Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjxwrh3WajpUsqGeGxlThNVl0bg.roa
File: rjxwrh3WajpUsqGeGxlThNVl0bg.roa (raw, json)
Hash identifier: E1y5XtgILX3Q9HDD5u3DjYCa2fHbeb2UYAJctqRdtlw=
Subject key identifier: AE:3C:70:AE:1D:D6:6A:3A:54:B2:A1:9E:1B:19:53:84:D5:65:D1:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018616C22E1BC2CB3F637262E3EC8CD71FD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjxwrh3WajpUsqGeGxlThNVl0bg.roa
Signing time: Fri 03 Feb 2023 10:11:09 +0000
ROA not before: Fri 03 Feb 2023 10:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:c2:2e:1b:c2:cb:3f:63:72:62:e3:ec:8c:d7:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 10:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae3c70ae1dd66a3a54b2a19e1b195384d565d1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:82:4f:5c:36:1c:e5:66:de:3d:e3:27:ed:
1b:d8:90:ce:d4:b3:db:d5:05:be:cf:59:de:65:ca:
b4:f3:72:70:b4:c6:97:f2:53:29:a3:e3:4a:0e:f4:
a0:e6:f5:cc:e7:df:4c:22:13:67:18:20:dc:89:33:
7b:8a:f0:7c:a3:1d:15:a3:21:c6:6a:74:db:86:ae:
db:18:22:d0:e7:5d:32:60:31:40:5b:a7:b3:41:4d:
6b:ac:c4:3f:a1:13:6b:58:d9:db:28:24:98:5a:44:
a1:8c:b8:6c:6e:82:4c:3d:48:46:2f:da:05:00:d2:
f2:45:c1:45:d2:54:ff:a5:06:f7:a3:17:79:82:ac:
58:3a:3c:a6:54:cd:e6:ca:18:c9:1b:8c:82:a2:3b:
aa:25:3a:41:19:5e:82:28:57:30:de:d7:f5:1c:35:
27:ee:1b:b7:0f:4b:ca:10:42:8c:8b:70:09:fe:58:
1a:69:f9:f6:93:8c:28:96:74:25:da:e4:a5:66:e7:
41:bf:a2:44:45:42:3f:9a:1f:7e:a2:1a:52:4b:76:
a8:ba:ef:18:3e:ac:52:e1:3a:fc:cc:78:b9:87:9a:
c0:d4:c1:3e:a3:b1:ff:7a:e9:b6:01:fa:f0:e3:67:
3d:9c:b3:db:0a:fb:6e:79:ff:88:4d:a9:16:c0:31:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:70:AE:1D:D6:6A:3A:54:B2:A1:9E:1B:19:53:84:D5:65:D1:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rjxwrh3WajpUsqGeGxlThNVl0bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:ff:ed:78:09:e4:33:a3:e4:34:35:90:c1:0d:87:82:b0:b6:
f2:f9:64:1b:a1:6a:b0:87:65:d0:49:08:ba:2c:08:40:8e:54:
48:af:73:ad:68:e7:89:3a:bc:38:01:2c:f3:26:6c:dd:a1:7c:
a0:a0:6b:16:7f:02:5d:68:21:00:8a:e8:8d:29:a2:21:fa:ea:
58:50:77:6c:24:f7:f1:5a:90:a0:bf:b6:ca:12:88:16:c7:72:
b9:f4:72:31:8d:a3:61:7b:bc:e2:85:26:a5:db:34:16:9b:63:
1b:b4:bb:1c:96:0f:f0:6c:b9:4a:84:dd:d9:be:40:c7:37:a1:
30:ea:b7:aa:c3:48:48:04:d3:6e:57:85:e0:35:29:d3:89:fa:
50:bc:c3:7b:bd:13:cf:7d:4e:a8:17:fe:d5:bd:85:c7:77:49:
cd:c8:bd:08:c3:c1:ce:11:a0:10:cc:ad:5d:29:68:70:88:d2:
f9:c2:e3:ea:b0:4c:18:24:63:9c:04:e6:b5:a6:d5:35:77:51:
bc:c3:a2:df:ef:0d:fa:19:54:72:a7:2b:1e:24:ba:ac:0a:72:
af:c5:02:9e:0a:2d:bf:00:52:84:06:ec:6d:7d:f4:a2:4b:ad:
0f:98:85:39:28:6e:10:06:11:f8:e7:c7:6d:a7:cd:8d:8f:b5:
a0:89:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:04:46 2025 by rpki-client