Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fj_zuj8JM_cvdSHTF4X109s14CQ.roa
File: fj_zuj8JM_cvdSHTF4X109s14CQ.roa (raw, json)
Hash identifier: JPhx8+JFHtdlPhZIMc5ZA5SBc+IjJhyYIFBVWxnHSVE=
Subject key identifier: 7E:3F:F3:BA:3F:09:33:F7:2F:75:21:D3:17:85:F5:D3:DB:35:E0:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A919870
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fj_zuj8JM_cvdSHTF4X109s14CQ.roa
Signing time: Mon 14 Feb 2022 16:13:24 +0000
ROA not before: Mon 14 Feb 2022 16:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787926640 (0x6a919870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 16:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3ff3ba3f0933f72f7521d31785f5d3db35e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:a4:63:c9:89:e8:0b:4c:33:44:60:c5:73:
66:56:31:ab:1c:43:0e:70:6c:aa:d1:df:d4:4e:fa:
c0:74:0b:70:fb:1f:6e:74:5b:c5:af:b0:fe:15:8e:
17:61:39:1f:d2:7f:be:10:09:c0:7e:09:b9:c0:78:
99:82:77:e7:4c:5b:16:31:c7:f3:c0:26:4f:3f:87:
7b:e4:52:74:de:42:3b:bd:6c:0a:7f:0f:94:8b:6a:
fe:20:a0:19:d1:f5:06:d5:4c:7c:d5:fc:36:cb:19:
5e:7b:91:7b:cc:2e:8f:e5:24:8e:b8:a6:77:d3:5a:
c7:56:3a:09:10:d0:10:54:85:b8:09:7c:ea:4b:69:
9b:fc:32:d1:4a:38:af:91:87:35:6e:2b:a1:e4:6e:
69:46:9e:04:d6:98:9c:12:4f:76:3b:44:2f:9f:f3:
bc:5e:b3:d6:5f:02:cd:87:9c:64:f7:9d:cd:50:85:
18:a5:c0:7b:8e:ca:00:25:25:69:e9:4d:99:59:f3:
5e:be:84:99:c1:65:32:91:6c:dc:70:6c:f9:14:2a:
e9:18:6c:ed:75:03:77:a7:4a:04:04:69:56:a2:20:
15:51:fa:82:de:9c:8e:71:79:0e:bd:8d:a8:22:9d:
50:ad:28:e0:6d:39:0f:e8:60:1b:df:65:98:ef:08:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:F3:BA:3F:09:33:F7:2F:75:21:D3:17:85:F5:D3:DB:35:E0:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fj_zuj8JM_cvdSHTF4X109s14CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:24:18:46:d2:e3:80:3c:b3:f6:11:30:5f:5d:4a:ff:99:94:
ad:a6:7b:ca:97:a6:ee:28:85:00:ac:af:2b:b5:cb:92:0b:4e:
f7:3a:4a:66:fe:81:5f:b4:30:f7:6e:45:87:a4:44:85:aa:26:
f2:42:71:9a:21:e0:2d:b3:fc:51:b3:74:f1:0e:be:79:98:a0:
60:87:c5:3d:47:d2:80:37:9a:24:43:f9:14:46:9a:7c:ba:a7:
9c:e3:6f:56:fe:44:2d:d7:c5:b6:34:9a:03:5e:85:9a:a8:ba:
4e:f6:cb:a7:93:36:4f:39:af:76:f4:5b:6b:91:24:4f:5a:c9:
f3:e2:0a:87:b5:7e:97:82:a1:85:fc:58:93:d3:34:a5:b7:f0:
fe:d2:92:1f:32:75:25:25:f9:47:92:59:26:96:d1:9d:e9:8e:
53:62:ee:14:5c:1d:fe:37:fb:be:d9:a4:d8:84:30:da:fa:df:
02:49:1f:41:9c:54:01:a5:4b:e6:d3:a5:fc:81:b3:a9:7f:a1:
35:80:2e:6f:ac:1e:09:f1:30:8e:a5:a4:ce:d5:f3:38:93:bb:
b0:ad:85:b5:c9:3a:9b:54:e2:e0:94:01:ed:50:f5:f9:a3:cb:
b3:97:00:76:1f:7d:ed:2c:6e:85:a8:66:da:92:74:4a:cd:46:
56:0f:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:22:08 2025 by rpki-client