Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4aIqnbU8r6KORt2hkmBmli3Lcc.roa
File: j4aIqnbU8r6KORt2hkmBmli3Lcc.roa (raw, json)
Hash identifier: fJ67MI/8PczjkA2IFKuXZazPEIjaIupsx82VIyrP0hQ=
Subject key identifier: 8F:86:88:AA:76:D4:F2:BE:8A:39:1B:76:86:49:81:9A:58:B7:2D:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018643D0E23C94F66EEEE4CC1554D76206E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4aIqnbU8r6KORt2hkmBmli3Lcc.roa
Signing time: Sun 12 Feb 2023 04:10:08 +0000
ROA not before: Sun 12 Feb 2023 04:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:43:d0:e2:3c:94:f6:6e:ee:e4:cc:15:54:d7:62:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 04:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8688aa76d4f2be8a391b768649819a58b72dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:3d:56:ab:38:39:29:46:43:97:f2:06:79:
d8:f3:e1:3a:7c:7d:5e:d2:10:7c:31:f3:8d:d9:52:
52:5e:e0:06:6d:79:79:a2:a9:ee:52:71:74:12:e4:
43:50:80:64:8e:f5:43:67:52:1e:63:26:16:0d:45:
45:e3:ff:b9:92:a8:02:18:0d:4c:48:76:4d:b3:3f:
f0:a2:2b:40:e8:15:8c:c3:8c:8d:d8:04:2f:03:d9:
d6:85:8d:5d:ca:df:44:c6:a8:4d:82:e8:29:06:be:
e5:1b:65:65:ba:20:1e:fb:28:31:a2:ad:87:ad:65:
8c:04:95:03:ed:20:28:ec:27:df:1c:d8:49:15:68:
73:a8:37:be:e6:a2:5d:0e:0e:03:40:82:77:db:b1:
bb:5e:76:82:37:81:e9:c8:dc:8a:4c:83:31:05:0c:
14:00:7e:b0:88:73:6e:06:1e:45:59:2d:07:b6:73:
53:7d:38:97:4d:68:27:43:a4:38:65:8e:09:3f:ea:
0d:d0:b2:a9:b5:22:f9:12:ee:56:f5:d2:cd:1d:4f:
14:f6:50:59:d0:46:2b:04:3e:49:f8:75:4b:91:33:
35:1f:a7:d1:66:e4:68:e8:63:a1:55:54:d0:4c:09:
83:e9:a4:6b:31:11:a8:0d:c6:db:4c:4c:20:57:c6:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:88:AA:76:D4:F2:BE:8A:39:1B:76:86:49:81:9A:58:B7:2D:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j4aIqnbU8r6KORt2hkmBmli3Lcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:36:82:37:4d:91:61:71:11:9d:2d:1f:21:ca:40:54:0b:a1:
4e:91:b3:d5:12:1d:e6:49:74:88:1c:c7:e4:40:b2:cf:f3:de:
9c:c2:95:d0:3c:bf:66:4d:6b:07:a5:57:80:d1:44:bd:ee:d4:
83:91:8e:e1:6c:04:37:8f:4e:cb:fd:e8:be:85:ba:cd:25:ea:
22:9e:a8:ec:ad:c1:d4:b8:ab:8f:e6:0d:ae:be:a5:6b:c8:10:
81:62:2c:76:3b:a5:f1:f5:58:0e:77:72:15:6f:fb:71:e7:1c:
a1:0a:32:6b:63:82:89:7b:95:b4:56:35:d3:8b:37:fb:b4:55:
cd:08:ec:64:21:0b:99:f2:23:59:5d:29:b9:b5:4e:33:c4:58:
f4:a5:4a:18:d3:7c:b7:4a:25:ba:97:64:75:32:29:f6:de:d9:
62:57:09:0a:da:e7:c9:97:8c:53:78:6e:e8:db:be:c2:1f:27:
a9:2e:b0:4a:42:16:09:23:26:08:a2:81:50:d5:d5:3f:be:34:
db:da:71:2d:cb:10:64:46:49:45:46:bd:3e:ba:b5:9f:09:bc:
ff:67:c3:21:16:17:a0:df:97:89:f3:ed:1d:61:5a:71:bf:7c:
b0:f1:02:1d:ac:fc:81:92:88:ad:40:11:ab:00:07:24:a2:d6:
ac:93:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:56:54 2025 by rpki-client