Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jp3E7Qkx6QB0bDtKsRsHLTqSHJg.roa
File: Jp3E7Qkx6QB0bDtKsRsHLTqSHJg.roa (raw, json)
Hash identifier: oOr8NfApHjPzStEIsOfgp/AisHKW+CMlozecJFE/SIU=
Subject key identifier: 26:9D:C4:ED:09:31:E9:00:74:6C:3B:4A:B1:1B:07:2D:3A:92:1C:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FA3DC1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jp3E7Qkx6QB0bDtKsRsHLTqSHJg.roa
Signing time: Sat 25 Jun 2022 06:11:52 +0000
ROA not before: Sat 25 Jun 2022 06:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409880603 (0x8fa3dc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 06:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=269dc4ed0931e900746c3b4ab11b072d3a921c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:2e:1b:d9:4e:65:f7:94:71:a0:99:04:ee:
28:df:7c:2a:34:47:cc:db:a4:26:62:d2:7e:2c:5e:
3f:90:84:b0:77:9a:d1:05:4f:c9:41:a2:fe:c4:dd:
8d:43:4a:1e:fa:46:51:09:24:a7:24:20:4b:11:07:
cd:85:77:22:c5:32:17:4b:02:a3:ba:07:c9:bb:95:
0a:dd:dd:1f:8f:c5:cb:c8:f8:6d:97:16:2a:66:7d:
f3:c3:4f:68:4c:68:76:e1:89:1e:5a:fa:eb:4c:fe:
e9:c5:00:79:67:28:fa:ec:3a:b1:4a:e6:de:70:ae:
7e:c1:34:66:d6:0e:7d:62:5f:94:3d:06:e7:6c:ed:
53:ae:1f:fa:21:68:5f:34:16:7b:60:f1:ae:eb:14:
ee:18:d2:48:b3:ce:81:c2:c9:12:c1:a0:0f:dc:18:
9c:e5:9a:2e:a9:88:4a:e3:0e:1a:d7:e7:7c:25:cc:
33:2c:ea:84:a3:da:2a:d0:e2:15:4e:32:6d:94:40:
b5:b3:43:03:2d:05:ba:9e:2a:27:45:1a:2a:cd:33:
55:95:f7:a7:2d:46:ed:c3:39:d3:69:67:c0:54:16:
14:29:81:39:1a:b0:c9:2f:6f:96:a0:8f:01:1a:08:
4e:c7:38:7d:31:ac:2e:f9:2c:68:6d:4f:06:5c:8e:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:C4:ED:09:31:E9:00:74:6C:3B:4A:B1:1B:07:2D:3A:92:1C:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jp3E7Qkx6QB0bDtKsRsHLTqSHJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f3:0e:0d:b3:77:c4:70:4c:17:30:79:3d:35:b5:9d:3c:f6:
30:1f:f5:b1:f3:92:d4:37:41:ec:b2:82:7f:6b:52:63:df:47:
a8:22:86:b9:d5:f7:77:0e:72:ca:90:06:4f:b2:f6:66:88:7b:
5e:e1:c7:42:6b:fa:5f:18:30:7e:63:da:d9:6c:2e:02:c4:f8:
42:47:23:99:f7:d9:65:6c:a9:b4:bc:f9:3f:3d:39:2c:68:86:
49:38:e5:bd:1c:5c:55:98:b9:04:e0:8a:35:98:b4:e4:cf:00:
b3:78:cf:ee:0d:aa:18:12:47:7c:8f:d3:b5:91:67:52:a4:9e:
a8:14:62:af:2d:12:dc:dc:3c:b0:45:5f:18:89:6d:70:ab:32:
e3:b0:e7:60:e0:e7:74:b1:57:9e:5d:cc:e9:cb:16:36:94:24:
ff:35:2d:0d:ae:e3:70:6b:cb:4b:55:dd:89:9a:50:6b:d9:c0:
82:73:a9:da:70:e4:10:24:35:da:34:d2:9d:30:1d:c7:9b:c1:
a9:16:e6:a0:93:60:4a:54:bd:65:84:07:22:43:cd:3a:cd:68:
4b:c2:e3:39:d8:ce:6d:1a:0d:6c:a2:52:e8:35:d6:01:32:2c:
f1:01:42:ed:33:88:f5:88:6c:cc:47:6b:77:2f:fb:5d:34:38:
e7:5d:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:33:50 2025 by rpki-client