Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxvS6iiv11WSnB7x4CZ20LcTVA.roa
File: _JxvS6iiv11WSnB7x4CZ20LcTVA.roa (raw, json)
Hash identifier: pVEzt4L1Y/oJH+IjGL7Bb3WWevrntLZC0QEvFU9ZCxM=
Subject key identifier: FC:9C:6F:4B:A8:A2:BF:5D:56:4A:70:7B:C7:80:99:DB:42:DC:4D:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018595CAEB11F1263C0453B24C55CD723BC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxvS6iiv11WSnB7x4CZ20LcTVA.roa
Signing time: Mon 09 Jan 2023 09:09:41 +0000
ROA not before: Mon 09 Jan 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ca:eb:11:f1:26:3c:04:53:b2:4c:55:cd:72:3b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9c6f4ba8a2bf5d564a707bc78099db42dc4d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:e2:f0:96:fb:d9:04:bb:19:5d:3f:01:19:
a8:27:19:da:10:db:12:ce:c4:42:5d:e6:90:e6:17:
f5:4c:34:44:cb:c9:5b:c5:8c:16:6b:24:f4:5e:d0:
c6:e1:b7:03:46:db:98:f5:9f:de:2d:20:51:b5:92:
f3:86:32:a2:b1:27:b4:4c:8f:ba:2b:16:e4:0d:48:
fd:ee:4a:56:f9:68:ea:3c:47:f5:30:8c:0e:7b:1a:
48:6f:e3:21:78:7f:28:5e:e8:1d:4a:d9:bd:c0:4c:
5f:65:bd:1e:a6:26:30:fe:f4:f8:34:8e:3f:ec:5d:
ae:0a:b6:12:e2:fb:7a:e2:e8:e7:e6:fc:79:fc:de:
10:0c:b0:43:8a:a5:2c:06:0f:99:42:5b:b8:16:e4:
4a:54:dd:ab:b0:54:d6:37:79:b7:66:fe:3d:9a:0c:
f9:7f:de:bb:a8:44:1e:ae:c9:25:a9:20:b0:af:94:
d8:4f:74:09:6c:6f:92:92:52:c0:84:dc:47:08:97:
ca:55:f6:bf:3c:02:86:53:c8:3b:04:23:32:94:ee:
63:8f:45:9a:2a:e7:c4:79:4d:4b:a3:e6:02:f8:da:
e2:3c:7c:05:0a:62:b3:ba:ef:08:55:85:06:66:70:
f3:1c:ba:2b:4f:4d:99:e6:14:e8:23:88:00:cc:a1:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:6F:4B:A8:A2:BF:5D:56:4A:70:7B:C7:80:99:DB:42:DC:4D:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxvS6iiv11WSnB7x4CZ20LcTVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:74:94:c2:5b:08:60:8d:f4:2d:a3:b6:aa:1c:b9:5f:03:a9:
df:a7:0f:8f:39:88:51:11:61:55:86:3b:63:00:03:03:d8:e2:
6d:3a:44:5d:c2:28:31:ea:c6:bf:ab:b7:f0:cd:3c:9c:58:ee:
fe:26:38:56:1a:29:3b:54:a0:71:3a:e2:28:95:34:ff:0c:07:
1d:8f:d1:f7:4d:2a:b2:4e:6d:b4:8d:50:d3:84:0a:ea:33:59:
cc:df:e2:ea:46:d1:62:99:46:3d:b0:62:37:8e:42:84:4e:7b:
1c:01:74:0b:64:06:e9:17:8b:98:6f:61:61:fb:c8:bb:e0:e2:
56:46:52:b9:a7:f2:46:35:06:8c:d2:72:20:1f:31:ac:92:5d:
45:a7:4a:11:58:0a:67:1b:2d:ac:ca:25:56:50:2f:f9:41:80:
9d:e8:82:7c:94:fb:f6:2c:3d:1c:08:c9:63:01:23:7f:98:3f:
aa:32:0a:63:17:ca:77:4a:68:3f:a4:23:d3:ed:af:39:52:76:
8d:b3:d6:c8:b7:2a:ee:58:d3:97:57:00:b9:9b:a8:ad:8d:46:
dc:2b:6f:61:3e:f5:75:8d:9d:8d:b9:c2:c6:f5:b2:e3:39:5f:
06:08:55:4b:92:a0:75:32:6d:91:89:99:e1:3c:df:9f:91:e4:
b6:a5:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:24:57 2025 by rpki-client