Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JzsdWOV4BR9P1Ya_qB-dD7vapHk.roa
File: JzsdWOV4BR9P1Ya_qB-dD7vapHk.roa (raw, json)
Hash identifier: yipogZt8EqghmK3vU+w7dQoQZ7+fdB6bCFosUCWTK6U=
Subject key identifier: 27:3B:1D:58:E5:78:05:1F:4F:D5:86:BF:A8:1F:9D:0F:BB:DA:A4:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850487674B870E6135BF3AE3B3C8C4688D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JzsdWOV4BR9P1Ya_qB-dD7vapHk.roa
Signing time: Mon 12 Dec 2022 04:11:00 +0000
ROA not before: Mon 12 Dec 2022 04:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:04:87:67:4b:87:0e:61:35:bf:3a:e3:b3:c8:c4:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 04:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=273b1d58e578051f4fd586bfa81f9d0fbbdaa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:0e:ea:c3:e0:61:0a:de:ab:bc:83:72:19:
60:fe:2f:6a:eb:a7:49:23:d1:56:6b:75:34:bb:d0:
97:49:66:bb:c6:4e:5e:fb:a5:e6:35:3f:ee:a9:eb:
b6:99:06:06:32:1a:93:72:2b:1b:97:d2:11:c2:5b:
dc:0c:66:dd:ba:d5:c5:70:6e:b8:81:46:c0:a0:d7:
d4:7d:ee:bf:98:b6:0c:4b:fa:3f:a8:92:84:cf:a8:
02:50:0b:12:03:06:52:d9:4c:7c:71:c7:7c:4b:c8:
17:04:00:00:2e:4a:7a:0c:99:5b:28:8b:81:40:5e:
22:ca:7b:6d:0b:31:6e:e1:18:68:44:2b:58:fb:6d:
af:82:ec:8b:d1:68:84:85:c5:be:44:fd:59:2e:aa:
3c:a5:c2:ef:01:5a:75:64:ec:13:2c:78:3e:36:e9:
18:4e:bb:36:d1:ab:5f:52:9f:1a:56:03:22:b7:6e:
09:37:7c:ce:36:ac:ae:4e:1a:9d:12:13:eb:50:a0:
d8:3d:d7:c3:e3:bb:db:0c:df:63:9c:03:aa:ab:88:
36:56:f4:8f:9c:ec:23:b9:f0:f3:a8:a3:46:f6:d1:
84:fa:67:93:55:3e:39:0c:30:87:ae:26:a7:73:51:
94:ab:43:cf:a1:f6:a8:14:93:b8:6c:5d:f4:16:93:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:1D:58:E5:78:05:1F:4F:D5:86:BF:A8:1F:9D:0F:BB:DA:A4:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JzsdWOV4BR9P1Ya_qB-dD7vapHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:5e:b4:43:02:04:94:c8:2f:2f:e6:f5:b4:04:9a:2a:d8:20:
1a:82:32:d9:47:c1:d5:0a:06:84:39:ba:54:c6:79:84:8b:78:
3f:77:4c:b7:2b:13:51:85:7c:45:67:83:4f:ef:3b:0a:31:ce:
ab:44:65:85:bf:5b:45:2f:17:72:a7:5a:f9:49:99:06:78:f1:
d8:de:9e:7b:22:60:5b:5e:d6:ff:ec:0e:06:6e:a0:3e:8e:2f:
b7:7c:2f:ef:0b:29:e8:84:60:53:c8:c0:af:0e:72:ba:5c:a1:
07:f7:05:d0:80:3a:70:39:2f:2d:92:07:71:df:03:5e:b8:b8:
0f:f1:60:58:06:a9:09:4a:5e:cb:2f:fe:c7:7f:b6:43:3b:f8:
93:2f:cb:19:43:83:fa:8c:0f:01:60:55:4d:ee:80:18:56:0b:
24:60:0f:ab:38:2a:88:df:5c:1a:64:fe:3b:5b:41:ba:d7:37:
8a:5d:55:e1:40:9a:0f:8d:30:f6:f1:cf:2c:12:00:b7:d8:63:
dd:89:dd:3b:1b:f1:a5:65:96:46:9f:e7:ff:d5:92:77:1f:eb:
26:47:97:fa:b0:8e:b9:4c:43:d6:8e:f0:eb:e2:74:80:c7:ab:
42:6b:06:0a:67:ed:bf:15:9d:ec:bc:bb:46:f0:ba:0a:da:da:
96:3d:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:45 2025 by rpki-client