Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbwMdh4ieEZR6jK-lNY2jL-4_-8.roa
File: jbwMdh4ieEZR6jK-lNY2jL-4_-8.roa (raw, json)
Hash identifier: yvs2Itgc1GNDdAVYAjKQtSJsTPmn7PlgIkX07h4LrD0=
Subject key identifier: 8D:BC:0C:76:1E:22:78:46:51:EA:32:BE:94:D6:36:8C:BF:B8:FF:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855EA57E2AC7335B3A0A473378A02CCD01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbwMdh4ieEZR6jK-lNY2jL-4_-8.roa
Signing time: Thu 29 Dec 2022 16:09:42 +0000
ROA not before: Thu 29 Dec 2022 16:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:a5:7e:2a:c7:33:5b:3a:0a:47:33:78:a0:2c:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 16:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dbc0c761e22784651ea32be94d6368cbfb8ffef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:10:56:ca:aa:f1:27:35:e1:b2:b5:0d:1b:
92:08:07:c3:b8:8c:d8:da:74:9a:9e:16:0c:f0:fe:
af:54:fb:72:de:f5:91:a7:62:a3:21:6b:d1:68:ff:
5c:e8:96:5b:02:15:df:ed:ee:54:a4:6d:d5:33:4a:
63:07:1c:31:67:dd:2e:31:3a:c7:1e:1c:d0:39:43:
99:60:13:b2:9e:a3:11:23:e7:3b:04:2c:47:40:81:
bf:aa:24:b8:a1:70:14:4d:89:08:f3:07:13:29:03:
0a:f5:bc:e7:2f:39:8d:62:d1:26:01:02:49:67:1b:
03:39:04:05:e6:ee:fe:dc:ae:71:9d:54:e7:87:fc:
4f:17:5d:52:b2:1f:d3:29:d8:f8:a5:df:c4:0b:af:
90:7d:6a:e7:46:09:90:db:dd:6b:ef:ea:43:97:66:
21:1c:e3:2b:aa:8a:17:18:2a:6a:08:68:d7:62:74:
44:dd:24:be:50:35:29:c8:7b:19:51:74:36:d5:4b:
e7:f2:f9:b8:0d:6f:a6:b5:05:2b:90:db:70:96:e9:
23:9f:dc:f0:ad:1d:14:4a:78:80:33:b0:e3:e3:d5:
30:84:25:3c:40:4c:3d:2d:19:50:9c:2a:8e:30:e1:
ae:25:48:1d:89:67:4a:58:83:55:a2:bb:d2:e1:1e:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:0C:76:1E:22:78:46:51:EA:32:BE:94:D6:36:8C:BF:B8:FF:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbwMdh4ieEZR6jK-lNY2jL-4_-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:34:93:2b:3f:82:d3:7c:bb:00:5f:b3:7a:bb:20:f7:9a:6c:
31:b9:9d:8f:a3:43:1e:77:be:52:89:6b:ee:1e:e1:e6:7b:19:
70:f4:37:5f:62:bf:68:f6:8f:31:15:60:c3:ec:8e:0f:e1:18:
65:9a:b9:ed:13:8c:2d:f7:eb:7c:be:35:46:15:38:57:ea:74:
6e:7b:56:13:07:7e:6e:d8:5b:01:6e:90:d9:82:06:6a:f4:6f:
93:03:e4:9a:50:d8:52:d8:2e:4a:28:08:e0:08:4f:2d:d4:a0:
37:a2:5c:af:20:10:fd:b5:92:36:94:b8:d0:3e:d7:63:77:78:
3d:cf:a9:dd:a0:5d:ce:17:d6:a7:b8:29:0b:f6:3b:88:01:2e:
ac:60:d6:fc:9b:ba:bf:1b:c3:5e:52:95:69:9a:12:eb:dd:9c:
ee:f8:44:4c:0a:57:c6:f1:b8:17:60:19:ab:41:7c:ed:42:99:
5c:42:05:e9:0c:71:0e:16:5b:40:22:06:53:08:c5:6f:96:56:
2a:ee:1c:0a:82:67:93:71:25:b3:9a:29:c2:06:fc:0f:77:c3:
18:65:f5:f7:42:92:dc:59:fa:9c:fa:a0:51:dc:57:ce:2a:d5:
86:cd:a4:a8:4c:2e:55:0f:6d:d6:ac:d5:3c:a9:12:29:9f:b4:
6b:e1:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:04:04 2025 by rpki-client