Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j0sFrC9oEy0nubUEHVlgxC2u_MU.roa
File: j0sFrC9oEy0nubUEHVlgxC2u_MU.roa (raw, json)
Hash identifier: wQe0IJBpmm6lqK76d+Or0mBNCOuKrOM5NLSlMr/O2+0=
Subject key identifier: 8F:4B:05:AC:2F:68:13:2D:27:B9:B5:04:1D:59:60:C4:2D:AE:FC:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852713ED5ACE1C1C7C70AB95947289B87A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j0sFrC9oEy0nubUEHVlgxC2u_MU.roa
Signing time: Sun 18 Dec 2022 21:11:35 +0000
ROA not before: Sun 18 Dec 2022 21:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:13:ed:5a:ce:1c:1c:7c:70:ab:95:94:72:89:b8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 21:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f4b05ac2f68132d27b9b5041d5960c42daefcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:4c:6b:18:97:51:42:9f:f7:91:5f:3d:c8:
3d:63:34:28:39:a6:b0:31:59:43:f5:e8:8d:eb:bc:
12:b5:fe:07:66:be:06:6f:72:13:d8:1d:97:02:06:
77:e3:e3:74:ad:07:f4:22:c6:88:e9:68:09:91:10:
52:a3:d2:63:98:8a:1b:3f:b9:f4:02:eb:a8:91:19:
5f:17:b3:6b:c4:5d:44:c3:6c:69:f9:e2:86:8e:88:
b5:55:20:12:7b:93:7e:87:af:fb:e4:68:63:7a:e1:
1b:6b:3a:f9:c4:63:1c:d5:0f:ae:b4:8c:0c:7e:15:
37:3a:f8:cf:bb:8c:42:de:c2:14:fc:8e:ac:1f:56:
1d:8a:59:bf:5c:fd:c4:35:81:6c:25:6b:c9:79:a7:
0f:81:fa:61:ab:81:9a:ab:9b:4c:4c:c7:b4:18:8c:
71:d5:23:1b:a5:a5:4a:49:a8:00:08:18:95:be:d8:
ff:d9:8f:44:8c:9f:46:cd:df:e6:91:dd:98:4c:b0:
85:a8:5b:62:a9:ac:07:2c:fb:7f:7e:5a:67:ad:ba:
3d:f9:70:41:69:8d:a0:97:a3:5f:15:80:56:9a:c9:
5d:b4:1a:3d:d9:ec:da:3c:d5:27:30:b3:ae:ae:07:
38:a8:ec:6c:bc:10:e8:47:bb:29:88:a1:9e:0d:2f:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:05:AC:2F:68:13:2D:27:B9:B5:04:1D:59:60:C4:2D:AE:FC:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j0sFrC9oEy0nubUEHVlgxC2u_MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:d8:da:c2:7b:e6:ca:56:95:cc:7d:2c:bc:16:2e:98:c2:3f:
b8:f6:62:0c:74:ea:fe:dd:57:69:76:e8:0a:42:c3:6d:5f:09:
40:e3:68:c4:80:0d:58:99:00:6d:bb:58:fa:64:da:bc:60:7a:
22:e0:62:f9:1b:ab:4c:c6:be:fb:8e:cc:ca:0d:27:2c:31:d0:
7d:f6:18:ca:90:8e:d0:ef:70:4f:4f:97:92:be:ad:ba:03:b3:
ef:66:2a:e3:64:70:f1:a2:fb:54:69:66:32:c2:7a:2c:de:00:
4c:d4:d7:a6:aa:55:79:fd:19:60:d7:70:9b:3c:cc:8b:ad:00:
26:31:86:5b:69:b6:3a:bd:bc:2f:68:8c:ff:db:5b:62:1d:26:
1b:02:0c:9a:84:cf:91:65:29:47:78:e3:20:aa:3e:7c:74:29:
fa:25:b0:8b:6b:db:67:51:a4:75:13:11:ef:6b:08:3e:3e:dd:
1d:97:9a:b0:5c:7d:1c:0a:58:63:0f:69:78:f9:5b:61:5f:ff:
b0:ed:a0:86:0d:63:11:32:95:c1:b2:9d:40:8e:4f:a0:0b:dd:
01:7a:bf:64:4d:54:2f:2f:a5:cb:45:ed:32:c1:77:87:8e:a1:
1c:5d:bc:1f:6e:7e:e1:c1:cf:64:44:f4:3d:2b:ad:8c:67:0f:
5c:51:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:53 2025 by rpki-client