Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6nodZ5zOX43MC41eeV0jDRc51E.roa
File: j6nodZ5zOX43MC41eeV0jDRc51E.roa (raw, json)
Hash identifier: GZ9jMQK3GobbmO7XcqfCXofIHPVJXDBbHhJ5wpq+RYI=
Subject key identifier: 8F:A9:E8:75:9E:73:39:7E:37:30:2E:35:79:E5:74:8C:34:5C:E7:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018509DFB27444800F2CD36B0BCCAA0DB98C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6nodZ5zOX43MC41eeV0jDRc51E.roa
Signing time: Tue 13 Dec 2022 05:05:33 +0000
ROA not before: Tue 13 Dec 2022 05:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:9df:48b9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:df:b2:74:44:80:0f:2c:d3:6b:0b:cc:aa:0d:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 05:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fa9e8759e73397e37302e3579e5748c345ce751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:31:ac:a9:fb:e8:e5:4f:18:7f:6e:b5:4b:
2c:b9:08:32:79:5d:5f:c1:3f:df:6b:4d:d0:e9:2d:
4b:d1:fe:fa:9a:1f:b9:01:3d:f2:0a:9b:cb:ed:72:
0f:d6:fd:00:0f:81:e9:85:ea:8a:f3:34:52:d3:ca:
9a:2f:9a:5d:9b:69:7d:32:46:19:7d:c7:88:92:7d:
69:ee:4c:91:b6:40:86:e0:68:72:6a:ca:51:c3:c3:
88:7b:98:69:71:64:3b:40:f7:56:d6:8a:89:79:3d:
a2:92:48:bf:ea:d4:84:b3:d2:cc:d2:2a:e5:a6:9a:
d2:ac:62:f6:0d:51:28:12:2a:0c:fb:1b:5b:e9:5f:
ea:41:e8:99:c5:9a:48:ee:df:56:19:e3:4f:02:27:
14:39:67:2a:39:01:bb:2b:87:10:7c:c7:af:16:9b:
86:91:6c:cf:a1:6c:22:77:d3:cd:a6:87:07:25:02:
2f:ec:9b:99:67:2e:24:d0:d1:bd:04:64:dd:09:d3:
1e:cc:40:19:73:6c:ee:6f:58:bb:03:ef:a3:d3:06:
e8:e5:04:16:8d:28:f2:30:6c:1d:1d:1b:3a:0a:05:
c6:a8:dc:ec:f1:4f:60:75:88:6e:55:9a:cb:13:41:
02:73:72:9e:5b:44:13:75:b9:ee:69:b9:b9:cb:4c:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:E8:75:9E:73:39:7E:37:30:2E:35:79:E5:74:8C:34:5C:E7:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6nodZ5zOX43MC41eeV0jDRc51E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:60:49:bd:f9:f4:65:8b:20:cc:67:76:3d:b1:45:51:2d:42:
4e:d3:eb:bc:2e:7a:e7:4c:be:9c:d0:fa:d6:5c:54:a2:0b:b7:
5c:d4:53:0c:06:d9:6e:f5:c8:a5:d0:8d:75:ed:bb:7b:c7:f3:
a6:57:bc:32:7a:85:a2:82:43:83:0a:7c:d4:22:6e:c2:a4:a2:
dd:6d:7a:05:d2:0d:e1:02:29:48:04:c7:28:71:55:73:60:ea:
dc:af:a1:2b:23:3c:cd:66:cf:8b:8a:7b:e7:91:d8:47:03:90:
14:ea:90:c5:47:97:c1:b3:44:3c:e6:0c:33:05:4c:55:93:d6:
bf:22:48:86:0e:81:91:18:0e:5a:c6:3f:11:f0:cc:5a:ac:df:
22:9f:64:35:ae:d1:0e:00:66:7a:d3:1a:18:78:84:9c:c2:2a:
b1:3b:6f:db:6d:55:0a:0e:30:57:f4:d0:0b:21:bf:c2:c3:a1:
34:95:27:a0:af:a0:ea:73:cb:85:53:01:91:92:60:6e:99:82:
8e:71:27:92:1b:1b:aa:b0:79:56:43:c6:fd:71:fa:b8:df:78:
59:e3:f7:83:e2:12:99:06:37:eb:36:8b:cd:3e:f2:30:23:9a:
32:a4:28:8b:70:c2:a3:77:b1:be:7a:fc:a8:ee:0e:1e:35:b6:
5b:d6:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:50:04 2025 by rpki-client