Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIL0LKFmqYfJFuWw5rkPgP5ZbCA.roa
File: jIL0LKFmqYfJFuWw5rkPgP5ZbCA.roa (raw, json)
Hash identifier: 0FUKuVCO4PU6pjq+31W9dSB3bTYyg8WScb5Il/kyQD8=
Subject key identifier: 8C:82:F4:2C:A1:66:A9:87:C9:16:E5:B0:E6:B9:0F:80:FE:59:6C:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854E8CB2DF80B37EBAAF9C052AE9697662
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIL0LKFmqYfJFuWw5rkPgP5ZbCA.roa
Signing time: Mon 26 Dec 2022 13:08:41 +0000
ROA not before: Mon 26 Dec 2022 13:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:8c:b2:df:80:b3:7e:ba:af:9c:05:2a:e9:69:76:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 13:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c82f42ca166a987c916e5b0e6b90f80fe596c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:83:27:ed:c4:49:6a:fb:af:7f:cf:56:90:
00:4c:d5:04:d7:37:6a:8b:1c:f6:28:b3:89:d2:7c:
5b:6d:aa:24:9d:b0:1d:89:98:16:54:bf:ef:64:2b:
2f:3e:a4:ad:19:8f:00:59:f5:13:b2:6f:82:80:e8:
f7:07:7f:65:fa:25:bc:ec:7f:89:57:33:40:5e:b4:
04:9e:da:b0:cc:55:b8:ab:27:90:af:c4:90:f4:a7:
5c:9b:8a:f5:8b:b8:32:50:d1:d4:3b:72:ea:01:af:
af:b2:68:6e:9a:d0:71:c8:6a:88:cf:29:91:16:6e:
27:c9:c7:0a:f8:e3:32:b4:6a:9a:70:73:45:b9:7a:
fd:d1:30:1a:e9:e0:ac:cc:95:15:d0:99:fe:0f:3b:
b8:dd:c6:3e:67:89:f9:48:89:7e:dc:66:a3:f7:f4:
4e:3e:8c:98:a2:6f:f7:41:94:c5:3e:4a:3a:de:3c:
79:f8:fb:21:9a:69:62:20:41:aa:6f:a7:1a:93:53:
08:05:f4:a8:16:c9:8a:76:66:01:9b:50:44:d2:d5:
bd:36:3b:92:4d:a4:a9:e5:c1:24:13:96:33:c1:90:
2c:95:2e:2c:e4:eb:0a:30:ad:a2:1f:b0:25:96:9f:
8f:28:84:6c:39:c3:65:42:8b:bb:12:92:4e:f0:97:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:F4:2C:A1:66:A9:87:C9:16:E5:B0:E6:B9:0F:80:FE:59:6C:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIL0LKFmqYfJFuWw5rkPgP5ZbCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:af:32:68:ed:eb:fc:3b:e5:4a:a1:0c:85:40:65:78:e3:9e:
ee:94:45:e9:12:a3:13:23:e7:69:92:33:02:7c:c6:e1:28:ca:
38:2e:0b:a8:36:99:90:8d:78:b7:a0:f6:7b:06:0c:3d:ef:b9:
d3:38:d1:a6:5b:9f:d0:9f:a6:ac:99:e4:ae:39:b7:55:48:df:
3f:ed:22:9c:ac:47:60:81:2f:28:34:0c:77:df:42:51:42:5d:
56:de:83:0d:08:43:f7:c4:d0:40:ea:34:65:7a:13:48:c1:1e:
a7:3e:18:0b:d7:d5:bc:6a:d0:88:98:80:50:55:82:8d:ea:4d:
82:2d:f8:94:ae:2a:bc:af:72:69:34:57:5b:74:c3:64:a5:62:
40:01:bd:bd:d3:d8:91:e9:bc:0e:fe:65:dc:d6:c4:9f:7f:f6:
1c:0a:e5:2b:2f:91:5f:88:c8:4e:1f:37:c7:4b:df:d6:0a:5f:
6f:38:37:48:8c:1c:80:e6:94:29:86:4f:94:8c:fc:3a:61:90:
c4:77:4a:bd:dd:8f:c3:6e:e9:4b:70:47:55:ba:e4:e8:76:37:
4b:c7:ba:b7:84:19:b1:d2:a0:8f:5a:6c:f9:5c:cb:4b:5d:c7:
f6:d8:86:9d:09:49:95:92:8a:f0:b3:41:54:aa:84:3f:a1:91:
61:58:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:14 2025 by rpki-client