Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j-SjAWwF0DgOy-zpTB5oMkbYxtc.roa
File: j-SjAWwF0DgOy-zpTB5oMkbYxtc.roa (raw, json)
Hash identifier: swVfrRIV4ue8N8ZpS3BR4jEwFjYSxcItDDbxnDVY6gI=
Subject key identifier: 8F:E4:A3:01:6C:05:D0:38:0E:CB:EC:E9:4C:1E:68:32:46:D8:C6:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185304C517D42B582D60060DEC57F49A9A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j-SjAWwF0DgOy-zpTB5oMkbYxtc.roa
Signing time: Tue 20 Dec 2022 16:09:45 +0000
ROA not before: Tue 20 Dec 2022 16:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:4c:51:7d:42:b5:82:d6:00:60:de:c5:7f:49:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 16:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fe4a3016c05d0380ecbece94c1e683246d8c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:01:c6:70:b1:87:3d:c6:f0:2b:f1:38:f5:
40:cf:be:25:99:6a:7a:15:71:22:84:fd:70:f5:96:
48:71:09:5e:e9:7e:9f:0a:50:0c:29:f1:48:8b:10:
17:eb:70:bf:62:ac:66:1b:dd:1b:1f:80:27:53:81:
bd:db:eb:1f:e6:c3:ea:58:43:10:75:07:bb:0f:a3:
47:0d:e0:ac:94:43:29:76:49:4c:9c:e2:17:f1:99:
ea:e4:36:f3:4a:b8:53:d2:26:f2:ad:2c:39:ee:d3:
02:e6:1c:e9:a3:3d:07:2e:17:be:82:15:ac:ad:b8:
3d:f2:5a:6b:50:78:ef:b0:55:4e:a8:5a:5b:84:20:
90:d6:b1:c8:a4:05:8f:81:70:2d:1d:89:86:3c:e2:
13:f5:2a:9a:10:96:a9:5b:c6:ce:cd:03:a9:c5:fc:
d2:27:b7:90:fb:d5:a1:7a:ca:1d:d0:a7:74:89:86:
52:ab:53:cb:7b:68:84:c6:f2:74:a6:23:27:a7:e2:
45:30:40:90:08:1c:8e:16:30:8f:19:f2:37:9d:cc:
f8:3b:d5:17:fe:36:03:7c:68:39:4b:ba:29:10:bd:
b1:76:0d:2e:34:0c:f7:d6:4d:53:a1:19:44:0f:d1:
9f:82:83:54:dd:fc:72:0a:5d:4c:13:32:79:97:f5:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:A3:01:6C:05:D0:38:0E:CB:EC:E9:4C:1E:68:32:46:D8:C6:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j-SjAWwF0DgOy-zpTB5oMkbYxtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d6:ac:a9:3f:3a:4b:55:ae:7d:1e:aa:47:a0:52:b4:09:4c:
c1:33:21:c6:e5:f6:c5:09:c0:fc:a1:e8:f4:07:71:e4:3d:ff:
9b:8e:b7:26:0f:d3:74:59:18:16:94:65:b5:07:a3:7d:dd:ce:
61:c2:79:69:97:01:71:4e:02:13:e1:8b:5e:fd:4e:21:fb:70:
d5:29:c0:7c:2d:5a:dc:c9:04:91:2e:88:c2:43:f2:20:c6:25:
7e:6d:ee:4f:07:d4:58:b0:94:d4:9c:08:3b:8d:46:b5:af:60:
fc:21:d8:f6:c9:f6:67:19:72:24:dc:3c:2c:bc:3b:52:01:92:
f7:d1:ce:8e:b7:4f:24:01:dc:25:16:cc:40:66:7c:1c:c5:a0:
5a:2b:8d:cc:4a:1b:80:bd:dd:09:9c:4a:54:e0:7a:1f:6a:c0:
b1:e4:45:64:e5:4b:ff:22:68:a3:69:c7:4a:84:ed:8c:87:95:
07:f0:8b:b7:04:70:94:4a:c6:bc:4c:86:73:9a:2a:f3:a8:a8:
26:d5:95:60:c2:28:0d:13:63:95:62:89:4a:96:7c:59:8e:d9:
0b:8f:ff:78:8f:2b:a2:49:b4:f3:d7:8e:6b:5d:9e:5e:8c:91:
8f:92:37:7c:2f:76:74:42:23:c2:8b:0e:c1:11:46:22:c2:bb:
73:37:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:46:41 2025 by rpki-client