Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4R5d--08fdOmuVONs5mDSh-4qY.roa
File: j4R5d--08fdOmuVONs5mDSh-4qY.roa (raw, json)
Hash identifier: g3OV6YEdK314wmqMtHu0Mzu7P4fsw3HKUnpsJU89scc=
Subject key identifier: 8F:84:79:77:EF:B4:F1:F7:4E:9A:E5:4E:36:CE:66:0D:28:7E:E2:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BCE1DB13FDE56F18283DAA13D3B8C1D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4R5d--08fdOmuVONs5mDSh-4qY.roa
Signing time: Sun 09 Oct 2022 13:14:21 +0000
ROA not before: Sun 09 Oct 2022 13:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:e1:db:13:fd:e5:6f:18:28:3d:aa:13:d3:b8:c1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 13:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f847977efb4f1f74e9ae54e36ce660d287ee2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:23:a8:1e:f1:83:6b:bb:b0:be:e4:7f:d7:
9b:fe:7b:12:2f:a2:92:77:1f:54:46:a0:dd:5c:ee:
84:5f:44:72:e6:36:2b:38:fc:ea:3e:36:62:30:c2:
00:ca:32:7d:e1:59:2a:ed:2d:d3:51:2d:a2:a8:49:
58:ab:a1:4d:af:99:32:32:aa:fc:25:f4:4d:00:48:
64:70:26:4f:02:5c:2d:fe:c4:ee:6c:ab:d0:e8:b5:
f8:fa:ba:4a:43:2d:8e:2a:13:b3:e2:c6:1f:bd:1e:
f6:33:66:a9:73:c6:6e:91:a2:78:d4:49:6f:69:f0:
11:1a:38:ed:ad:38:23:4a:99:42:97:49:95:0e:ff:
a3:33:0f:90:23:a4:32:31:49:b6:b5:45:5c:3f:45:
64:b7:c9:1a:7e:45:bf:68:b7:2a:e4:a2:70:35:3d:
6b:1e:a8:6e:c0:7b:75:f1:49:76:5a:5d:75:05:4a:
69:d7:78:11:77:7e:4f:77:61:89:24:37:91:79:70:
fc:f4:68:a0:59:12:e0:1a:2b:cb:df:8b:46:25:2b:
ce:78:76:62:f8:83:04:2c:3f:0b:94:c7:5c:37:4b:
8d:10:db:b4:01:ba:52:0d:b9:b8:96:4f:34:1c:de:
1a:23:d1:a2:de:1c:79:e5:35:f5:4b:33:96:8c:b1:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:79:77:EF:B4:F1:F7:4E:9A:E5:4E:36:CE:66:0D:28:7E:E2:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4R5d--08fdOmuVONs5mDSh-4qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:0c:49:f8:0e:da:97:ac:e0:d0:5c:1d:09:dd:7a:1e:f4:5a:
ba:eb:d1:e2:3f:5d:d0:53:99:83:28:a6:69:10:cb:cd:a0:db:
9c:16:36:7c:2c:29:42:47:77:60:31:34:58:75:1e:f3:a4:86:
26:6a:8a:8d:5a:c0:ca:60:23:61:27:da:77:97:c5:c5:74:e6:
b2:27:2c:e0:b2:b5:2c:a8:9c:8a:64:5b:6c:3a:4f:7d:b8:26:
5d:cf:7a:34:4f:b3:56:5c:40:58:94:c6:db:bd:21:8a:43:d6:
73:bd:ca:56:e2:8c:51:74:36:55:03:f4:59:18:b7:f4:d7:7d:
7b:03:32:04:f5:59:01:18:8d:9c:e4:3d:85:10:85:8e:c5:ca:
52:66:3f:cd:38:af:f8:93:7c:ef:b8:cc:4f:6e:a2:10:2f:fc:
18:7a:f6:2a:45:b0:01:69:b4:3c:a2:c1:7d:65:b4:96:cf:61:
33:c0:70:3a:fd:29:e4:2b:28:0f:52:0f:a9:3a:cc:74:a1:0b:
db:e2:ad:4c:c7:11:e7:f4:dd:f7:9c:9d:06:b1:5d:6d:4c:81:
fb:ad:b9:d7:2c:ac:b6:e1:fc:50:84:e5:82:9f:aa:06:a9:f4:
fa:f5:a4:c1:eb:1b:88:dc:ce:57:c6:4d:00:eb:28:2a:d1:41:
f6:0b:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:36:45 2025 by rpki-client