Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRMZSycUZP0z4z1XBHrnFOUl-90.roa
File: jRMZSycUZP0z4z1XBHrnFOUl-90.roa (raw, json)
Hash identifier: Y7ToHj4Nii7Ell/LKeqjbmftKG2i43KrH/V/fUw3wKU=
Subject key identifier: 8D:13:19:4B:27:14:64:FD:33:E3:3D:57:04:7A:E7:14:E5:25:FB:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865D23E02F54BC3DA50260D308C4E6CA6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRMZSycUZP0z4z1XBHrnFOUl-90.roa
Signing time: Fri 17 Feb 2023 02:11:17 +0000
ROA not before: Fri 17 Feb 2023 02:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5d:23:e0:2f:54:bc:3d:a5:02:60:d3:08:c4:e6:ca:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 02:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d13194b271464fd33e33d57047ae714e525fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0b:52:af:3f:92:70:db:3a:e9:97:bd:70:d2:
e8:cc:3b:37:0b:25:56:54:39:f3:07:dd:8b:45:83:
80:5d:7e:51:c8:b5:ce:f7:10:47:5c:aa:5b:bf:e8:
89:87:da:39:38:a1:34:d3:88:d7:f4:51:09:41:80:
a1:ec:cd:13:6a:d9:0c:c7:7d:c0:a0:c0:40:f0:75:
e5:54:bd:4a:a1:9e:71:1f:92:42:c6:58:66:06:2b:
a0:e5:6e:dd:73:15:3f:c1:7a:6b:f1:a5:3e:bb:85:
ba:fd:8b:c1:c7:af:3c:b8:1d:d4:27:5e:7a:ad:12:
80:1b:87:bf:b7:11:35:1a:78:5e:b5:5f:02:de:92:
9a:4d:a9:dd:ab:ba:e7:a8:1b:f1:e3:77:35:bb:d4:
5f:11:ab:1e:e3:50:a5:b1:27:a3:20:6d:15:b0:c0:
42:54:a7:bb:f7:d2:11:c1:16:9b:4d:74:27:26:37:
71:b1:2c:66:27:0e:1b:bb:a5:76:fe:0a:4d:fc:e3:
9f:0e:c7:0a:af:cc:82:03:08:ac:f5:c5:b3:b5:04:
4e:73:3b:93:30:8d:66:b9:69:fb:d9:d3:2b:85:1b:
91:19:63:1a:28:21:52:b7:c8:f3:b9:d9:3d:6b:3a:
80:bd:55:14:98:28:c0:4e:25:2b:03:b9:4c:f0:2f:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:19:4B:27:14:64:FD:33:E3:3D:57:04:7A:E7:14:E5:25:FB:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRMZSycUZP0z4z1XBHrnFOUl-90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ab:a4:56:19:af:d7:8d:32:31:c5:2d:ca:ab:1e:c0:b0:c8:
df:63:40:60:a9:ab:8a:ad:88:8f:2b:0b:1e:e3:08:92:b8:6c:
d3:0d:7c:73:0f:d1:62:d1:2f:98:60:e6:7a:e1:0d:5a:32:03:
0a:c5:d3:33:5f:9d:cf:98:c8:de:d3:4b:cb:9e:23:66:4d:b2:
59:de:a1:3a:cf:c9:53:3c:35:f4:2c:3e:42:1a:23:5c:52:2d:
5e:e2:78:16:ff:1f:63:f2:91:b3:67:dd:3b:26:ad:79:d0:4f:
d4:08:cb:3f:cb:f9:c4:97:61:f6:b1:ad:cd:89:46:ac:16:77:
2f:8d:f0:cf:13:3a:b2:3a:a5:b8:94:3f:07:57:3f:0f:ed:0e:
3d:d8:bd:e3:e1:63:98:de:1f:f3:bc:95:42:f5:34:23:05:a6:
08:5e:3a:8d:5d:c0:3d:53:fc:c0:3b:c1:fa:3b:6c:fa:3e:3e:
49:17:29:38:a2:f6:be:c3:d9:3a:13:de:a4:cd:97:3b:b7:a6:
fc:16:94:bb:7b:5c:da:88:b1:3c:25:8f:b9:1d:6b:15:68:0d:
f6:dd:91:66:27:54:21:21:98:bc:5c:5f:00:6f:a2:c5:ec:a6:
fd:fd:9f:b7:b3:15:63:a6:54:09:fd:3e:9d:69:5a:cd:db:25:
0e:28:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:09 2025 by rpki-client