Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8ELQ0PQQDGTTjVpJZLXjtco1c0.roa
File: J8ELQ0PQQDGTTjVpJZLXjtco1c0.roa (raw, json)
Hash identifier: tbPBkByMQw4MoLcLc05iTxYzH5p6Er61YzjmplA6CdQ=
Subject key identifier: 27:C1:0B:43:43:D0:40:31:93:4E:35:69:25:92:D7:8E:D7:28:D5:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68A628DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8ELQ0PQQDGTTjVpJZLXjtco1c0.roa
Signing time: Mon 07 Feb 2022 08:04:19 +0000
ROA not before: Mon 07 Feb 2022 08:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d336:506b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755719901 (0x68a628dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 08:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c10b4343d04031934e35692592d78ed728d5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:b6:26:7a:ac:21:e6:4e:3d:e1:eb:a6:04:
c1:98:ea:eb:3b:14:c0:f4:40:ef:87:18:f2:2a:d6:
0e:a7:a0:7c:14:e5:73:a3:90:8e:20:97:50:d4:77:
ac:ca:e5:f2:ca:b2:d7:89:eb:3e:9c:bf:04:20:cc:
0d:ba:30:82:7d:74:d9:b7:4d:20:f6:f5:95:54:d4:
e3:fc:f6:49:f8:4d:cd:47:3b:07:08:ad:ce:ae:a2:
a3:97:e0:31:74:b8:dc:03:68:f8:2d:d4:48:69:d8:
c2:11:90:a9:fd:1c:d7:54:fe:8f:20:78:7c:22:00:
70:62:ec:a2:0b:8e:35:fa:80:64:d7:cb:39:29:b3:
bb:82:11:58:4f:92:f0:c5:ad:6e:a3:8b:29:03:72:
b4:d6:21:3d:08:9d:13:b7:bc:93:6b:a3:ee:36:fb:
54:32:0b:94:75:09:26:29:07:7e:a2:9e:6e:ac:3c:
22:f3:0c:ca:5f:cb:41:d4:01:53:52:1e:c1:ac:32:
32:52:87:19:e8:86:d9:76:3b:ee:b9:7d:a3:bc:5a:
4c:1e:06:f6:2a:85:96:62:50:29:5a:00:43:27:d0:
5c:4a:88:f0:d0:df:4d:2c:8a:c0:cb:bd:35:09:f3:
af:72:1d:d1:d3:12:04:c8:5b:80:56:b8:52:3b:03:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:0B:43:43:D0:40:31:93:4E:35:69:25:92:D7:8E:D7:28:D5:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8ELQ0PQQDGTTjVpJZLXjtco1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:b2:4f:53:a8:47:be:71:61:1b:f9:77:05:5a:9f:17:16:9c:
fa:cc:01:69:71:65:83:e3:41:4e:90:92:19:8a:ec:80:d2:ea:
57:94:ae:17:cd:4c:4c:13:73:a9:15:53:a2:ea:15:c6:6f:1a:
01:2e:58:b7:fa:86:97:bc:a4:78:24:b9:45:2a:e9:cc:e2:8f:
2f:dc:52:cd:60:84:b5:d2:fa:75:75:55:51:c6:89:6c:89:08:
38:90:f3:75:b9:41:b7:a6:5b:5f:79:a7:a2:89:16:96:b8:30:
93:67:be:db:72:c4:a1:8d:58:1f:5e:9c:6e:de:8e:a9:90:14:
2e:3d:a3:52:10:0c:8a:b4:b8:a5:fe:52:91:50:b9:53:49:3f:
ef:07:33:cd:6e:56:06:9e:f9:5e:75:89:52:1a:b7:73:1d:16:
66:d1:55:f5:0a:ac:57:94:29:a2:47:6b:f1:2f:19:95:4d:f3:
ea:1a:5b:b8:25:59:e3:aa:c0:ab:89:ac:df:d3:e6:fb:64:67:
c9:39:47:0d:fa:65:d9:99:9e:47:b8:0a:de:da:cd:52:e2:6a:
14:6d:78:89:5a:ad:96:87:f7:e5:b5:d0:e3:14:02:5e:5e:34:
97:1a:57:56:fd:e4:9d:b7:34:0c:36:50:1a:d8:07:02:33:54:
6e:a5:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:21 2025 by rpki-client