Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JybqV0-nFzdqFqosX_JjDJMJ8c.roa
File: _JybqV0-nFzdqFqosX_JjDJMJ8c.roa (raw, json)
Hash identifier: IxdGfzWSz8R2cpibiNqcYw9W9Itfm9E3fRIcCdSCMyE=
Subject key identifier: FC:9C:9B:A9:5D:3E:9C:5C:DD:A8:5A:A8:B1:7F:C9:8C:32:4C:27:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BF370A1D71B8BFB3A0A0F7876DB239F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JybqV0-nFzdqFqosX_JjDJMJ8c.roa
Signing time: Wed 08 Mar 2023 03:15:00 +0000
ROA not before: Wed 08 Mar 2023 03:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:37:0a:1d:71:b8:bf:b3:a0:a0:f7:87:6d:b2:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 03:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9c9ba95d3e9c5cdda85aa8b17fc98c324c27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:c2:dc:8c:d2:58:4b:d2:34:46:2b:c9:16:
1c:db:32:b0:7c:3c:eb:0f:a7:e3:b0:69:43:f3:c0:
bb:93:58:c4:e2:37:e1:4b:47:c5:9a:f4:ec:ee:cf:
1b:71:58:b3:05:09:27:40:15:22:f2:0d:f7:bc:a7:
77:5d:0f:48:a7:fa:98:b4:ac:e5:70:7d:b3:58:20:
0a:25:15:e2:9d:87:38:85:98:e2:c3:24:b5:67:ec:
a9:0d:ca:ca:0d:27:ff:4b:a5:29:22:95:7a:8f:ec:
61:fd:c9:2c:40:3e:d6:d9:53:18:fa:da:fc:6e:35:
ce:6d:07:f1:7a:07:f0:2d:c3:59:f4:cc:b0:35:8a:
a9:5d:e2:a4:6e:13:97:3b:bf:d0:a6:33:a9:32:57:
c1:26:63:63:ea:eb:6e:43:77:43:0a:6f:d9:cf:58:
d5:f3:83:9f:d0:88:cb:d4:c6:ce:e8:57:c3:de:50:
62:da:de:76:e4:ee:52:70:f2:54:18:9b:50:59:96:
2a:e9:0d:d1:ca:e1:ad:03:d7:76:b6:2b:14:b9:8f:
00:2a:83:7a:df:84:71:8a:c4:eb:48:04:fe:59:bf:
53:32:ee:0a:5d:c1:19:e1:5b:7d:96:a4:0c:f1:f4:
90:74:cb:60:dd:87:00:67:be:8e:84:67:2d:78:b8:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:9B:A9:5D:3E:9C:5C:DD:A8:5A:A8:B1:7F:C9:8C:32:4C:27:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JybqV0-nFzdqFqosX_JjDJMJ8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:08:17:7c:6d:2f:61:6b:65:25:8c:2e:0c:f3:01:07:9c:6b:
3d:08:80:eb:e6:97:63:d7:24:3f:78:68:66:93:40:f2:db:5e:
bf:18:70:78:21:9d:0e:d4:5b:01:32:1b:2b:c2:a9:f5:a1:0b:
d3:38:ef:56:1e:65:b1:29:99:cb:5f:52:b6:4c:e9:15:28:5d:
aa:d2:9e:33:4d:94:04:62:6d:2f:6d:b4:5d:00:d6:d7:0b:4a:
11:9b:49:14:3d:f4:70:68:9e:98:b5:49:8e:61:e2:c8:5a:32:
bc:b1:be:d7:b8:e8:90:c2:ac:82:71:c0:ee:bb:af:8f:01:75:
14:2c:a7:7e:17:4f:78:a2:dd:93:a8:ce:1b:64:2c:1b:c9:19:
c6:c6:46:9d:aa:de:53:02:30:64:b3:82:65:8d:eb:08:a2:22:
91:cd:93:4b:f3:b9:3c:43:bd:0c:7a:99:f2:1b:49:23:e3:f7:
4c:81:23:93:70:ab:b8:8b:7f:4e:19:c9:0b:2c:5b:f7:01:5e:
b0:02:08:aa:c8:ec:d7:7d:d8:89:2b:a7:fc:f7:b6:60:49:c7:
fe:dc:17:bd:5e:8d:3b:58:44:e8:21:74:7d:1c:98:39:1c:f0:
84:9b:31:8c:72:48:3c:09:c7:40:82:b9:9b:c1:6f:40:50:01:
77:8f:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:49 2025 by rpki-client