Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeTGiMi8NvWnRgVKsGib3U2nFfY.roa
File: JeTGiMi8NvWnRgVKsGib3U2nFfY.roa (raw, json)
Hash identifier: jnai6xtE6qgzS2SPgJfKCWT1FhCERTpSmjej8aVtcwo=
Subject key identifier: 25:E4:C6:88:C8:BC:36:F5:A7:46:05:4A:B0:68:9B:DD:4D:A7:15:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 917A5B8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeTGiMi8NvWnRgVKsGib3U2nFfY.roa
Signing time: Fri 01 Jul 2022 13:12:25 +0000
ROA not before: Fri 01 Jul 2022 13:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440715149 (0x917a5b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 13:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25e4c688c8bc36f5a746054ab0689bdd4da715f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4a:76:83:60:af:bb:ed:da:c0:15:a0:2e:74:
35:a4:28:47:b9:ee:c4:47:cc:40:4c:3c:e2:e2:64:
11:1e:00:2f:ec:d6:a5:11:6a:1e:73:68:36:bf:ba:
69:b0:a0:99:68:cb:5d:cd:6f:5c:72:a4:3b:7a:25:
cb:e8:cd:95:4b:e1:f8:80:f8:dd:81:11:b3:f4:eb:
76:56:ac:15:92:58:14:64:ba:3e:8f:6c:95:f3:2c:
9d:d7:99:84:45:1d:44:c5:8f:3e:cb:06:9f:c5:a6:
67:42:d2:22:87:bb:fc:83:62:e5:26:00:8c:78:f4:
dc:76:96:b0:4a:fc:e9:d6:40:84:f8:04:74:e2:23:
73:bf:8c:ce:1f:02:88:61:68:f5:9f:25:c7:fc:59:
30:65:10:06:ed:21:e6:78:e7:1f:40:4c:1d:c4:04:
ea:44:dc:04:df:8c:97:6c:68:64:83:58:28:ab:74:
db:5b:63:cd:38:67:8a:39:55:fb:e0:6f:e5:44:99:
08:f2:8f:f0:90:ca:96:08:49:7a:9d:98:76:c9:e5:
cc:43:01:58:91:cc:9f:d1:2c:85:c6:f8:ca:44:7e:
79:f1:19:5b:90:a0:11:37:4e:73:61:2b:91:ae:0c:
5a:1e:cf:19:9a:aa:69:fa:65:ce:1f:7d:49:05:c3:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:C6:88:C8:BC:36:F5:A7:46:05:4A:B0:68:9B:DD:4D:A7:15:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeTGiMi8NvWnRgVKsGib3U2nFfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:7c:bf:d1:bb:51:27:4a:2d:b0:d2:74:9f:50:fa:59:7f:d8:
1c:5b:47:37:89:89:4d:d5:39:02:ed:e5:ca:2b:3f:32:fc:57:
a6:36:26:49:0a:3b:19:1d:3b:43:f8:78:4e:fb:62:54:18:dc:
07:ce:8d:82:10:e4:49:fa:9c:97:a2:ff:de:4c:71:e0:be:38:
00:7d:44:68:b0:6b:a5:b1:9b:9e:4d:1f:a6:fe:23:f5:d2:f8:
29:ff:e0:43:ae:16:0f:bd:a6:42:f8:e1:72:bd:b9:7e:07:7b:
1c:dd:14:f5:b3:37:30:78:fc:13:e5:41:bd:8d:2e:7b:1a:4f:
01:78:78:b2:ab:dd:fc:c8:59:1d:57:9c:ea:03:52:81:2a:94:
b5:88:6e:37:94:78:26:b1:20:b2:67:35:01:46:8d:e4:45:d4:
23:d8:b3:8d:5a:2b:31:54:6c:17:1d:b9:7e:68:27:69:a8:77:
6f:57:ad:ce:9f:71:ee:4b:06:aa:0a:17:1a:d7:0e:1e:98:86:
3e:e0:69:9b:58:0e:d3:4b:8a:c3:bb:05:d3:b8:83:e8:53:43:
e1:05:08:e3:d5:ec:ba:2e:e3:79:66:37:b0:bb:d0:4a:1c:20:
7f:7d:4f:38:b1:52:b4:f6:50:69:f0:3e:f7:35:7b:bd:65:22:
4c:f2:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:53 2025 by rpki-client