Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J3IeN80jLtlfTmlL6XmC_yNTanE.roa
File: J3IeN80jLtlfTmlL6XmC_yNTanE.roa (raw, json)
Hash identifier: F5oO871GCkPsrZFjh7y12T+WMO66eMHdxvP/YZSJKWY=
Subject key identifier: 27:72:1E:37:CD:23:2E:D9:5F:4E:69:4B:E9:79:82:FF:23:53:6A:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F395A2BC571052A23423529DFE7B2218
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J3IeN80jLtlfTmlL6XmC_yNTanE.roa
Signing time: Thu 08 Dec 2022 21:13:00 +0000
ROA not before: Thu 08 Dec 2022 21:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f3:95:a2:bc:57:10:52:a2:34:23:52:9d:fe:7b:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 21:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27721e37cd232ed95f4e694be97982ff23536a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:16:ec:ba:07:e7:ab:9d:8e:f5:fd:0e:9a:
d1:19:aa:91:56:d3:62:52:b1:10:f2:d1:18:bb:76:
87:32:5d:1e:9a:7f:05:9a:db:a0:94:27:25:f8:3c:
4d:28:02:82:10:0e:2a:bb:d4:a6:3f:5c:eb:db:15:
3a:eb:a5:cc:5f:f6:c5:52:f6:4d:c0:a7:c9:d9:be:
86:67:d2:2a:38:94:06:0d:01:ed:e2:00:a5:96:cf:
1f:5f:92:af:67:c4:88:d7:bb:8a:91:76:aa:01:e0:
6c:8e:cb:27:e5:08:68:86:49:17:21:80:f6:18:09:
bc:f7:d4:45:eb:93:fb:39:72:d1:4e:00:0a:5f:39:
0d:63:33:44:18:cb:da:96:6b:97:3d:a1:ca:e2:11:
e7:f2:20:2c:5c:c1:38:15:2b:80:ef:8c:f1:8b:52:
8f:f3:42:d0:df:d1:0e:c8:ac:0a:5a:ff:09:27:7f:
c8:44:9b:14:fa:f0:f6:89:72:e5:36:59:60:46:db:
08:81:08:c8:40:4d:43:26:a1:cf:1b:b4:a4:85:79:
b2:b9:8b:f3:5b:5e:99:34:7e:9b:53:e8:b0:a3:38:
85:4d:c4:68:5a:ae:ff:18:cd:c1:44:bd:0c:75:d5:
07:df:a7:f1:e2:fe:0f:9e:f3:3d:78:8c:1d:52:03:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:1E:37:CD:23:2E:D9:5F:4E:69:4B:E9:79:82:FF:23:53:6A:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J3IeN80jLtlfTmlL6XmC_yNTanE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:5e:f8:a8:cd:bb:f6:fd:74:36:42:08:48:24:b6:4c:6b:43:
b1:c6:c2:c6:6c:70:ee:74:b4:5d:fb:0b:60:71:f3:e0:b8:33:
c7:0a:a1:07:25:86:54:b1:04:cf:cf:dc:21:d3:d0:c9:36:d7:
28:e9:78:bd:a5:38:b2:8e:3b:dd:8f:ed:21:d9:78:b8:1d:71:
b9:31:39:f7:de:71:03:97:e6:83:71:01:d6:64:f5:3b:ba:bd:
0f:06:d2:d7:fb:ce:95:c4:ee:b2:9c:af:0b:0f:a7:18:2d:61:
09:26:7e:65:7c:c8:ba:36:c9:7a:99:12:34:5d:7f:b2:41:75:
f9:39:5f:fd:03:31:4a:c7:93:f4:01:8d:d2:f2:6d:c0:31:bf:
80:de:9e:b1:c3:b0:84:b4:ce:ac:58:bc:58:bc:84:69:f5:31:
71:c9:d1:68:b9:fc:bb:40:e5:c4:63:37:26:f6:d1:9b:b8:63:
88:08:1a:e8:4d:1b:cb:ec:68:33:00:ef:32:59:08:e4:bc:d5:
4c:bc:59:b0:d5:71:79:e7:43:e1:13:b8:ac:24:ee:fe:6f:c2:
52:69:b6:e4:88:62:d1:0c:a1:29:9a:40:40:9d:06:5a:1c:1a:
6f:df:8c:db:52:02:e4:ee:d1:7e:25:58:df:e2:9d:19:c9:a4:
59:f3:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:31 2025 by rpki-client