Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwkp88YniRxwHM4Y0JtR53QCPBs.roa
File: jwkp88YniRxwHM4Y0JtR53QCPBs.roa (raw, json)
Hash identifier: najJBFAwlNW7ngEj1tfmvRAmIjh+qAy6t+FbBIIdYFQ=
Subject key identifier: 8F:09:29:F3:C6:27:89:1C:70:1C:CE:18:D0:9B:51:E7:74:02:3C:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833DD81BC5EF8FEE5458784FAB6275875D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwkp88YniRxwHM4Y0JtR53QCPBs.roa
Signing time: Wed 14 Sep 2022 21:11:56 +0000
ROA not before: Wed 14 Sep 2022 21:11:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:d8:1b:c5:ef:8f:ee:54:58:78:4f:ab:62:75:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 21:11:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f0929f3c627891c701cce18d09b51e774023c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:92:8d:c0:82:ad:00:1b:f4:6c:17:8e:be:
64:a5:b1:2a:f1:da:4d:27:74:32:54:16:78:74:a6:
b0:ab:26:90:f1:7c:76:24:a2:e5:2e:0e:8c:a2:56:
63:41:7e:ce:28:bf:94:02:31:83:6e:3e:a7:49:f7:
26:95:b4:29:c1:11:d8:70:de:8f:10:0c:8e:81:41:
ea:df:b8:c5:2a:dd:b5:2c:e9:cc:7c:3a:1c:40:c9:
48:46:46:18:a0:b8:fc:2f:74:2a:a7:c7:38:46:91:
d6:66:c8:2e:35:c2:33:bf:55:0d:3c:c9:ff:9e:5e:
a7:6a:43:a8:2c:9e:f6:07:3c:04:36:ea:3c:c8:af:
da:6e:af:0b:70:44:10:19:ce:84:99:2e:fe:a8:21:
bb:11:dd:53:05:42:65:ca:11:41:30:1a:62:10:aa:
27:7d:fb:bb:c3:7e:9a:96:7d:1b:45:aa:19:02:04:
f5:d2:d5:0e:c9:c3:76:ac:99:e1:9f:32:dd:45:15:
fb:df:f2:65:82:66:21:06:2c:b9:35:d5:65:63:76:
b4:e9:e8:ff:ec:2f:8d:9d:20:24:8c:28:a4:95:68:
0b:0c:2d:0c:2e:96:6c:34:83:0c:a7:e6:17:f9:24:
4f:4f:51:cc:a9:7f:96:09:4c:67:07:e2:7b:b6:8e:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:29:F3:C6:27:89:1C:70:1C:CE:18:D0:9B:51:E7:74:02:3C:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwkp88YniRxwHM4Y0JtR53QCPBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:a4:89:e5:07:70:c1:92:08:1c:64:34:28:d8:37:4f:34:c4:
eb:66:09:28:af:35:8c:ed:e8:1e:c3:45:a7:00:6c:96:fc:b3:
79:ca:cb:70:51:2c:28:77:8c:36:73:a7:0d:35:11:1d:43:d8:
48:52:23:c5:b3:64:fb:26:e5:61:9d:44:8c:79:26:17:e8:f0:
76:58:11:d6:e8:c8:de:b2:0f:64:53:13:93:2c:27:24:9a:15:
2e:09:e8:0c:6d:d0:0e:b6:6f:ba:41:59:aa:a8:a2:0a:61:2f:
ef:e7:56:80:3b:de:33:e2:07:18:50:1a:d9:fc:e0:6c:e3:34:
f3:06:19:b6:65:f4:a4:27:d1:c4:46:b0:47:dc:19:03:26:11:
ce:bd:cd:60:68:27:2f:f1:17:cf:64:cd:2c:d8:79:97:c9:f9:
93:96:6c:33:10:5a:3c:08:2e:f0:91:08:aa:d1:20:8a:cd:34:
79:bf:cd:4a:b7:06:ca:f7:55:6d:1a:4c:34:21:e8:9d:92:75:
97:17:1d:c3:a3:5d:a9:48:49:68:76:d9:da:5b:eb:0f:44:16:
bd:08:27:bf:df:14:cc:0e:3e:32:47:4a:e1:5a:d2:e4:4e:a9:
a0:9f:ae:91:9b:b6:f3:41:f8:83:96:ee:fb:02:87:7f:ff:fa:
4a:f1:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:09:49 2025 by rpki-client