Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_T6l732zKTAzgamlQI1hejgB9w.roa
File: j_T6l732zKTAzgamlQI1hejgB9w.roa (raw, json)
Hash identifier: +u2CBvAl+WtTOU+QFjZxiRdOyH2F6N8v6Aqd0a3wRgw=
Subject key identifier: 8F:F4:FA:97:BD:F6:CC:A4:C0:CE:06:A6:95:02:35:85:E8:E0:07:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DE55FF1D010D7A125977A59AC64081F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_T6l732zKTAzgamlQI1hejgB9w.roa
Signing time: Sun 04 Dec 2022 18:11:28 +0000
ROA not before: Sun 04 Dec 2022 18:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:de:55:ff:1d:01:0d:7a:12:59:77:a5:9a:c6:40:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 18:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff4fa97bdf6cca4c0ce06a695023585e8e007dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:2e:18:f4:ae:01:7a:f1:6f:26:3d:60:c3:
68:0e:be:28:ce:17:1d:a3:91:aa:d9:3b:0d:b0:b9:
17:42:36:1c:d3:fc:17:d4:46:6c:ce:1e:93:3c:f6:
24:2e:51:68:9f:57:35:52:eb:0d:90:b9:03:b5:ed:
9f:5d:52:fa:ca:c7:e5:c6:93:ff:81:14:93:be:e8:
9b:12:42:2f:aa:46:81:8a:85:c8:5b:9b:55:1a:35:
b8:1b:cb:7f:8f:89:06:c2:ed:d4:53:75:74:f8:04:
ce:0e:d7:08:5d:9d:72:7d:43:09:06:3a:a6:ee:03:
ce:bd:e8:85:72:aa:ce:d7:f6:63:20:3f:e3:bb:5e:
d4:65:61:d4:11:89:90:49:6e:98:1b:be:3c:11:62:
74:65:65:0c:78:e0:70:9a:e8:9e:fc:9e:cf:e7:9c:
34:43:a7:d9:bd:c2:32:7f:bb:31:70:fe:3a:23:4f:
42:a1:48:a8:da:da:e2:bd:bd:99:4f:9d:6e:43:d1:
94:04:cd:34:3c:54:30:81:45:7e:0f:97:c6:69:73:
de:2a:81:f6:ea:92:6c:aa:90:28:29:10:0d:54:4a:
d1:d0:ed:22:8c:06:d1:26:19:b6:1d:7d:ce:a0:85:
8b:aa:b0:e0:73:de:1e:6f:33:a1:af:7b:05:4e:76:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:FA:97:BD:F6:CC:A4:C0:CE:06:A6:95:02:35:85:E8:E0:07:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j_T6l732zKTAzgamlQI1hejgB9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:82:76:bb:b4:e3:a2:09:2e:33:88:0b:5a:bb:db:21:c0:1e:
d3:47:f5:86:40:9e:8a:3f:85:c5:0b:51:9b:02:2f:0c:84:d0:
17:ea:3d:f9:69:9a:35:b7:90:f8:83:09:46:c0:59:94:8d:55:
2b:43:90:36:12:f6:d0:36:f0:2d:07:cc:c7:84:53:e1:2b:c7:
41:16:4c:51:b2:ae:ae:96:5a:01:96:61:1b:f6:92:e6:73:8e:
fa:6e:e4:88:3c:22:ca:cd:b5:c5:a6:a6:2d:fe:06:7e:fd:3d:
5b:4d:ea:8e:69:72:55:d1:16:ce:2d:03:eb:2b:70:8c:af:22:
01:03:43:2e:40:40:f7:b8:2c:18:e5:4d:21:60:7e:e6:9d:96:
7f:fb:00:d7:ed:69:de:af:72:c6:16:46:58:51:e9:2f:e1:0a:
11:bb:76:ea:e6:24:9b:d8:d3:d7:5a:66:60:9f:04:48:e9:30:
ae:42:7d:7a:c3:80:09:92:18:54:47:69:0f:02:4b:fb:7d:c2:
de:30:f2:cc:4a:c5:79:30:1f:09:b9:8c:5f:3a:b8:ca:3b:18:
10:90:d3:f0:5e:f7:d8:43:87:d6:73:c8:92:f8:7f:84:60:9d:
1a:c5:39:2d:40:e4:d2:7d:d8:e8:fb:60:64:54:ae:80:32:96:
e2:5d:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:46:14 2025 by rpki-client