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758914092 (0x68d6e62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 05:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d91d89bdfae3e04c087398e4a780dfa188efb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:b9:e9:b4:a0:0d:f7:a8:82:5e:09:9b:d0:
6d:5c:18:23:7b:9a:28:4e:71:5e:48:bb:87:a0:55:
6e:2b:42:28:9c:f9:d1:80:eb:fd:e3:8b:e0:cc:af:
18:d0:57:44:04:3b:5d:56:b4:87:01:ec:07:a3:85:
a6:d4:4b:98:70:ac:20:0e:e3:6c:51:c0:4a:79:b3:
ec:c0:12:8b:35:65:ed:94:b9:6f:d8:9b:62:b3:a1:
3c:6f:de:64:50:cb:b4:67:b1:c3:89:f0:9c:a1:d4:
c9:9b:07:19:56:38:fa:5d:20:3b:d6:f9:67:db:8c:
7e:b8:7d:98:53:82:57:76:52:9e:4d:8c:43:db:12:
15:ff:c8:6b:52:26:e7:9b:ea:3b:ff:4f:27:f2:42:
d4:3b:d1:97:88:0e:7c:73:43:e6:94:6d:62:f8:25:
7c:60:88:48:5f:64:ea:96:eb:e0:a4:e6:2f:00:5c:
ed:43:2a:25:dd:fd:64:2b:a5:f1:18:46:f1:1d:37:
88:a9:02:fb:dc:d0:54:cd:ca:e5:54:b2:e0:bc:25:
19:ee:77:04:46:f8:5e:22:e1:7f:0a:51:fa:9f:12:
4a:c9:28:28:d0:b8:14:44:f3:25:0f:34:a9:68:0f:
9d:16:0c:c7:0c:2c:f9:34:2b:73:1e:ae:48:62:0e:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:1D:89:BD:FA:E3:E0:4C:08:73:98:E4:A7:80:DF:A1:88:EF:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jdkdib364-BMCHOY5KeA36GI77Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e4:65:bf:de:21:66:a2:00:c2:4c:c6:2a:fb:5d:1e:ca:f1:
a8:25:16:86:80:04:d6:c4:6a:8f:d2:54:f8:a1:e9:a0:0b:31:
03:1b:ba:e2:5e:2a:49:9d:c1:1f:1a:52:7d:6a:3b:12:da:dc:
8b:aa:3c:b7:c8:3e:d5:4e:e5:4f:74:cb:d9:74:39:55:11:6f:
58:68:21:f9:0e:1c:cd:63:50:b0:f3:c8:dc:63:5d:6e:5e:2b:
c3:ee:4c:cd:ab:48:00:25:43:f7:ea:c3:e0:b8:ca:a8:48:b2:
08:bc:be:1f:63:29:5d:a9:00:d6:0a:6f:07:88:c8:39:84:9f:
9e:4f:d4:0f:3a:e2:1c:6e:0b:77:5e:5e:f5:44:d1:82:b0:07:
61:50:aa:0e:2e:85:07:d4:18:6e:f5:79:6b:c7:8a:f8:07:0d:
32:30:a7:75:c6:a8:58:05:f1:d1:30:c0:21:fb:75:05:7e:e1:
73:2d:c1:30:de:34:cd:0f:ac:d7:c1:0b:59:d9:79:17:52:6a:
4d:22:13:77:4d:03:08:a5:1a:87:5f:4c:05:57:ef:fe:1f:4b:
0e:0b:1a:03:d5:05:1d:dc:50:bc:b6:c0:8d:eb:28:3c:d5:9c:
50:8c:bd:b5:ae:f2:87:1f:e4:11:81:69:47:18:16:9f:f5:04:
29:be:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:37 2025 by rpki-client