Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jO7w1HmJl8SQneslX8RCGUPg2tA.roa
File: jO7w1HmJl8SQneslX8RCGUPg2tA.roa (raw, json)
Hash identifier: QLMUqlljSyBssFkC78YfwgiDBZ1vjKGAhXEcwM/e38I=
Subject key identifier: 8C:EE:F0:D4:79:89:97:C4:90:9D:EB:25:5F:C4:42:19:43:E0:DA:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185308258B87ED99CB16C133AC8CAA07EF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jO7w1HmJl8SQneslX8RCGUPg2tA.roa
Signing time: Tue 20 Dec 2022 17:08:46 +0000
ROA not before: Tue 20 Dec 2022 17:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:82:58:b8:7e:d9:9c:b1:6c:13:3a:c8:ca:a0:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 17:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ceef0d4798997c4909deb255fc4421943e0dad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:15:ce:71:de:c7:6d:ac:f7:95:90:88:91:
b3:28:53:97:b2:bb:c5:00:f5:49:c8:d9:20:ed:66:
c6:07:22:2f:50:05:b9:cb:f5:b2:9b:3a:7f:31:dc:
32:42:5d:c4:88:11:d5:6e:c5:8c:bd:9c:9f:ce:32:
14:e6:85:f9:40:3c:df:48:44:dc:b8:1e:bb:77:31:
c5:43:4e:1a:1b:f0:44:00:2c:36:e4:24:1c:c9:9c:
f5:23:f1:2d:f1:37:4f:9c:b9:84:58:d4:b4:c6:35:
2a:93:fb:df:84:bc:23:c1:e4:99:8d:43:e6:82:55:
d2:78:d4:ee:84:57:e4:49:e8:1b:33:19:c7:e6:de:
08:78:33:5a:d5:f9:4b:c6:dc:1e:d6:27:e0:ea:1d:
21:51:b5:e1:b3:29:e4:7f:99:c2:4d:7b:87:8a:cd:
e7:9a:42:98:58:ff:e9:13:d1:32:5c:85:a2:ac:8c:
9f:4a:f3:6d:db:05:ac:f9:bf:c7:e7:16:76:bd:f2:
9d:2b:df:a9:72:c0:3b:1b:41:11:e2:02:04:9b:ef:
fe:c4:34:dd:9b:21:fd:0d:27:f6:57:c0:bd:e7:e2:
30:0e:9d:21:e0:2d:39:c0:d6:9b:f3:c1:22:54:f9:
f0:a4:90:41:95:9a:93:a4:74:1a:95:a0:a6:4b:2f:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:F0:D4:79:89:97:C4:90:9D:EB:25:5F:C4:42:19:43:E0:DA:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jO7w1HmJl8SQneslX8RCGUPg2tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ff:d7:21:28:2d:d5:30:7f:02:43:50:81:9e:3a:f4:76:9d:
b2:93:91:9a:1f:90:5c:c0:d8:b5:e7:99:08:db:80:d1:3e:ae:
2a:95:f5:20:ec:4e:c3:24:05:0f:83:06:8f:bd:74:5c:42:a2:
70:1b:29:50:e5:79:27:13:e3:70:e1:60:73:d8:e6:6c:7f:b8:
68:5c:04:2e:f6:67:07:61:5f:dd:f1:8a:c0:08:22:ba:8d:06:
32:cb:a1:91:c0:2f:e2:8f:36:2e:9d:15:de:3b:6a:0d:dd:ef:
f5:42:23:b4:44:66:ac:19:4b:1a:52:ef:02:96:00:c2:f9:ca:
31:31:bd:75:07:b9:d4:b1:88:66:e3:f2:41:f3:02:6b:a1:08:
42:03:e0:07:a0:72:22:e0:47:9c:ef:59:64:8d:c8:b0:41:61:
be:4e:63:e4:e2:08:a4:c6:e4:a9:a6:bc:8d:70:6e:fb:63:78:
f0:1b:3a:de:5c:4c:40:2b:ef:22:44:59:f7:cf:60:73:27:b5:
39:93:ca:36:d9:4e:d6:4c:f6:66:8a:78:3d:bb:6e:89:5e:5e:
ca:e2:e2:a5:90:a8:62:52:43:de:48:a4:a2:39:d4:1f:cd:3a:
52:b9:80:67:51:f1:4e:2d:9b:b1:fe:ed:99:13:a2:ff:d0:c9:
65:57:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:57:38 2025 by rpki-client