Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpaxD52NoRUdmRibDd278-cVcWQ.roa
File: jpaxD52NoRUdmRibDd278-cVcWQ.roa (raw, json)
Hash identifier: 3+sYq4X8tYIdVigPVQkOVyS8LxJxsYl7VB+dSlTnf8A=
Subject key identifier: 8E:96:B1:0F:9D:8D:A1:15:1D:99:18:9B:0D:DD:BB:F3:E7:15:71:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854AE3328C13F29019B9B5B08C91B96B2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpaxD52NoRUdmRibDd278-cVcWQ.roa
Signing time: Sun 25 Dec 2022 20:04:41 +0000
ROA not before: Sun 25 Dec 2022 20:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4ae2:a743/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4a:e3:32:8c:13:f2:90:19:b9:b5:b0:8c:91:b9:6b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 20:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e96b10f9d8da1151d99189b0dddbbf3e7157164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:fc:ec:70:57:bd:61:e8:04:e6:be:ed:87:
8b:2f:ad:60:f0:e0:42:5e:47:86:45:c2:84:69:4e:
35:9e:bb:2f:4c:7b:de:d0:1e:7a:88:87:a4:95:2d:
8e:81:83:ed:50:a9:b4:da:53:0e:b7:d4:65:1c:88:
57:d7:8f:e5:21:2c:ee:6f:e1:3c:e2:72:e3:ce:d4:
b3:bb:12:f9:3e:a1:8d:ea:8f:db:8a:a8:2c:65:7e:
16:7c:d6:95:e3:19:b3:5a:b5:0b:7b:e2:32:6d:aa:
73:56:d2:70:e5:b7:15:ac:fb:f6:6a:4e:1f:33:f9:
d5:5a:ff:9b:5b:e4:bc:9d:98:cb:a5:17:44:b9:e2:
56:d5:ca:8a:8e:f2:79:1e:d8:c4:15:53:d1:e4:1f:
56:33:fb:73:b8:20:f4:13:fb:a2:fc:24:57:15:c8:
a3:75:67:1a:e0:3e:05:4f:18:f0:7c:32:52:31:f1:
d9:79:34:d1:26:9a:e2:6e:82:61:40:db:52:07:91:
1a:04:27:ef:9b:51:8c:f4:99:49:64:90:28:a7:bf:
4a:54:07:22:a1:93:ad:44:97:af:71:c0:51:7d:b7:
1e:be:74:7e:41:a4:18:0b:61:e1:5a:d0:d4:6b:51:
82:ce:e3:7c:28:54:77:4e:7b:b6:0a:11:07:59:17:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:B1:0F:9D:8D:A1:15:1D:99:18:9B:0D:DD:BB:F3:E7:15:71:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpaxD52NoRUdmRibDd278-cVcWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:22:dc:32:6a:a8:d2:0e:74:a8:7e:93:45:95:76:71:26:91:
dd:b5:71:88:cd:f9:ff:11:81:34:85:86:9d:fb:29:bd:61:fc:
5e:c7:3d:a2:9d:2f:0c:26:4b:2e:aa:b5:60:26:39:cd:36:6e:
cf:a8:1e:a3:46:66:b6:fd:c5:5e:a5:c7:34:dc:60:9d:2b:fb:
30:5d:66:c4:e0:83:ae:ab:43:38:73:31:ff:67:63:72:8d:50:
3c:42:97:5d:66:52:b3:82:a5:cc:08:4d:99:aa:09:a2:ac:34:
45:eb:b5:c5:9c:b2:9b:5c:b1:39:bb:cd:4f:cd:f4:a1:2f:06:
3d:dc:6e:58:a9:38:79:0f:78:8f:75:b8:df:7f:c4:13:2c:0a:
ee:08:4b:14:26:81:e5:4a:b8:b6:4d:2b:4c:d2:af:70:f7:d0:
2b:f8:f2:16:a8:94:10:78:c6:ac:56:11:6f:ae:2b:79:9e:91:
51:06:99:e1:99:50:3f:5d:a5:38:86:ce:ee:d8:04:aa:c2:47:
d2:3f:76:3f:68:54:b8:39:35:54:1c:33:4e:e8:16:cf:a9:fe:
cf:92:56:4c:62:df:b5:8e:12:f9:35:96:c8:94:fe:3d:d3:f1:
db:31:3c:e8:74:89:9b:62:07:b6:18:49:18:b5:54:7e:df:9e:
15:79:61:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:54:06 2025 by rpki-client