Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJS5KMFtn_axhzXBFibxxKdNpj4.roa
File: sJS5KMFtn_axhzXBFibxxKdNpj4.roa (raw, json)
Hash identifier: XJSWkBmEqEoKBS90yMv2OZm0J4ffXoQP331WYmk9d3I=
Subject key identifier: B0:94:B9:28:C1:6D:9F:F6:B1:87:35:C1:16:26:F1:C4:A7:4D:A6:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821A3F2960183B4A72E90292F39166DE2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJS5KMFtn_axhzXBFibxxKdNpj4.roa
Signing time: Wed 20 Jul 2022 06:15:23 +0000
ROA not before: Wed 20 Jul 2022 06:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:3f:29:60:18:3b:4a:72:e9:02:92:f3:91:66:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 06:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b094b928c16d9ff6b18735c11626f1c4a74da63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:ce:4b:00:d4:40:95:5f:07:d0:dd:fd:66:
55:97:2a:97:b6:8f:a4:dd:05:7b:9b:2f:c9:c6:f2:
0b:cc:a6:20:7c:62:af:5c:2d:05:4e:5a:5a:46:73:
b1:0f:cc:1d:b2:df:66:0d:84:4d:cd:07:09:89:1d:
eb:86:06:d5:a5:4c:b9:77:ef:86:a1:d7:6e:4f:81:
ae:be:ce:c6:02:a9:57:f5:99:0b:7f:e1:e1:4d:3d:
87:88:23:01:e7:43:9b:4a:53:c0:68:e6:b5:ad:72:
e4:3e:8f:93:43:a9:18:55:06:7a:9b:34:4c:21:46:
2d:70:87:de:06:20:39:29:c2:8a:27:92:46:be:43:
ca:bb:6f:11:93:60:bf:77:03:2f:7b:e8:cf:4b:a6:
43:89:06:3f:da:03:1c:54:bb:35:eb:05:a0:ce:9d:
3c:a4:7c:48:f6:29:fb:27:c0:6e:f3:19:a9:a8:46:
5b:5e:1b:83:23:79:b5:62:f8:a7:52:53:18:c4:ce:
7a:8e:05:73:8a:3f:f0:04:51:bc:f7:13:bb:d8:ea:
d3:0c:73:e2:e6:b9:2d:32:d9:3a:2b:8a:67:dd:94:
25:3a:25:9e:75:26:94:2d:19:5d:21:a2:c2:56:65:
87:21:91:c1:95:79:e4:50:34:4b:d2:40:61:c6:25:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:B9:28:C1:6D:9F:F6:B1:87:35:C1:16:26:F1:C4:A7:4D:A6:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJS5KMFtn_axhzXBFibxxKdNpj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f4:92:95:ab:5a:2a:19:9c:26:02:8a:b2:74:c3:11:8e:1d:
77:f9:d8:33:20:ec:d0:34:da:c8:46:1e:e1:e3:75:12:70:de:
4b:f7:76:e4:75:3b:7c:bb:ba:a3:29:ce:d7:c9:d3:b8:46:7c:
81:a5:76:a4:1f:d9:6d:45:28:7e:6e:39:aa:64:58:d3:ae:d7:
26:30:25:7e:f1:82:b8:15:39:b8:1f:0c:d8:fa:8a:3c:fa:63:
99:af:b3:d4:99:95:eb:8e:dc:ad:60:a2:85:e0:b8:31:eb:59:
71:12:74:fc:52:9c:35:95:19:67:c0:02:29:ac:f3:f5:3d:8a:
d3:f8:62:2f:95:e8:89:0e:e5:37:a3:75:dc:90:bf:40:e1:05:
a9:fc:3d:32:fd:55:99:1f:db:cc:1b:7e:ff:7f:cd:42:a3:7d:
82:2f:6d:4b:c6:ff:d4:e8:bd:74:c8:9b:da:80:4b:72:2f:f7:
0c:31:74:9d:23:cc:2c:83:d7:ae:24:a0:e7:00:84:52:b6:76:
9c:f9:ac:ee:3a:59:a5:b5:fa:88:71:21:ba:5c:c0:e0:67:2d:
74:7e:fe:a1:ab:0e:b8:ec:3c:96:a8:0c:17:bd:5e:94:35:a9:
73:d2:ed:1a:7d:42:0f:0d:ff:38:7d:0c:56:f8:61:fb:a4:67:
03:c0:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:58 2025 by rpki-client