Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dsJJKFTEFyBH41nnCOJbkYut68w.roa
File: dsJJKFTEFyBH41nnCOJbkYut68w.roa (raw, json)
Hash identifier: OX84fo0jQ+JFKH8S/D4L14Oke++PB823QGLRsS3yfm4=
Subject key identifier: 76:C2:49:28:54:C4:17:20:47:E3:59:E7:08:E2:5B:91:8B:AD:EB:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898F5175732B951E45DDA89E615C44BB12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dsJJKFTEFyBH41nnCOJbkYut68w.roa
Signing time: Tue 25 Jul 2023 23:10:27 +0000
ROA not before: Tue 25 Jul 2023 23:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8f:51:75:73:2b:95:1e:45:dd:a8:9e:61:5c:44:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 23:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c2492854c4172047e359e708e25b918badebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:66:14:8b:34:a8:8f:e4:c6:9c:0d:07:c0:
10:d3:87:36:b0:1e:aa:2a:c6:ac:54:ba:3c:3a:53:
4b:ac:fb:0e:1f:aa:86:b0:d7:9e:5d:d9:b8:0d:8b:
75:ce:e7:0d:bf:ff:5b:1a:07:95:40:38:50:5a:56:
c9:f5:b1:f9:41:de:a3:ff:db:8b:84:6e:56:43:9a:
25:e7:cf:74:c2:af:3d:03:82:c6:45:94:54:c7:55:
83:84:bd:51:43:50:39:c0:19:ec:c2:f4:31:2d:eb:
2e:73:e7:c5:ab:3a:b7:88:7a:bd:bc:de:fb:d4:2c:
6a:45:29:4c:6a:80:f0:95:96:06:0f:ac:03:42:b3:
6a:7a:ae:8a:25:62:fa:12:3d:eb:19:c4:e8:fe:21:
6e:b9:e6:dd:01:e7:6b:83:17:7b:aa:0a:32:6e:9a:
8e:12:48:1f:ad:25:4d:3b:9b:09:67:b1:a2:00:be:
fd:4d:e7:32:3d:77:c5:79:12:07:3b:8a:8f:ee:3b:
04:ad:e0:9d:b0:dc:ac:e9:ac:03:82:f7:8b:22:6b:
24:05:f3:18:ab:1f:79:66:82:4b:62:aa:66:68:8c:
6a:dd:c5:fb:fd:80:31:ff:5a:79:6f:df:82:e8:e1:
3d:4a:c4:a7:7e:db:ad:2d:07:b8:52:e4:5a:cf:8f:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:49:28:54:C4:17:20:47:E3:59:E7:08:E2:5B:91:8B:AD:EB:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dsJJKFTEFyBH41nnCOJbkYut68w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:b7:95:92:6f:3b:2d:ea:69:f5:2c:63:3e:d6:a3:d3:90:f2:
0f:7f:1e:e8:0a:00:4c:e2:05:83:99:0d:d8:2b:4d:a4:e1:a8:
8e:01:87:c9:4c:c9:0b:ec:0e:42:9f:ef:1b:68:52:47:cf:a5:
7f:22:bb:e7:3f:81:18:bd:e5:6c:ea:1c:f2:b0:35:b7:76:57:
5d:a9:2c:4e:9c:66:8d:62:76:4e:2b:c3:96:74:c8:22:86:9a:
a4:19:e6:81:0f:93:12:cb:71:25:58:f1:2d:bb:93:17:f6:bc:
c9:f1:b5:99:90:ce:08:fe:c4:4f:66:50:f2:2e:16:3a:6f:70:
c2:d3:3d:f0:f1:b3:e5:41:d7:50:34:63:68:2e:bf:83:d4:5e:
1b:99:b3:14:4a:dd:ca:8a:d4:2e:7a:83:68:38:83:a1:ec:b8:
c9:a9:26:45:b7:54:6a:3c:8d:40:ac:2d:aa:2e:b6:da:05:93:
b7:42:cb:ac:ba:b0:1d:09:81:44:ca:a8:82:a8:7a:d2:b0:ac:
67:6e:bc:f6:51:cc:2c:01:0d:09:73:bc:66:01:5e:c1:b5:f2:
f6:4e:b7:ad:46:d9:67:95:01:06:0a:1b:9e:d3:31:a3:ed:f6:
1f:cc:65:2f:da:b1:de:1f:93:fd:72:a2:aa:54:f5:70:92:ce:
1a:7c:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:37:51 2025 by rpki-client