Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jVFgmqTW3-oupByLtWAaEJCGGmk.roa
File: jVFgmqTW3-oupByLtWAaEJCGGmk.roa (raw, json)
Hash identifier: YiZldnSGb03i0kH3Saz16y+5v+Ys5QcoikSkL8NiJzI=
Subject key identifier: 8D:51:60:9A:A4:D6:DF:EA:2E:A4:1C:8B:B5:60:1A:10:90:86:1A:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C205F3E8019ACC208EA0E132BBAF1ED1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jVFgmqTW3-oupByLtWAaEJCGGmk.roa
Signing time: Tue 29 Nov 2022 06:14:40 +0000
ROA not before: Tue 29 Nov 2022 06:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:05:f3:e8:01:9a:cc:20:8e:a0:e1:32:bb:af:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 06:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d51609aa4d6dfea2ea41c8bb5601a1090861a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:47:b1:d2:92:5d:6b:d8:47:83:f0:15:bd:
72:83:7d:aa:14:17:25:96:2a:68:6e:f9:1a:cc:36:
cd:98:03:71:e9:00:21:70:91:62:da:ec:cf:d4:28:
d4:3f:eb:32:ce:78:d2:36:59:61:20:89:21:11:54:
70:61:40:aa:70:6e:3c:be:2e:d5:76:39:b2:6a:2e:
77:4d:22:61:fc:c4:dc:7d:eb:56:6e:d2:4e:bf:56:
db:6d:1d:ba:3f:32:a1:38:d9:24:6d:92:6b:60:80:
6a:87:e7:92:24:c9:88:ac:de:ce:dd:22:e1:6f:91:
60:75:35:6c:84:7c:20:f0:47:4d:a1:bc:d8:f9:d7:
02:01:ef:c2:4c:98:b3:40:98:02:8c:d6:f2:14:46:
42:79:df:2f:81:b4:e5:cb:ea:10:fa:e0:b0:65:d7:
86:27:a6:42:75:ac:b2:7a:fc:41:d1:01:e2:2c:23:
e8:91:75:1f:30:5e:f8:d9:df:55:b6:40:c1:d3:02:
21:69:17:3f:88:ef:af:ed:02:a6:95:3f:92:d2:e4:
b4:88:77:6e:35:c7:82:bd:11:8e:a1:a1:ae:97:6e:
9c:64:69:d8:83:58:33:f2:bd:61:a3:24:54:19:f7:
d2:40:b2:0c:4c:64:88:7e:b2:a4:ab:80:97:20:7f:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:60:9A:A4:D6:DF:EA:2E:A4:1C:8B:B5:60:1A:10:90:86:1A:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jVFgmqTW3-oupByLtWAaEJCGGmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:40:c0:af:ae:54:4a:c6:e5:7c:c4:86:24:52:60:41:c7:27:
80:a9:42:07:a2:b1:1d:61:57:b2:a4:35:46:14:2b:bf:06:61:
85:68:21:4f:e3:ce:1e:5c:fa:05:f0:56:25:54:6d:4b:27:79:
3c:93:b3:f8:74:cc:71:27:a5:84:ae:ea:fb:c7:30:c8:b0:bb:
99:44:f7:9a:c7:b5:b7:5e:15:15:87:e5:48:74:db:4b:bb:7d:
f6:a9:f7:ef:32:fa:24:88:c9:08:be:a6:8e:53:d5:7f:14:b1:
ab:59:fc:c7:f3:3a:a0:c7:a1:18:c3:4a:19:75:e6:6b:4d:8e:
84:3d:68:05:d7:ac:e0:11:bf:6c:6d:eb:0c:67:d7:4c:ef:b7:
4b:56:f7:3c:01:2e:a6:28:71:1d:bd:d4:ea:3a:85:7d:61:79:
49:61:46:7d:1d:0c:2d:58:b5:39:96:7c:5c:12:73:82:23:b3:
71:80:2f:54:b1:70:2b:dc:8a:42:71:41:9a:88:71:07:c3:91:
28:62:8e:3d:c9:9a:71:f6:e2:ac:1c:25:05:48:50:ed:d9:ee:
74:0e:d5:14:90:03:f6:4a:eb:c4:74:ed:e0:d4:21:3e:23:5e:
fd:39:72:9d:ac:5d:f8:54:d2:33:3d:c7:ac:3e:00:94:cc:1c:
dd:53:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:40:38 2025 by rpki-client