Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JjL2Q4t5JDWpEmACQNwoZBPX9IA.roa
File: JjL2Q4t5JDWpEmACQNwoZBPX9IA.roa (raw, json)
Hash identifier: ImghVhgOiZzWdjbPv8bB10BA0xQCebJBcMAqysShOLU=
Subject key identifier: 26:32:F6:43:8B:79:24:35:A9:12:60:02:40:DC:28:64:13:D7:F4:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018648C13D27F13CCDB28E4EC370C5E86766
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JjL2Q4t5JDWpEmACQNwoZBPX9IA.roa
Signing time: Mon 13 Feb 2023 03:11:08 +0000
ROA not before: Mon 13 Feb 2023 03:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:c1:3d:27:f1:3c:cd:b2:8e:4e:c3:70:c5:e8:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 03:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2632f6438b792435a912600240dc286413d7f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:28:26:7d:18:7c:66:fd:88:62:0c:2d:ba:
53:36:6c:5b:cd:89:94:be:79:d9:30:c0:80:99:0f:
ad:2a:4d:0f:18:05:01:cf:99:5a:02:14:c2:b7:ae:
3c:33:fe:a5:ed:54:f9:e7:9b:bd:d3:50:ac:ee:39:
e6:32:f5:be:7b:70:b7:90:c2:3a:03:7c:09:ef:f6:
e8:ff:70:b4:12:5b:3f:f0:14:16:73:37:7e:68:4a:
4b:a0:97:f1:40:67:84:f4:ad:7f:61:cc:ca:c6:85:
9c:f2:af:e5:ae:fc:45:7e:0a:99:3e:15:45:5a:a7:
c5:d9:e4:c2:16:c3:36:d5:c0:4f:ef:dd:ed:cd:34:
27:44:0b:07:fd:14:e8:3a:b8:a7:fb:bf:19:99:c5:
3e:01:b7:d0:75:09:03:51:87:2d:fa:3f:b5:53:44:
1b:18:91:94:a4:bd:53:5a:76:4c:24:ca:70:c5:20:
29:99:4d:4f:87:15:b7:e9:6c:d8:6b:00:6e:7c:d4:
cd:07:9d:fe:93:cd:0c:9a:db:de:d1:84:dd:24:e6:
27:68:e8:34:ec:70:ce:3c:0e:93:ae:a8:8b:9d:32:
89:a3:fb:45:f0:c3:3b:f5:8e:96:6b:d4:fe:74:6d:
f6:b4:e8:5c:9c:20:c7:87:d7:c4:d8:b2:af:4e:52:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:F6:43:8B:79:24:35:A9:12:60:02:40:DC:28:64:13:D7:F4:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JjL2Q4t5JDWpEmACQNwoZBPX9IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:1e:47:62:38:6e:a1:05:ad:f1:b1:d5:6c:64:3f:72:76:f7:
df:5b:da:49:59:b9:9d:d0:28:9e:86:3f:5e:27:69:a5:39:5b:
d7:85:56:ec:b3:5d:36:42:d1:4b:55:20:52:f0:f1:02:6c:d8:
7f:36:4f:2c:73:b8:23:19:bc:ad:0c:6e:f4:90:fe:10:ea:33:
0b:c2:7d:8b:76:8d:8a:cd:83:f2:53:88:b0:ed:90:62:3d:c1:
3b:96:43:76:60:35:72:5d:42:07:7d:a4:3c:e4:c3:1b:ea:2e:
c4:9c:d1:74:53:c9:90:79:49:78:df:3c:9f:97:a2:6e:54:9f:
5e:fb:df:82:28:07:a8:aa:9d:6f:9c:8d:a9:df:6f:59:89:a2:
c2:07:74:f3:eb:61:a5:c4:7c:e7:f8:b1:0b:fc:e3:06:23:a9:
21:83:af:dd:54:1d:55:80:fa:57:fc:f7:66:66:8b:ed:48:3e:
5d:f3:d7:d8:da:73:a2:44:44:f1:45:62:ca:63:4c:0c:40:aa:
3d:8c:87:d2:d4:62:d2:ff:40:d1:8e:b1:c5:22:91:55:01:22:
6f:e7:84:c1:d1:15:4c:e7:7c:3f:4d:73:76:3e:f3:9c:c6:37:
59:c9:bc:6e:e1:35:5f:b0:93:f0:99:94:d0:13:26:58:22:7e:
e4:fd:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:53 2025 by rpki-client