Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JIBzGdg_yV5XEB7JnwBvPvHbv6I.roa
File: JIBzGdg_yV5XEB7JnwBvPvHbv6I.roa (raw, json)
Hash identifier: Cy/CSi7TZQ7I4BOig6QgQKfkS50IuYvT4396pOPYCm0=
Subject key identifier: 24:80:73:19:D8:3F:C9:5E:57:10:1E:C9:9F:00:6F:3E:F1:DB:BF:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851AD6FD061AB63990D19506E1EC35245B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JIBzGdg_yV5XEB7JnwBvPvHbv6I.roa
Signing time: Fri 16 Dec 2022 12:09:35 +0000
ROA not before: Fri 16 Dec 2022 12:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:d6:fd:06:1a:b6:39:90:d1:95:06:e1:ec:35:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 12:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24807319d83fc95e57101ec99f006f3ef1dbbfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:4c:a0:de:f8:ff:e0:28:ed:09:1a:55:c7:
e7:de:28:05:ac:7d:dd:62:12:5e:06:c7:0b:f0:c7:
b2:f5:47:16:02:2d:8f:9b:7f:85:42:f3:48:b2:8d:
94:d4:98:44:9b:ad:96:67:6b:5c:1e:65:6d:aa:0a:
f6:7b:97:75:f4:11:85:c8:56:01:86:39:12:bf:96:
46:55:c9:c2:84:43:bc:2b:d6:4f:e4:41:32:47:ea:
95:81:07:f6:81:02:7c:f2:d8:ef:15:6b:f3:32:38:
4b:bd:6a:c1:49:b6:b2:00:63:f1:45:4a:bc:7b:29:
8b:22:95:09:bd:1c:a2:2c:2f:d0:78:4f:2f:c5:c6:
4d:7e:97:b2:9d:2f:59:81:db:ef:43:ca:06:9f:df:
bb:6c:f5:6b:30:9f:24:41:0d:91:f4:a0:2a:fc:1d:
4a:fe:50:1b:ef:2f:91:d1:0b:90:6d:78:7b:22:bb:
67:a4:34:32:00:a0:59:a7:e7:47:6b:0a:5a:07:66:
4e:ea:68:f5:86:6e:bc:18:e9:8b:bd:9b:eb:00:87:
bb:3a:a6:0f:5c:b4:b2:f0:47:ed:a8:03:a1:a1:d8:
e1:14:61:5f:3b:79:4e:b4:8d:ac:cc:df:ab:74:86:
85:3b:27:b9:74:63:07:1d:d3:53:99:b7:1d:a4:d5:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:73:19:D8:3F:C9:5E:57:10:1E:C9:9F:00:6F:3E:F1:DB:BF:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JIBzGdg_yV5XEB7JnwBvPvHbv6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:11:a0:c3:f5:2e:59:05:49:14:2f:5f:f0:88:14:43:6a:76:
73:f9:26:96:84:4d:5e:2e:ab:39:07:82:ab:ba:05:bc:e0:bf:
de:ec:11:48:f0:4a:65:c5:fc:75:9a:3c:57:e7:8d:77:68:e7:
ba:e5:12:44:eb:80:df:57:a3:ee:ea:f9:4e:1c:3f:75:fa:43:
d1:8f:a5:23:39:e6:d8:86:63:87:2a:d5:28:7f:0a:99:c2:d7:
5b:66:0a:0f:f0:c6:e2:85:ee:7f:ac:2b:31:1e:09:9b:37:5e:
13:dd:84:21:f4:f1:9a:0f:85:4c:c6:35:0d:f2:3e:29:ce:6a:
f6:9b:3e:8a:17:2e:1a:06:1b:ea:d6:0a:93:e4:6b:67:ff:da:
62:95:88:87:ce:da:6d:7b:0f:5d:bc:d1:4f:bd:f0:d6:08:57:
5e:a8:ed:cb:f0:1b:08:05:aa:90:72:b0:4d:87:47:21:2e:8f:
c6:33:b3:42:05:01:a6:44:ee:6b:eb:79:d9:25:e1:4d:4f:58:
59:16:a6:ab:45:97:91:0a:fe:2b:63:40:8d:34:28:86:af:dd:
2a:ee:ae:2c:d4:cd:36:14:aa:ea:be:3f:f0:4b:05:0d:b0:fc:
89:c2:3f:68:a9:ac:42:3a:d1:38:d2:2d:fb:62:34:29:74:95:
6e:ed:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:08:54 2025 by rpki-client