Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jKJdvUqGTbu9uleWaZ3jYVeodJ0.roa
File: jKJdvUqGTbu9uleWaZ3jYVeodJ0.roa (raw, json)
Hash identifier: xFuk6z7Ns5TZSmwi5ZfbMcpH/O9PkwJECU0tBMHY7tE=
Subject key identifier: 8C:A2:5D:BD:4A:86:4D:BB:BD:BA:57:96:69:9D:E3:61:57:A8:74:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72183CB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jKJdvUqGTbu9uleWaZ3jYVeodJ0.roa
Signing time: Sun 13 Mar 2022 04:09:10 +0000
ROA not before: Sun 13 Mar 2022 04:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914191031 (0x72183cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 04:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca25dbd4a864dbbbdba5796699de36157a8749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:2b:5c:c1:fd:21:c5:8e:19:32:e9:be:72:
52:32:ce:fe:19:b7:93:4f:5e:c6:d7:b7:8c:28:eb:
94:0b:82:58:b0:d3:ca:d6:bf:d4:7b:dd:93:94:55:
dd:3a:cf:2d:78:72:ba:b5:56:04:aa:c2:3b:e9:8d:
93:51:22:47:25:98:5b:31:d9:59:b9:ba:ac:f7:23:
b3:fa:15:53:fb:60:bf:80:19:55:0f:62:a3:01:df:
53:04:23:16:23:68:66:2b:f5:06:d3:81:e5:c7:14:
02:38:d4:55:c9:08:6e:23:21:71:85:98:d3:40:d4:
ac:00:eb:50:d7:6b:23:d8:56:54:72:09:ad:b7:55:
6a:fc:8e:bc:d8:c6:c8:28:12:ae:e3:6e:c5:4a:5e:
64:1f:db:60:98:73:a0:03:51:88:37:6a:eb:6a:fe:
83:e9:99:7c:ca:5c:6f:e1:66:b6:0d:3e:15:b7:5b:
9c:6a:9f:00:0e:e4:92:9a:bf:c2:31:58:e8:67:d4:
08:c0:53:02:44:fa:82:54:35:7f:aa:56:c0:84:3f:
9d:a9:60:fa:bf:24:c0:cd:14:51:45:f1:3e:7e:a7:
d4:9c:41:2a:dd:f6:11:be:56:23:e4:c1:1c:c9:27:
16:fa:31:8d:fe:bf:cf:42:bc:be:3c:6c:20:0c:22:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:5D:BD:4A:86:4D:BB:BD:BA:57:96:69:9D:E3:61:57:A8:74:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jKJdvUqGTbu9uleWaZ3jYVeodJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:b7:5f:3a:98:74:c9:0f:a0:65:63:ff:4c:ad:1b:57:59:d6:
2d:38:4a:14:d4:2a:11:18:cd:1a:e4:d7:02:02:8d:80:07:c8:
60:3e:14:eb:7a:51:38:5f:5a:7d:21:40:a2:88:3a:54:1e:32:
b5:8a:ae:1a:08:12:e5:fa:93:06:34:a0:8e:9d:cb:c2:fd:5a:
a2:dc:f3:65:b0:93:45:ec:dc:2c:c0:f1:22:91:d9:e7:85:a9:
3e:0d:ab:72:21:bd:80:f9:6f:45:a2:a1:b1:78:4d:c6:fc:7a:
79:31:a4:1e:9f:47:7f:56:26:16:91:84:5d:8d:f8:4c:44:b3:
74:49:a3:2d:c1:5d:c1:6a:c6:8c:54:2e:11:ca:dc:2c:2b:c3:
95:7c:af:d2:ff:80:87:f7:1a:4a:65:57:8d:0d:86:c9:ae:38:
1c:30:8b:59:68:49:6c:d9:75:a4:67:2d:fb:2a:c4:58:02:a4:
d3:66:46:24:51:a3:1d:92:2a:eb:e6:28:a6:b5:c6:84:a5:4a:
6d:7b:d5:e3:44:f4:db:42:34:f1:07:72:b7:90:c5:0e:b6:7e:
5b:65:2b:9a:42:2b:cf:72:56:63:24:dc:85:c1:28:ac:30:54:
48:05:81:1e:64:db:dd:bd:87:27:76:2c:d3:98:d7:f8:5a:3d:
36:61:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:22 2025 by rpki-client