Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/joF5EW3nfnAJDr68mo1e-gxPFWE.roa
File: joF5EW3nfnAJDr68mo1e-gxPFWE.roa (raw, json)
Hash identifier: qnbguqWQebvFzHe/fGntkUPb+LftKmwWPIv5w1+gnvs=
Subject key identifier: 8E:81:79:11:6D:E7:7E:70:09:0E:BE:BC:9A:8D:5E:FA:0C:4F:15:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 926DACE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/joF5EW3nfnAJDr68mo1e-gxPFWE.roa
Signing time: Mon 04 Jul 2022 23:12:26 +0000
ROA not before: Mon 04 Jul 2022 23:12:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456661219 (0x926dace3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 23:12:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e8179116de77e70090ebebc9a8d5efa0c4f1561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:1d:05:c8:c3:18:57:00:db:cd:3b:26:6e:
f6:3c:42:08:5e:dc:41:44:54:1e:6f:b2:55:69:ae:
ed:36:6c:ec:dc:99:03:40:c5:5f:3d:b6:6b:03:0a:
64:dd:a7:49:1a:d4:5f:fd:81:31:a5:95:0e:c9:a9:
f5:30:b7:a8:24:0d:e7:20:b7:99:10:ef:44:16:9a:
36:7e:23:95:c8:e8:60:fe:b3:6a:8a:5f:fd:7e:98:
f4:9e:9b:72:2f:d8:0c:8e:76:52:60:11:68:a9:e4:
e0:5c:08:ee:05:8e:c9:1f:8a:d8:8d:2f:ef:9f:e8:
b9:b0:17:5f:9e:c8:01:68:04:af:7f:eb:15:17:21:
5b:e9:4d:95:16:41:d0:c1:f6:fb:46:6c:6e:e0:ce:
f7:e2:ff:5a:a8:85:15:c0:e1:03:e3:d3:15:49:a0:
5e:34:d6:d5:d2:eb:67:36:4c:86:ab:5d:fd:e2:94:
e3:1b:9d:49:0c:54:66:5f:ce:00:fd:5f:7d:e0:d7:
c4:1e:91:34:7b:a4:ff:6a:74:95:f0:3f:00:23:49:
1e:a3:30:d3:a1:8c:f9:a8:a0:e4:2f:1d:69:74:0e:
c7:c9:a5:84:7f:ff:28:65:74:33:61:b8:d8:da:f6:
cf:3e:f2:9b:59:69:cc:f3:f0:c0:fb:d7:fe:77:09:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:79:11:6D:E7:7E:70:09:0E:BE:BC:9A:8D:5E:FA:0C:4F:15:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/joF5EW3nfnAJDr68mo1e-gxPFWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:d9:62:f9:71:fe:91:79:9e:5b:28:57:3b:6b:82:16:16:c1:
57:4d:1a:c2:08:29:79:78:5d:00:bd:73:e6:ae:ee:1a:8f:11:
41:ba:03:94:fd:99:11:16:42:c5:cc:40:1e:14:b5:f8:65:ee:
a6:1d:ea:3a:96:1e:b4:57:96:1c:6f:4b:bb:84:d3:0d:d7:d8:
d9:60:c2:65:93:60:02:18:96:9e:b3:67:ab:2f:aa:88:df:8c:
90:45:23:f7:2c:55:de:38:37:b8:7e:d4:ab:d2:b0:f8:9d:45:
7a:b7:e0:5a:0f:be:98:3b:4e:ac:b6:c4:f8:03:d3:c8:ef:d9:
49:77:c7:d7:49:61:70:f9:35:f7:eb:db:b2:d6:01:87:3a:cd:
dd:79:a4:1c:3e:31:e9:9d:ee:23:d8:3b:e9:2b:ec:d1:46:84:
30:12:a9:fd:5e:b3:9b:6d:ba:00:91:24:9b:ec:e1:fd:86:60:
53:d9:1a:e0:89:3c:7e:ee:2e:a2:43:82:2e:1d:70:94:8f:40:
ba:29:be:3d:a6:54:5b:e7:42:c3:35:59:78:18:d8:27:22:d1:
a3:e9:26:54:94:a6:d1:d8:9d:51:a5:ea:f9:6d:3e:81:30:2e:
fb:f0:6b:13:18:8e:f0:64:c4:c6:ed:f6:55:6f:fd:ae:17:f4:
28:a6:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:15 2025 by rpki-client