Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_QyNIzPzecZYUQ7rhsIxQ1KFc4.roa
File: j_QyNIzPzecZYUQ7rhsIxQ1KFc4.roa (raw, json)
Hash identifier: XP4on4/XO5szjtBkrHr6hz9zSnHaqIBoBxJLFUG5obs=
Subject key identifier: 8F:F4:32:34:8C:CF:CD:E7:19:61:44:3B:AE:1B:08:C5:0D:4A:15:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F05BD344084CE359BA86EFC742354F4F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_QyNIzPzecZYUQ7rhsIxQ1KFc4.roa
Signing time: Thu 08 Dec 2022 06:11:00 +0000
ROA not before: Thu 08 Dec 2022 06:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:5b:d3:44:08:4c:e3:59:ba:86:ef:c7:42:35:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 06:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff432348ccfcde71961443bae1b08c50d4a15ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:fe:39:bb:02:d6:c7:f7:b4:f3:6a:9e:75:
10:58:b2:e4:8d:d9:6d:28:20:fc:46:3e:a7:18:b7:
ea:c2:bc:1a:b4:7d:c0:90:0f:79:3a:65:5a:aa:0e:
7e:40:6e:e9:c6:c3:e5:67:5f:3c:42:d5:f6:92:4a:
c1:46:f3:29:96:0e:d3:4d:57:f4:0a:f9:c0:6d:6d:
1d:a4:40:47:e8:d2:60:72:33:87:d3:7c:41:d5:4a:
18:00:5e:d6:6c:e3:74:05:b5:4e:56:18:b5:ce:90:
07:86:0b:ff:7f:fb:55:1d:71:0f:3b:1c:a6:60:54:
58:7c:d6:f0:81:dd:fa:f3:7f:dc:b5:ee:47:96:ac:
21:00:bb:10:74:51:bd:dc:e3:8c:a4:b7:da:5f:99:
3a:31:85:b2:bf:e1:42:43:a6:60:16:4e:51:ea:e9:
4b:f0:0a:c3:3b:02:ba:73:75:af:d1:de:d2:ee:13:
de:1e:95:a5:eb:ab:53:4b:72:e0:a8:7f:85:3d:89:
75:ea:af:17:78:29:96:35:8e:51:31:42:67:49:28:
f3:74:ac:c5:10:c4:e9:f9:7a:e0:da:f6:02:c9:36:
04:5a:6a:a0:d2:94:1f:1c:01:85:c8:30:fe:73:b2:
97:6d:ac:c7:ba:8c:4e:88:6a:4e:ad:f3:93:1a:e5:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:32:34:8C:CF:CD:E7:19:61:44:3B:AE:1B:08:C5:0D:4A:15:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_QyNIzPzecZYUQ7rhsIxQ1KFc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d3:21:9b:e7:c9:4d:be:fd:f8:d9:bd:98:61:02:70:7d:0c:
46:f5:ab:cd:e2:a7:83:70:f9:13:88:45:71:09:b5:4d:7e:4a:
13:71:26:4f:e2:22:41:33:53:da:e5:eb:f6:7f:64:c9:ba:cc:
87:1b:d1:3d:4f:78:d6:f2:e8:c9:fb:5a:66:61:53:1d:e2:70:
a3:0b:09:d6:c4:81:a3:1e:3a:6d:ae:e7:1e:cc:50:8b:5b:79:
ba:cb:e6:c5:ef:1a:0c:82:ab:c8:c6:cd:69:a0:99:c2:9f:62:
5e:70:59:6e:28:e3:5a:39:04:ec:78:84:40:81:e6:21:f8:4d:
98:15:71:c5:0a:54:26:22:bb:65:14:65:21:58:25:40:4b:51:
8a:aa:aa:20:75:6e:88:38:c8:5b:70:99:94:6e:21:98:be:56:
cb:f0:5c:0d:7e:a0:15:75:ff:cd:90:03:75:6f:6a:2a:78:90:
0f:14:52:5f:a7:96:82:c2:00:93:5a:a2:58:38:62:ca:70:81:
b2:11:da:d6:d3:a2:89:e8:81:75:8d:90:df:65:0e:6f:3e:f8:
9a:c9:6c:ab:2a:37:a5:e7:44:af:06:43:62:32:a3:52:23:ca:
55:8f:2c:2f:78:8b:d3:cc:c0:77:33:84:8d:8a:ff:04:81:5e:
70:d1:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:20 2025 by rpki-client