Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgzyLfmdjvchNNYhkSvI_JRFB2I.roa
File: JgzyLfmdjvchNNYhkSvI_JRFB2I.roa (raw, json)
Hash identifier: b+gTsxxX2J7pgtBayLjx317Bss4RSEuWUfC63CbVBqY=
Subject key identifier: 26:0C:F2:2D:F9:9D:8E:F7:21:34:D6:21:91:2B:C8:FC:94:45:07:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018227C3DB0DEFB8AA9588818430E4D68882
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgzyLfmdjvchNNYhkSvI_JRFB2I.roa
Signing time: Fri 22 Jul 2022 21:15:23 +0000
ROA not before: Fri 22 Jul 2022 21:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:c3:db:0d:ef:b8:aa:95:88:81:84:30:e4:d6:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 21:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=260cf22df99d8ef72134d621912bc8fc94450762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:c0:0b:c0:63:81:f2:d4:6d:01:7e:4f:81:
17:6f:4a:4a:7c:fe:03:7f:87:5f:ca:94:b6:11:2f:
98:74:81:15:fb:84:be:42:cb:7a:ff:09:18:07:1f:
82:ba:64:74:30:17:94:82:2d:8c:57:e4:83:a2:ae:
d6:97:fd:6b:ab:17:1b:f3:17:89:44:58:25:b7:8b:
71:ad:63:2b:19:a9:73:8a:6d:90:d9:56:5a:42:05:
e0:66:70:1c:52:35:49:d7:48:2a:b3:e7:37:0c:af:
02:fd:8c:7e:90:8c:57:07:47:64:fe:a8:69:6a:79:
ef:16:20:07:ab:23:8f:1c:3c:cf:e7:a9:29:52:3a:
46:fe:d3:10:f7:c6:49:87:d9:03:d6:79:dc:4a:a0:
b7:c4:80:f3:5a:01:5f:0d:1a:3e:3b:00:f6:e4:16:
88:4b:0c:ff:86:b2:78:32:1c:b6:40:a0:08:c9:a7:
58:76:74:6e:09:c5:b6:3d:ee:f2:02:0b:51:e4:71:
f4:32:77:88:ad:f6:19:7c:af:d4:88:b6:4d:e9:0f:
db:9e:1e:63:d1:c1:0b:fb:da:5c:d8:ca:f4:ae:48:
32:85:90:73:f4:6d:69:fe:be:2a:8b:11:1c:4a:11:
d4:9d:81:46:03:e6:b0:c9:d5:49:43:e3:c4:57:66:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:F2:2D:F9:9D:8E:F7:21:34:D6:21:91:2B:C8:FC:94:45:07:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgzyLfmdjvchNNYhkSvI_JRFB2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:4b:41:53:c1:dc:f7:12:87:97:c5:1c:d3:e6:0f:97:ec:c5:
17:1e:7b:95:9d:e8:5a:7f:5a:66:73:c7:8b:b5:12:8e:1f:a9:
b2:9a:03:ff:da:a0:60:8f:11:dd:aa:af:bd:2d:64:a0:d8:60:
b5:b4:93:57:ce:04:86:52:7a:14:50:58:96:a2:a3:b5:d5:e5:
d5:c6:cc:1e:59:57:46:18:da:f9:56:f3:9f:1e:dc:12:e6:ba:
36:cd:37:0c:ef:00:e2:51:4c:01:10:f0:84:0e:de:78:cc:70:
62:c6:55:41:d8:8b:52:57:dc:0c:99:3b:e5:5f:9a:41:cb:77:
36:bb:7d:de:4c:76:2f:6e:07:20:73:90:b5:11:c3:59:ca:96:
32:49:1b:6c:c4:71:b7:83:f2:e6:84:79:4a:83:e5:bf:40:c3:
c9:d4:29:b3:fb:65:d4:22:aa:c6:31:ce:2f:45:5b:96:fb:3c:
9f:42:b0:a3:3a:8a:0d:c1:1c:3b:f3:2c:b8:ac:d3:78:fe:b7:
f0:01:5e:4b:d0:57:be:f9:95:e0:21:75:2a:13:f1:63:09:e4:
d1:eb:d9:dd:d8:ff:db:ea:73:d7:b9:2b:9d:7a:82:3e:ff:4a:
d4:35:af:d1:9e:bb:01:9a:89:7b:8d:05:25:6e:90:ec:87:c2:
bc:b9:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:47:17 2025 by rpki-client