Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jW-1puJZt9-D8CvGpUSCV7eHTDk.roa
File: jW-1puJZt9-D8CvGpUSCV7eHTDk.roa (raw, json)
Hash identifier: W2RiP0cD3Asus2gN36QJU9p4WWxSdRJB3LC3fwxnz2U=
Subject key identifier: 8D:6F:B5:A6:E2:59:B7:DF:83:F0:2B:C6:A5:44:82:57:B7:87:4C:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6772E5E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jW-1puJZt9-D8CvGpUSCV7eHTDk.roa
Signing time: Thu 03 Feb 2022 08:08:23 +0000
ROA not before: Thu 03 Feb 2022 08:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735583208 (0x6772e5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 08:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d6fb5a6e259b7df83f02bc6a5448257b7874c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:9a:21:f7:9d:b5:58:af:1b:1c:b5:36:78:
a4:3f:92:e8:7a:d5:72:05:c5:21:57:5c:0c:92:82:
3d:97:9b:08:be:25:0e:a7:e4:31:bf:1e:c0:c4:59:
38:4f:58:85:26:08:a7:f9:40:9f:e1:b5:b7:bf:48:
1e:58:e8:07:40:41:f8:a7:33:f5:5b:f4:6b:c9:83:
8f:83:79:db:5f:ca:57:4d:d8:fa:8a:0a:40:43:80:
d9:9f:22:79:a7:d1:b0:14:64:d0:47:4d:57:dc:fc:
45:39:84:ae:0f:89:3b:46:31:70:2b:98:d2:1d:c8:
3e:9c:bd:69:7c:ed:b9:4e:7f:a7:87:f5:ef:c3:44:
1a:14:55:41:05:fd:e6:b6:d6:77:3d:89:34:cc:3a:
77:df:3b:11:d6:c3:ea:02:b0:f8:3e:3f:e4:c6:f2:
f9:13:dc:0e:bb:31:ea:da:34:2a:f2:34:3f:9b:da:
a0:4d:d7:b5:a5:1c:84:57:d5:e1:1c:dc:c3:d6:7e:
ba:1f:15:ef:a8:dd:00:92:18:0c:d8:63:c0:94:85:
e8:d1:8d:38:8d:51:2d:11:ce:2d:a2:b6:b6:16:4c:
3f:51:fb:61:21:36:54:e9:b1:d8:7f:63:7d:a1:3d:
f9:49:b5:af:e9:6d:fd:5d:57:e7:bc:0d:49:dd:cd:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:B5:A6:E2:59:B7:DF:83:F0:2B:C6:A5:44:82:57:B7:87:4C:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jW-1puJZt9-D8CvGpUSCV7eHTDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:95:13:15:d6:79:16:13:84:a2:7c:ba:e0:56:4a:80:e8:2e:
24:bf:0a:82:2b:b2:b1:16:6e:0d:d8:e0:a8:bb:4e:11:f4:ed:
ea:a8:2b:4a:49:1e:9d:63:01:a7:44:e5:7d:81:1e:cd:23:e6:
97:b2:ff:40:e2:ee:51:ac:63:60:87:72:ab:e4:f6:a4:08:36:
bb:ad:21:b0:bc:69:89:54:50:7e:46:45:5e:de:f8:70:21:49:
d0:ab:11:fb:08:dd:c4:53:d5:ba:3e:02:f5:1a:7f:95:fb:a4:
c2:3d:76:a5:70:38:65:63:67:4c:b5:d7:06:b8:90:14:ee:3a:
20:f3:e1:41:40:3b:6d:da:e6:cd:2e:6a:38:18:ed:fe:c3:ea:
fe:03:73:e2:46:00:43:7f:49:b5:1a:26:57:9a:f9:89:d5:e2:
c6:b3:fd:ec:58:02:32:ca:4f:f4:40:2d:8e:da:b0:31:29:04:
3f:00:b1:31:8d:4f:d6:1f:bb:e6:cc:88:64:eb:a8:07:64:dc:
4e:8f:b2:ce:27:89:2e:0a:be:02:49:22:0e:8f:9d:0d:72:ed:
14:93:8d:9a:b0:f8:91:67:60:7e:00:93:56:12:41:15:db:81:
27:35:98:b7:36:3a:c2:eb:22:a7:23:1c:c0:92:a5:3f:5b:a6:
1f:68:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:56 2025 by rpki-client