Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J6M1j-PRSx6WOz8Cb5nyN5i8twQ.roa
File: J6M1j-PRSx6WOz8Cb5nyN5i8twQ.roa (raw, json)
Hash identifier: ZXrMqFFAQtd7k/OruJJNjUhXK5oD5CPEl72AV1JUM2M=
Subject key identifier: 27:A3:35:8F:E3:D1:4B:1E:96:3B:3F:02:6F:99:F2:37:98:BC:B7:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B7BC936
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J6M1j-PRSx6WOz8Cb5nyN5i8twQ.roa
Signing time: Thu 17 Feb 2022 21:13:56 +0000
ROA not before: Thu 17 Feb 2022 21:13:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803274550 (0x6b7bc936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 21:13:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27a3358fe3d14b1e963b3f026f99f23798bcb704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:59:df:90:5f:9b:d4:79:5e:68:e5:bc:81:
b0:4b:d6:17:8e:ec:25:34:63:0e:ad:32:82:29:7b:
80:50:6f:02:52:6b:9d:71:4c:cb:46:71:02:bd:a3:
3b:7f:ad:d5:38:7c:c9:28:0b:e9:03:cf:37:9a:77:
42:01:db:4a:81:5c:81:f4:9c:47:b0:a7:64:c3:ca:
65:74:b6:f6:89:6e:36:5c:d7:9c:1b:c3:c1:c0:f6:
0b:0f:dd:64:28:dd:a1:eb:e5:d2:44:6a:8c:e3:bf:
c8:1a:cb:df:2b:6d:10:47:af:67:7f:c0:94:f1:2e:
55:65:13:44:2b:96:d4:9e:7a:f1:a9:4c:1b:cf:59:
83:ca:d9:0e:86:3c:a4:56:c7:53:ba:15:8d:76:67:
86:b8:d8:dd:44:e1:04:7a:92:c3:8a:03:ab:39:32:
62:a0:f9:12:85:8b:36:85:8c:1c:4f:75:7a:66:3a:
15:12:ab:a0:ab:f1:f4:71:aa:bb:0e:af:e0:ff:f9:
7d:f8:b0:e5:a9:e0:2c:03:a4:3f:3b:dd:ee:33:d2:
a0:e7:32:5a:8e:8b:bd:2e:98:f6:1e:e6:af:e5:9d:
44:fa:45:ae:e8:3c:23:29:37:df:78:37:77:03:5e:
25:86:78:f5:b7:83:85:12:6e:49:02:72:78:10:6d:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:35:8F:E3:D1:4B:1E:96:3B:3F:02:6F:99:F2:37:98:BC:B7:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J6M1j-PRSx6WOz8Cb5nyN5i8twQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:d3:a4:5d:7d:d9:eb:b6:5a:63:4b:93:24:1a:f0:2e:29:d3:
a0:38:49:c8:89:1f:3e:06:23:d6:0a:ab:e8:12:56:2f:8d:2a:
0e:d3:51:83:1b:df:ce:ab:d8:31:de:c5:97:29:39:14:2c:d5:
60:f3:31:45:02:b4:9e:e2:1c:82:1b:6c:8e:ee:8c:86:bf:e0:
18:9a:67:bc:65:2f:5a:85:cf:21:d7:ca:86:ed:15:c2:e1:96:
e6:40:b2:0d:0b:bd:6e:00:4c:e7:a6:9d:ea:63:ef:fd:b6:ef:
4c:d4:7d:f2:82:17:e0:fe:17:40:3a:bd:c8:a5:73:c2:78:e8:
93:5d:a3:06:e0:b9:c7:db:5c:8c:e0:56:54:0f:dc:c9:f4:42:
30:dc:19:dd:f4:d3:72:56:20:45:94:ce:aa:4b:59:91:76:6e:
40:3b:76:26:27:d7:b4:0a:46:59:ae:fc:00:8e:eb:07:3f:66:
bd:35:af:0a:e1:4a:43:13:02:3b:0b:ff:9f:cb:38:45:b9:eb:
a2:94:a8:da:ae:af:c7:e3:ba:be:6c:2c:ef:5f:3f:df:93:a9:
7c:af:39:e1:49:27:0c:68:61:76:13:17:c9:77:ae:b1:9b:5d:
78:f3:ca:df:02:8f:7f:a5:cf:45:cb:bf:14:2e:3b:d3:43:d2:
b1:66:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:32 2025 by rpki-client