Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JpLg-yqNJFda2lSjV79zSapLGIo.roa
File: JpLg-yqNJFda2lSjV79zSapLGIo.roa (raw, json)
Hash identifier: zTs3B04S0tpkNzLRSOhd6ZLdxYJ0h6ehNfZ3vb4A0f8=
Subject key identifier: 26:92:E0:FB:2A:8D:24:57:5A:DA:54:A3:57:BF:73:49:AA:4B:18:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186605DAE44FBB8660303299801929D94E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JpLg-yqNJFda2lSjV79zSapLGIo.roa
Signing time: Fri 17 Feb 2023 17:13:17 +0000
ROA not before: Fri 17 Feb 2023 17:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:5d:ae:44:fb:b8:66:03:03:29:98:01:92:9d:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 17:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2692e0fb2a8d24575ada54a357bf7349aa4b188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:8b:01:ee:c5:96:b1:c5:4e:08:e3:5c:fe:
65:c1:9f:c0:ce:97:c9:8f:46:bf:c4:2d:73:5f:8c:
f8:65:b2:fe:58:05:24:38:6f:37:23:ce:e8:a9:e9:
27:6b:8f:a6:31:07:48:47:82:89:c5:9f:32:a3:f1:
00:e0:cf:b3:7a:df:bb:e5:f9:ba:dd:3a:9b:ca:59:
ba:84:6f:e2:3b:12:11:f7:2f:2c:63:ef:5c:e2:78:
48:28:fc:19:b3:30:18:a7:b7:ed:5c:c3:42:ae:c3:
67:9e:f6:47:a4:f9:1e:43:ba:9f:e2:58:a4:b2:2e:
50:76:7c:62:51:ec:31:b4:89:74:10:69:fd:bb:8c:
d7:d4:15:4f:cc:7e:66:6e:bb:e0:72:e0:e8:75:98:
d0:f8:0c:be:3b:22:d9:e8:1f:c1:a4:e8:25:a9:04:
66:00:19:20:b4:89:55:67:2b:5a:cd:43:13:6c:f3:
d6:4a:13:76:eb:e0:6f:6b:53:af:2c:4e:ef:b2:b0:
e9:f3:5c:01:19:2f:4d:10:0b:a0:6e:50:68:97:12:
d7:55:bc:35:18:21:7b:f4:63:ee:ba:99:fa:94:4d:
ca:c3:50:bb:59:c1:7f:f5:62:8b:70:a3:b5:cc:79:
9c:46:c1:00:7a:56:12:68:6a:b5:a1:f5:32:01:2c:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:E0:FB:2A:8D:24:57:5A:DA:54:A3:57:BF:73:49:AA:4B:18:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JpLg-yqNJFda2lSjV79zSapLGIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:91:d7:fd:2f:fa:ee:de:93:86:dd:93:fc:2b:55:fd:3e:0c:
b8:45:04:80:cd:13:0b:eb:9b:2f:61:44:ac:d9:a5:a4:e0:51:
44:21:d5:85:08:49:29:d4:4b:14:ad:07:95:bb:83:16:f1:8e:
09:c8:34:54:ab:21:c5:08:ab:6e:9a:c1:52:c5:54:79:fd:fe:
74:c5:34:4f:01:29:0f:7e:f6:4e:fd:2e:fa:83:80:5f:c4:9e:
e6:8c:74:25:51:01:6b:02:80:6d:30:26:35:fe:c9:62:f6:39:
04:26:18:d8:e2:9b:8b:b0:c2:87:08:1d:43:c8:d8:af:b2:96:
25:62:72:21:a5:da:a0:43:7d:8d:a5:ce:6a:77:96:9e:2c:f1:
36:fc:02:50:f3:03:01:e8:72:f5:55:9f:b5:a5:23:b3:fc:d8:
05:4d:d0:ec:c5:54:73:d1:a7:4b:9b:94:19:7e:c7:11:a1:2e:
77:a6:21:a5:ca:b9:41:1a:24:4b:90:65:ef:65:be:26:43:2a:
51:e5:b9:ee:1c:84:1c:c4:43:8e:8d:7e:97:c7:1d:04:14:1f:
a5:94:45:64:02:1a:da:e2:6d:0a:a5:53:83:bc:e4:79:51:d2:
be:0d:7e:8d:22:fc:a2:4e:c2:19:80:49:70:07:f7:01:9d:c0:
3d:86:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:51:23 2025 by rpki-client