Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jasG5_I_uqWIzSmjg0onLM3OFWk.roa
File: jasG5_I_uqWIzSmjg0onLM3OFWk.roa (raw, json)
Hash identifier: 74QNEKOzv3qZ9OzPeK+ihNF6PkR+q4xjnIP1P15n6MY=
Subject key identifier: 8D:AB:06:E7:F2:3F:BA:A5:88:CD:29:A3:83:4A:27:2C:CD:CE:15:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66FDA451
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jasG5_I_uqWIzSmjg0onLM3OFWk.roa
Signing time: Tue 01 Feb 2022 19:17:24 +0000
ROA not before: Tue 01 Feb 2022 19:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727898705 (0x66fda451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 19:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dab06e7f23fbaa588cd29a3834a272ccdce1569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:4a:cd:d9:98:d7:a4:e5:e8:3f:62:82:8b:
27:1a:2f:b5:24:ef:32:0f:6b:0e:a3:3a:aa:ef:f9:
1d:f5:de:97:19:b3:75:cf:ac:c8:2f:74:ae:1a:d6:
cd:e9:7f:4b:a6:ec:9e:9f:d5:56:69:17:71:1f:18:
7c:69:7b:07:dd:9d:fb:b9:3d:1a:c3:a5:a3:f5:5b:
84:37:8d:f1:bc:e4:00:50:f2:19:fc:30:a0:0a:87:
69:e1:07:3e:3e:f3:fd:48:ea:4e:5a:0d:ca:cd:d2:
3a:c7:33:70:da:fb:b5:ed:c2:42:47:eb:c3:b7:23:
ba:10:23:31:f1:6b:9c:bb:60:f8:c1:28:b2:43:64:
ca:3b:66:45:58:61:c5:df:b9:df:8b:11:48:12:39:
26:17:2b:39:b3:be:17:de:31:26:7f:e1:31:42:e5:
69:1d:e3:c5:d6:06:e0:96:fe:2d:f6:f7:2b:e6:40:
29:25:11:dd:ec:1e:be:eb:4c:06:dc:53:7e:cc:2b:
8a:54:bf:1f:2e:81:87:64:53:93:8f:2d:e3:9c:a2:
37:31:0d:24:c5:dc:aa:3f:b6:63:78:3a:6a:d7:0b:
e8:95:bf:98:08:87:3b:77:3f:e6:f2:c4:cb:40:6f:
a1:18:1f:b6:da:b9:56:19:d2:f8:bc:ef:01:c0:ee:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:06:E7:F2:3F:BA:A5:88:CD:29:A3:83:4A:27:2C:CD:CE:15:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jasG5_I_uqWIzSmjg0onLM3OFWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ed:bc:c1:6b:1e:1e:6d:a7:c2:23:55:bb:71:fe:1b:96:11:
50:e6:7a:0d:52:cd:63:c6:35:43:a8:dd:17:a5:15:c4:a9:7b:
c8:9b:f0:a5:31:54:52:ee:fb:26:98:c6:4d:f7:00:24:67:20:
75:14:ba:37:49:25:87:df:72:23:68:85:bc:fa:5b:df:7e:ae:
14:f3:1f:1e:0e:8d:8c:01:26:68:8f:27:ba:02:42:7f:5a:31:
44:30:4e:ee:52:ba:29:93:3b:a1:84:6f:b7:fd:27:45:77:b3:
ab:e7:7f:25:63:8d:cb:a2:ce:e5:eb:df:f1:15:40:74:ff:37:
72:b4:d0:b5:4e:59:ba:2a:89:e4:f6:04:68:59:ce:9c:ea:e4:
eb:20:43:03:d0:cb:48:1c:0d:59:5c:5c:cc:2e:52:e4:40:e4:
07:a3:8d:13:3e:60:52:3d:26:aa:19:ac:3b:da:c5:fe:4d:26:
52:d2:4c:df:87:4e:61:13:01:1e:23:2e:cd:78:a8:f4:59:c6:
64:26:5b:56:48:cc:98:a1:8c:17:5e:af:4d:5a:62:80:cb:7e:
99:66:1b:57:2c:3a:69:b0:8f:08:fe:93:b9:c1:22:30:10:37:
c4:3e:0d:31:7b:ec:80:02:33:eb:f2:14:01:fe:9c:31:c9:83:
28:ce:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:48:00 2025 by rpki-client