Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKS_0kodd9fpqxXT0V14rF6Or28.roa
File: JKS_0kodd9fpqxXT0V14rF6Or28.roa (raw, json)
Hash identifier: 731cow60dfN0UPFiplBiyvW/wuINsPBmubKPdctT1HM=
Subject key identifier: 24:A4:BF:D2:4A:1D:77:D7:E9:AB:15:D3:D1:5D:78:AC:5E:8E:AF:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A813CD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKS_0kodd9fpqxXT0V14rF6Or28.roa
Signing time: Mon 14 Feb 2022 09:09:31 +0000
ROA not before: Mon 14 Feb 2022 09:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786854616 (0x6a813cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 09:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24a4bfd24a1d77d7e9ab15d3d15d78ac5e8eaf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:6c:59:4f:59:eb:31:fd:71:a1:4d:35:ac:
e6:1e:6b:93:49:10:31:b1:bd:bb:c1:fc:5c:ba:df:
3a:36:c7:26:09:16:09:2b:76:d0:11:1f:f3:bc:30:
07:e5:7f:e1:ba:39:be:f8:72:c5:69:f0:d7:0f:9a:
2f:87:68:f1:02:54:14:8e:62:98:50:3f:f7:b4:3f:
f3:c3:5f:db:90:2b:94:0d:ed:c6:77:bf:28:16:0c:
40:12:fa:38:c6:27:9c:d9:35:a8:25:15:30:05:e8:
b4:d3:be:fa:50:8a:c6:b1:90:e3:43:96:27:83:02:
56:d6:74:db:6d:15:c4:a1:9a:8d:e4:0b:a1:8f:36:
f4:e6:0f:84:83:81:98:9a:ef:a1:c8:ca:79:b3:b6:
e3:38:ea:1e:6c:05:6e:42:72:7b:e0:84:4a:b0:3d:
29:a1:c3:88:35:a3:7b:08:4d:ed:96:0b:57:56:2d:
52:52:fc:b4:67:0e:1b:a4:30:8b:ae:b7:8c:44:e2:
cf:64:ec:e4:40:e9:16:f4:54:81:23:22:04:17:dd:
60:54:d8:86:96:e9:79:35:70:a4:7a:69:c9:5a:46:
ea:a4:8d:f3:bc:69:50:34:77:a5:21:89:39:cb:1d:
d8:7d:1a:9e:e6:ce:4a:c5:0a:43:81:64:fa:d7:57:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:BF:D2:4A:1D:77:D7:E9:AB:15:D3:D1:5D:78:AC:5E:8E:AF:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKS_0kodd9fpqxXT0V14rF6Or28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:e1:ce:eb:d0:e5:e3:94:4a:5d:1d:07:53:f9:aa:9d:a9:15:
d8:79:d0:ae:8e:4d:cd:3d:c0:7e:36:be:af:f8:a5:95:66:e2:
6b:b1:0a:7f:2e:a6:94:7c:2b:b7:cd:29:5e:2e:09:dc:19:55:
03:56:0f:62:9e:a2:c0:7e:2e:bb:ff:59:1c:a6:1e:eb:ec:6d:
c8:5c:e9:0e:33:fc:dd:51:e2:4e:85:6c:0c:c3:03:d8:5f:58:
35:13:80:02:28:9d:3e:89:00:f4:ea:01:b7:f2:26:43:46:f4:
d2:aa:b4:43:64:78:00:dc:b5:ab:61:0e:59:37:27:f2:28:4f:
c1:e1:3c:72:be:87:20:51:27:61:46:37:37:03:2f:7a:53:94:
7e:6e:50:41:8e:a1:f9:1e:8c:7f:27:bb:d8:b4:a2:ab:5a:d2:
3d:39:d7:7c:f3:3c:27:c1:79:45:73:65:e6:9b:e8:a7:44:2a:
be:82:7c:8a:c4:a2:48:42:f0:63:c6:10:e5:81:7f:10:57:a7:
65:75:8d:b9:6d:7c:d4:fe:52:04:52:04:42:23:46:64:13:3a:
14:90:48:2b:06:be:54:0a:f8:6f:6a:32:f2:8f:7e:8f:6c:fe:
12:32:29:b8:c8:e3:ad:c2:0e:8c:da:d3:2a:cd:f7:65:3c:3b:
ce:aa:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:25 2025 by rpki-client