Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j79DlwAatGW89h8CHgam5R5Rm3w.roa
File: j79DlwAatGW89h8CHgam5R5Rm3w.roa (raw, json)
Hash identifier: g3D1Kpd18J+2jDAlvl9i08i5K+GHRFc+RMsuq/T60Oc=
Subject key identifier: 8F:BF:43:97:00:1A:B4:65:BC:F6:1F:02:1E:06:A6:E5:1E:51:9B:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F4DC7A682619989C271539375C0E75B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j79DlwAatGW89h8CHgam5R5Rm3w.roa
Signing time: Fri 09 Dec 2022 03:10:00 +0000
ROA not before: Fri 09 Dec 2022 03:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:dc:7a:68:26:19:98:9c:27:15:39:37:5c:0e:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 03:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbf4397001ab465bcf61f021e06a6e51e519b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:46:2f:a3:0d:ab:22:a2:7d:24:4f:87:40:
18:93:bb:b0:dd:df:b3:15:61:44:06:4c:6a:71:e4:
52:98:1b:d9:fe:2b:22:30:40:25:22:03:4b:bd:99:
e1:18:4a:1a:3e:db:e2:24:25:1c:3e:14:33:dc:40:
38:62:21:83:50:61:f7:eb:ea:f0:f5:f6:70:45:8c:
f3:32:40:a1:c3:60:cf:4d:30:d6:67:82:f9:fe:e3:
d5:3b:d7:b6:fb:fe:61:d3:36:fd:57:15:4d:fd:ff:
4b:42:4a:75:e9:16:82:1f:95:b6:ec:e8:75:f3:1f:
1b:9c:eb:c4:6c:22:4b:a6:6d:f5:65:ac:19:2e:0b:
e8:e0:a3:a7:41:92:ee:ca:1e:24:05:f6:73:6d:fd:
8b:1e:1c:da:c8:cb:ce:38:1b:8b:fa:d6:4c:be:81:
7a:86:95:67:41:79:e6:fe:db:ec:28:96:79:6e:fc:
d3:9b:13:cf:33:3f:5d:b9:8b:38:3c:5b:5c:06:67:
4e:af:e9:11:73:d5:41:d0:fa:b3:55:c1:f2:6d:1a:
5d:7f:43:ef:54:e4:7c:89:27:fa:3a:ec:e6:76:78:
46:81:36:4d:7a:4f:75:2a:e5:6f:25:8a:6a:17:d3:
af:bf:87:9d:c6:18:50:21:e7:59:6f:00:6d:f5:ab:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:43:97:00:1A:B4:65:BC:F6:1F:02:1E:06:A6:E5:1E:51:9B:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j79DlwAatGW89h8CHgam5R5Rm3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:67:08:39:e7:be:e5:46:9a:08:4d:eb:74:7d:1e:a5:26:87:
aa:24:61:89:52:4d:07:09:48:10:95:29:55:e2:06:c2:c1:d0:
4c:d3:95:b1:bd:40:50:ec:1f:fe:3b:fc:c1:5b:34:6a:65:b1:
15:3f:81:0f:39:e0:9e:60:8b:2b:00:95:b4:b7:1e:ef:db:ac:
43:a2:ee:b3:67:09:47:27:22:ab:76:9a:fb:0d:2e:96:60:66:
1b:b9:64:8c:fe:73:ac:36:ea:ad:74:69:d4:23:9b:f3:99:c5:
ac:16:97:5e:94:73:46:b6:8f:02:6d:03:4a:26:5b:e8:58:9d:
c3:b5:20:35:a5:03:45:eb:c3:3d:bd:d9:b7:cc:ac:6b:ab:44:
2e:a3:2a:6b:9d:5b:1c:ba:81:fa:31:32:fb:b4:86:3f:a8:83:
67:89:05:36:d0:2f:57:bf:ea:9a:a7:e2:7e:d8:d8:f5:83:01:
ed:39:ac:1a:5e:ad:12:30:43:39:fb:78:60:9d:46:f0:18:1b:
ab:05:a9:46:b5:dd:ee:d5:d0:a3:b4:5b:e3:1b:0d:90:2c:d5:
22:ab:ef:77:28:41:a7:58:67:45:5f:d9:ed:cc:3e:9f:6e:da:
86:9b:50:27:b8:57:45:6b:a9:14:af:2a:a9:55:1b:2f:ae:c1:
fd:b3:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:19:21 2025 by rpki-client