Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_j-MwmupNSqPQBrTzLP78JKn3-Q.roa
File: _j-MwmupNSqPQBrTzLP78JKn3-Q.roa (raw, json)
Hash identifier: U2+ymUYUbqtTZD8B9ojKd93fHbaxaBIQzH4jPVFuq9E=
Subject key identifier: FE:3F:8C:C2:6B:A9:35:2A:8F:40:1A:D3:CC:B3:FB:F0:92:A7:DF:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AE40EC41833C6033E86DCD82B730D04B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_j-MwmupNSqPQBrTzLP78JKn3-Q.roa
Signing time: Sat 14 Jan 2023 03:09:28 +0000
ROA not before: Sat 14 Jan 2023 03:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ae:40:ec:41:83:3c:60:33:e8:6d:cd:82:b7:30:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 03:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe3f8cc26ba9352a8f401ad3ccb3fbf092a7dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:c9:28:4d:9c:45:c6:a5:56:8d:62:d9:80:
8c:6d:4a:fd:f0:3c:d1:63:5a:5b:f3:15:c6:3a:47:
d2:94:b0:f6:cb:10:57:d3:67:75:e5:ee:2b:91:4c:
e4:5f:6a:37:a7:62:5b:6a:3e:e5:3a:96:5e:43:a7:
4a:20:38:53:be:d4:ed:b6:d3:16:9b:4f:65:ee:cc:
e2:fc:7e:91:39:79:5a:98:c3:d3:66:7d:22:3e:9b:
e1:28:05:5f:31:b8:66:92:6f:97:70:ff:38:1e:46:
3e:db:0e:4f:9f:bb:97:68:2b:3f:f0:44:30:c0:5e:
d2:13:45:72:70:af:ec:0a:d2:e3:b9:28:6e:23:2e:
7b:01:98:cf:a3:02:2f:98:45:07:f9:c0:60:41:5f:
ad:c8:75:c7:b0:a7:65:a5:38:81:c1:3e:5b:26:4d:
63:dc:a0:63:56:07:0c:82:62:2b:49:a8:85:71:65:
a5:ae:43:76:d2:b7:c0:5a:7a:93:48:34:7c:b1:07:
26:c4:f3:19:55:a2:eb:3f:72:82:ff:34:24:18:a2:
c9:9c:f5:44:39:93:da:6b:9f:b6:5b:88:02:c4:4b:
b5:04:fb:c2:fa:30:2b:26:16:1b:ed:08:a4:c4:bf:
85:7d:60:2e:ff:10:3c:97:5d:f2:56:db:cd:dc:6e:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:8C:C2:6B:A9:35:2A:8F:40:1A:D3:CC:B3:FB:F0:92:A7:DF:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_j-MwmupNSqPQBrTzLP78JKn3-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b4:cd:1f:73:33:80:b9:76:15:36:79:36:de:d7:3a:3b:83:
ab:8a:ec:b7:04:f0:f4:f9:c9:3f:72:93:27:cd:1a:af:89:34:
f1:00:40:fe:03:2b:ea:73:dc:8d:1f:61:31:02:b2:5d:72:7c:
14:8e:fb:c8:71:7a:60:b8:57:2c:81:3f:1b:9b:ff:30:45:8b:
92:54:28:15:ae:21:4c:3f:d0:60:47:d5:6f:f0:eb:7d:cb:d0:
fe:80:02:cc:3e:66:f6:52:a1:4e:77:23:f1:91:f2:76:09:02:
1b:78:44:2f:78:ed:3b:66:ec:68:2c:d6:32:a1:55:32:d7:65:
b3:64:c0:97:50:4a:b7:e6:87:e3:5a:fb:d5:79:f2:3e:01:ea:
5a:72:6a:ae:29:63:3a:e3:ed:b2:53:94:c5:a9:b2:73:d0:59:
de:d9:d4:23:54:db:3b:a8:2c:ab:7a:7b:c9:55:3e:eb:14:ac:
61:d9:79:be:7c:9f:b4:75:ce:ca:b1:c2:c6:da:f7:b2:01:6f:
34:69:11:03:81:c7:bd:16:26:e8:f9:48:e4:a3:08:39:e3:80:
26:bb:b7:09:d0:1a:4d:50:2e:f7:23:a0:67:ef:ba:43:18:12:
e1:91:fa:25:a5:80:fb:b9:ba:a1:3e:a5:db:31:1f:1b:bb:49:
a2:08:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:14:23 2025 by rpki-client