Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvJYpe4nDGaEQxICcRljfh7FUF8.roa
File: JvJYpe4nDGaEQxICcRljfh7FUF8.roa (raw, json)
Hash identifier: PZwxNbeSRj26iMgUcFle1DZC6GiFioB2qGp9R2Qxpco=
Subject key identifier: 26:F2:58:A5:EE:27:0C:66:84:43:12:02:71:19:63:7E:1E:C5:50:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67F48DA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvJYpe4nDGaEQxICcRljfh7FUF8.roa
Signing time: Sat 05 Feb 2022 00:04:22 +0000
ROA not before: Sat 05 Feb 2022 00:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:c732:3248/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744080297 (0x67f48da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 00:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26f258a5ee270c66844312027119637e1ec5505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:66:a1:ce:3d:e9:af:e3:a2:95:e7:74:55:
6b:bb:ed:fb:4d:62:bc:4c:cf:9a:83:e7:ae:4e:77:
17:b1:a1:b6:ab:bd:af:21:5f:46:92:76:fd:f8:e0:
0b:da:32:14:4b:dd:32:27:54:97:e8:37:07:5a:c1:
72:f0:09:2e:68:14:2c:3d:07:09:18:f7:c1:ae:07:
d5:e2:22:0e:b4:d3:1d:3c:4e:f3:9a:65:58:39:19:
a6:95:7b:3f:00:eb:01:9f:3d:a9:1b:7b:31:a9:4a:
94:be:2c:57:a9:0e:c7:4b:5e:d4:67:22:2d:88:8e:
f0:9c:aa:7b:2c:a2:d0:82:9b:d2:3b:50:2a:01:3c:
a7:51:b0:57:03:b1:67:25:49:b4:1f:9f:47:15:e1:
8b:c8:7e:48:4e:8e:f7:c0:80:f6:f4:a0:d1:13:ff:
5a:a9:d9:01:00:81:4d:a0:f7:58:1e:42:9b:70:03:
27:44:a5:df:98:d2:b5:d5:7a:01:fe:0b:86:e7:12:
5f:42:3c:2b:05:87:b8:89:38:2c:61:5b:aa:67:d0:
14:0b:2c:36:ef:29:2c:d7:f1:f0:fa:6a:eb:27:79:
7b:39:0f:ee:7c:08:2e:3d:37:0a:d4:21:e3:37:49:
cb:b2:06:9d:1a:75:11:04:65:72:52:ab:e1:88:b7:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:58:A5:EE:27:0C:66:84:43:12:02:71:19:63:7E:1E:C5:50:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvJYpe4nDGaEQxICcRljfh7FUF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:5d:13:15:3a:60:e0:eb:54:f1:d3:31:1c:4d:49:17:bd:25:
e9:19:82:3a:81:93:ca:03:18:20:e4:b6:ad:c6:3c:e3:73:4a:
96:45:d5:31:02:0a:70:08:45:b7:2d:fe:43:ea:3f:c5:c0:48:
fc:88:79:39:bd:45:ae:5e:5f:2d:8a:58:93:da:6b:37:94:a4:
c8:5a:ba:0b:f9:0d:17:b0:6b:b9:e5:68:f7:6e:27:ef:4f:6f:
d6:44:24:b1:b2:26:da:ed:40:22:66:b1:34:87:0d:37:67:bd:
1d:c5:ab:c0:ee:0d:68:eb:a7:21:db:79:a6:40:31:6f:c1:ee:
2d:ce:51:e1:bc:d3:37:67:62:fc:86:cc:73:6b:ec:4b:71:ba:
a9:3c:17:7f:c8:bd:93:46:d3:8d:c6:1b:f3:da:23:fb:1c:49:
6b:3d:53:3c:20:31:89:05:74:f4:62:12:9c:9a:88:8e:e7:15:
6d:18:29:6b:30:b0:09:6f:6f:ea:bd:3a:ff:90:c9:df:b1:ca:
39:a4:ed:25:f4:77:47:6b:11:b2:8c:b9:9c:09:07:da:1b:c6:
27:9e:a8:bc:1b:7e:67:80:e0:fe:1c:8f:8d:ee:b3:a8:57:77:
be:f9:1b:db:3c:e9:06:56:43:bb:ee:4e:d8:76:3c:0e:c0:a8:
a6:db:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:11:35 2025 by rpki-client