Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JoqdTVHsvrd-aT77AomJk9OV4io.roa
File: JoqdTVHsvrd-aT77AomJk9OV4io.roa (raw, json)
Hash identifier: 68kraQE1gYdgl9wdktXPNuQfvOtLL4vIFUi0r+jTV5E=
Subject key identifier: 26:8A:9D:4D:51:EC:BE:B7:7E:69:3E:FB:02:89:89:93:D3:95:E2:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FCFA483C0A61B2B345ED6F0DA98252A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JoqdTVHsvrd-aT77AomJk9OV4io.roa
Signing time: Wed 16 Aug 2023 06:13:28 +0000
ROA not before: Wed 16 Aug 2023 06:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:fa:48:3c:0a:61:b2:b3:45:ed:6f:0d:a9:82:52:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 06:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=268a9d4d51ecbeb77e693efb02898993d395e22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:ae:e3:8b:5a:e3:3c:17:aa:38:33:3a:d4:
5f:c8:32:e0:67:bd:e3:b7:14:f8:9f:c3:fb:95:14:
65:70:d7:2b:41:99:d7:1f:c8:b8:0d:0d:74:ad:69:
28:6a:df:ac:8c:41:2a:90:65:93:86:9e:04:c5:0c:
5d:46:15:6f:17:3a:10:04:e7:84:f2:e1:48:94:0e:
4a:ae:1e:ef:66:20:d4:f4:ec:a3:e7:63:91:d0:78:
c5:6a:34:b4:ff:15:4d:f8:e5:ac:c4:35:c9:39:f6:
dd:6f:c8:1c:32:07:99:da:f1:59:2d:a2:e1:7c:56:
3b:6f:37:20:60:85:b1:c9:6e:37:eb:5d:92:59:b3:
56:30:74:08:43:64:20:da:00:0d:45:da:d4:69:6a:
65:a0:22:46:44:62:64:e2:62:f5:bf:6b:3e:6a:ef:
1a:94:d6:cd:6f:19:36:71:02:19:ef:d0:3d:91:ad:
35:57:52:7b:54:f1:71:16:6e:ec:db:9a:6f:63:56:
f0:bb:69:d8:26:58:88:06:9c:f2:cb:cc:d4:d8:68:
2d:ea:83:99:8d:2b:b4:41:ea:3c:98:4d:b5:dd:86:
3e:2b:9e:d5:5c:05:3b:1a:ac:49:e0:51:0c:e0:8e:
75:4b:d1:c9:2c:55:b0:a8:82:6a:02:84:dd:82:dd:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:9D:4D:51:EC:BE:B7:7E:69:3E:FB:02:89:89:93:D3:95:E2:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JoqdTVHsvrd-aT77AomJk9OV4io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:7a:8c:1e:45:88:4c:de:eb:62:8c:2e:e2:28:13:fe:53:e0:
23:64:95:2c:9b:4a:74:66:a3:4b:29:64:ef:3b:b0:c6:f0:4a:
29:af:55:78:8c:d4:71:49:b6:af:2b:6e:c4:2f:fb:55:b9:95:
96:30:e5:a7:6c:f3:34:32:02:7f:2b:bd:56:22:5a:8f:2c:64:
b6:30:a4:3b:13:f0:17:35:e3:28:5f:6a:05:f7:2f:ef:ca:6c:
53:fc:d7:f1:2b:d7:88:e1:76:ea:0d:0e:b7:e1:20:81:87:92:
43:18:f3:b6:ae:05:94:a1:69:0e:b2:2c:cf:1e:03:ff:dd:17:
5b:50:94:4b:be:c5:6d:ee:08:32:07:a2:77:a6:5e:1a:af:71:
86:b4:6c:e2:2b:da:a8:da:8e:f8:48:3a:a7:48:6a:76:4b:d1:
ea:af:42:77:59:8c:bb:93:95:02:1c:a0:f8:18:42:fc:13:c4:
2d:77:7c:32:c9:91:f2:c1:ef:39:fb:c3:ff:96:d8:b1:45:a5:
57:7f:c4:37:e4:46:2c:c9:67:ea:97:e3:c6:20:ab:ea:db:5f:
8e:bb:66:e0:d4:91:6d:ca:9b:54:f3:4b:9b:80:55:1d:77:4b:
b0:68:6d:a3:b0:11:b4:28:53:e5:9d:fc:c9:08:d8:9d:ab:e2:
5e:ed:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:34 2025 by rpki-client