Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-jds_nLOqsjPaP4CQuneos_jPRk.roa
File: 1-jds_nLOqsjPaP4CQuneos_jPRk.roa (raw, json)
Hash identifier: LvsfcqKCHCK5zCIgcnsY5liNiXVXiM6LP3RdASpD1wg=
Subject key identifier: FA:37:6C:FE:72:CE:AA:C8:CF:68:FE:02:42:E9:DE:A2:CF:E3:3D:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 662E7880
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-jds_nLOqsjPaP4CQuneos_jPRk.roa
Signing time: Sat 29 Jan 2022 20:09:17 +0000
ROA not before: Sat 29 Jan 2022 20:09:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714321536 (0x662e7880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 20:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa376cfe72ceaac8cf68fe0242e9dea2cfe33d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:86:bc:57:5b:3d:be:bd:35:25:5c:d5:cc:
91:b3:a4:c7:07:69:8c:7b:7d:15:92:c6:01:a8:c5:
be:d3:e7:18:29:dc:30:77:4b:4d:5b:2d:37:8a:86:
f4:3c:e1:18:9e:1a:83:ec:fc:a4:6f:45:7f:fa:6c:
1a:bf:d1:0e:37:bc:09:39:68:1a:ff:ba:6b:2d:c3:
e4:fe:76:c8:b5:68:21:ac:bd:8d:bf:3c:0c:27:d7:
41:f3:b9:53:33:17:66:ad:73:1a:9e:e5:01:a8:91:
5f:1b:b9:3b:89:f5:44:94:aa:d3:6f:78:2e:33:bf:
e9:b8:1e:5c:1f:7c:38:bb:41:6c:32:4e:bd:12:1d:
70:30:69:d0:78:e9:8c:14:b7:ff:53:e6:d2:11:9f:
33:5a:3c:28:6f:d0:db:2b:b4:7c:31:d8:41:a0:f5:
bf:db:02:a2:6f:43:19:36:4d:a3:aa:29:a2:f9:69:
7c:06:a0:ce:13:ad:9c:f0:bc:58:67:86:76:5a:40:
46:02:be:7e:b6:55:4d:6b:dc:4c:89:9d:ef:16:9b:
3d:cd:93:46:11:a3:33:d6:24:2f:bb:f6:07:fa:d3:
6a:92:62:b2:83:af:81:fb:57:67:46:26:29:5d:8f:
aa:ce:b7:1d:a4:b5:ad:05:aa:9d:df:9e:68:d7:71:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:6C:FE:72:CE:AA:C8:CF:68:FE:02:42:E9:DE:A2:CF:E3:3D:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-jds_nLOqsjPaP4CQuneos_jPRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:63:1c:59:72:b2:61:08:83:19:e2:5c:ef:ff:c2:95:58:96:
5c:d9:00:3e:c7:0f:a9:85:32:d7:11:9a:06:2b:f2:1e:89:51:
96:99:c8:df:ee:cb:0d:90:6f:c2:5e:0c:52:43:ba:59:a9:ed:
b2:e3:ca:ab:e3:29:29:f4:ab:c1:a1:14:9d:f8:2b:eb:e6:b3:
bc:f5:a3:02:49:9d:6c:3b:72:30:5a:53:fb:1c:67:bf:52:98:
43:fe:92:03:f7:f9:64:71:c0:21:13:b8:34:96:c9:47:ba:26:
5f:19:2a:d8:9a:c2:4f:eb:eb:07:53:fb:c3:12:e4:b9:d7:c2:
a5:46:84:16:d7:91:cf:f5:a8:f6:3d:b7:80:4e:ec:7b:d7:9f:
69:9d:33:2b:c2:28:91:ff:9a:3f:69:10:f5:fe:fb:87:5e:e1:
f1:f4:0e:41:1e:eb:3c:06:90:a8:07:2f:b6:fb:a9:63:79:7a:
48:bc:38:6f:19:89:71:32:f5:21:88:c6:60:95:14:f5:f7:1b:
82:63:58:9b:0d:24:cb:1d:07:8d:08:d2:c2:ed:b0:c3:9d:36:
79:32:24:10:2c:6f:e3:b9:29:43:a7:9c:e4:0f:2e:2b:58:a7:
65:96:d9:05:24:bf:65:f9:03:33:00:cd:48:24:a6:da:cd:49:
bb:a1:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:43 2025 by rpki-client