Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JskPmMuTx1JnPxc-z3QoIaGuPKI.roa
File: JskPmMuTx1JnPxc-z3QoIaGuPKI.roa (raw, json)
Hash identifier: 7yDpj2mf+MC3ECjKgGNEEVtJCqg9BSe8w83cQWU+6ZU=
Subject key identifier: 26:C9:0F:98:CB:93:C7:52:67:3F:17:3E:CF:74:28:21:A1:AE:3C:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D5F6BFA017BC974E65883D9E09562B7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JskPmMuTx1JnPxc-z3QoIaGuPKI.roa
Signing time: Sat 03 Dec 2022 03:10:28 +0000
ROA not before: Sat 03 Dec 2022 03:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:f6:bf:a0:17:bc:97:4e:65:88:3d:9e:09:56:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 03:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c90f98cb93c752673f173ecf742821a1ae3ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:03:9f:65:a8:50:06:19:5a:93:45:ac:37:
7f:c4:0a:ca:94:90:9c:e1:0d:b5:4b:10:53:62:d7:
a6:9c:ff:53:0f:13:93:8e:95:52:bc:35:02:3e:b0:
e1:8a:8f:df:20:07:98:75:bd:e5:78:be:9e:b4:cc:
75:08:48:f6:97:d0:b0:62:f7:62:93:3d:53:52:12:
9b:b0:a3:48:bc:65:a0:2b:23:d3:42:2d:bf:47:b4:
1b:1c:c6:31:da:b5:c8:73:8d:ee:88:92:17:ab:72:
92:cc:0a:50:d3:26:af:be:e3:cf:3d:77:24:0b:44:
a1:54:9f:f1:4c:19:2c:76:24:04:ef:59:98:66:66:
3d:b0:d1:f4:aa:fc:3b:75:ec:77:76:8b:32:90:ee:
ea:6a:c8:7c:bf:b5:dc:78:5a:cd:81:d1:5b:da:ba:
f3:5e:d7:85:01:ce:ef:c8:65:4c:f9:64:5c:ff:7c:
59:4b:2e:31:3e:36:ad:31:88:0f:88:24:54:e6:a2:
a8:41:df:1b:76:c4:d9:28:2a:8b:e3:63:3c:89:38:
82:e8:45:36:0d:c6:9e:a7:d5:a4:de:6e:fd:9a:6a:
7c:78:a2:96:68:b6:e3:d2:5d:94:43:9b:f3:11:e2:
d2:f1:66:5e:50:f6:0a:70:73:d4:f8:db:a7:c4:32:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:0F:98:CB:93:C7:52:67:3F:17:3E:CF:74:28:21:A1:AE:3C:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JskPmMuTx1JnPxc-z3QoIaGuPKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:7d:a7:08:61:81:85:95:f9:9a:4d:30:cd:fc:7a:a7:53:a2:
4e:c6:e5:09:34:d6:3b:ca:df:31:2c:fc:93:0d:1b:f5:08:61:
13:c0:2d:1a:d0:71:6a:48:3b:d7:41:4d:73:47:d4:02:ca:47:
db:7d:d2:31:bb:0e:34:9f:19:c9:d5:c6:3d:82:ae:27:6d:f1:
fd:c8:bf:67:51:b5:1b:65:aa:e5:26:60:0c:c0:60:7a:6d:ed:
85:1f:7e:bb:ad:a0:f7:71:10:af:68:b6:f6:ea:e7:fc:41:78:
89:15:57:87:11:01:04:b5:e0:1a:32:2a:36:f0:61:07:7c:ff:
41:61:fb:44:f1:63:af:07:8b:0e:33:80:03:65:5d:dc:28:2f:
27:7c:aa:44:4c:86:89:c1:88:3d:91:9f:ac:93:a6:5f:68:5e:
79:6e:7c:73:52:15:f7:45:44:58:f1:39:92:b5:40:39:de:69:
d3:eb:71:a0:5e:ba:95:1b:22:c7:85:70:3e:3a:0d:6e:c4:36:
a0:1e:53:e7:5f:b3:1d:8b:7a:0b:bf:90:67:25:e6:24:d4:ee:
3a:d6:43:59:39:ff:30:e7:b8:74:81:fd:b8:7c:04:6a:ba:86:
50:32:51:78:f0:dc:46:9e:73:26:39:86:31:a7:88:c0:5a:3c:
70:ee:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:48 2025 by rpki-client