Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jFQHowMggipJOFh63Ejha0q5Pb8.roa
File: jFQHowMggipJOFh63Ejha0q5Pb8.roa (raw, json)
Hash identifier: s9kZl55Es7CsUPDUoBiRHie5+ji78t8cqdRlnjiCe6A=
Subject key identifier: 8C:54:07:A3:03:20:82:2A:49:38:58:7A:DC:48:E1:6B:4A:B9:3D:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842973E1E27D08E202218EAADDF16DE6F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jFQHowMggipJOFh63Ejha0q5Pb8.roa
Signing time: Sun 30 Oct 2022 15:12:51 +0000
ROA not before: Sun 30 Oct 2022 15:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:29:73:e1:e2:7d:08:e2:02:21:8e:aa:dd:f1:6d:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 15:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c5407a30320822a4938587adc48e16b4ab93dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:01:e9:2f:13:6f:0c:89:7a:0d:49:0a:d6:
cd:1e:97:ea:05:4c:96:58:74:d0:5d:a7:d5:f6:12:
16:bf:91:c6:98:a1:7b:00:c9:83:0f:07:91:22:a4:
27:6a:86:d1:6f:42:43:bc:7a:05:da:33:f3:28:ed:
9f:54:fe:0a:6b:ce:d4:d4:dd:c1:05:ab:f7:98:c0:
a1:ef:2f:bc:ce:04:02:cb:7f:05:44:ab:08:ef:e5:
36:e7:f4:fe:bc:5b:81:95:ab:c5:85:42:f0:b2:62:
fd:42:f0:19:c3:96:f3:12:04:5b:a0:51:e9:ff:bb:
1b:aa:26:0a:06:45:3b:ad:4e:eb:f8:8e:3e:b8:22:
14:f7:c5:db:4c:36:fc:1e:03:ac:1d:32:66:4c:36:
61:8b:3e:65:58:d0:99:73:82:07:7b:6b:6d:fe:be:
af:ce:df:46:fa:b1:52:db:99:90:17:e5:ca:40:87:
7b:61:23:6e:e2:0d:93:22:ab:50:98:5b:16:17:9c:
81:eb:fc:d8:fd:d8:46:a8:12:b3:e6:12:37:52:40:
5b:59:d4:a4:f1:93:b4:5e:78:bd:7f:39:22:61:11:
ff:75:df:8c:27:fa:07:84:5e:f6:9e:57:76:12:57:
bc:bf:5b:4c:fc:86:cc:df:ec:de:94:a3:1b:d3:4a:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:07:A3:03:20:82:2A:49:38:58:7A:DC:48:E1:6B:4A:B9:3D:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jFQHowMggipJOFh63Ejha0q5Pb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:49:d6:37:41:68:9f:c9:9a:d7:c2:fa:55:82:5d:fc:63:61:
6a:99:01:88:af:43:c9:4e:5f:fb:d5:40:21:20:80:82:46:3e:
ed:be:3d:f4:e6:c4:79:92:34:45:be:2b:d3:f4:21:49:f9:e4:
13:86:42:b5:24:3c:23:e7:19:cc:3f:44:d8:c5:1d:59:78:80:
83:b1:18:1b:c3:a5:95:61:fc:c3:a2:9f:26:74:2f:e8:a2:ab:
88:af:50:30:06:d0:31:d7:05:97:e5:3d:f1:db:74:e6:fa:37:
c6:74:05:93:0b:b5:93:3f:ee:98:49:f4:82:b3:e5:93:6a:12:
df:72:1f:65:b3:93:ec:d5:93:e0:84:bd:10:00:bd:e9:bd:32:
66:8d:2c:f9:97:54:30:7f:ca:63:ba:bf:5a:ba:bb:04:73:23:
cc:8f:df:39:80:c0:4d:5c:64:b2:a9:09:69:20:fa:f8:82:2f:
8f:89:6e:b8:71:4f:22:69:45:73:c2:34:b5:cd:b5:88:23:67:
0e:2b:02:d7:ab:2a:d8:81:69:00:61:75:4f:dd:ca:22:3d:f0:
72:ae:bb:4c:94:56:e7:aa:a9:34:ce:95:d7:b0:13:54:fe:c5:
c0:99:c1:0b:c0:b7:86:1a:98:da:df:79:9c:2a:dc:8c:1a:db:
1f:67:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:35 2025 by rpki-client