Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOAs-yfPCfzSnAkF46J4wFnJNI0.roa
File: JOAs-yfPCfzSnAkF46J4wFnJNI0.roa (raw, json)
Hash identifier: G+sBKXQ1nx4aprnunaAzfuOT2p/JYjbAABLJtIS40O4=
Subject key identifier: 24:E0:2C:FB:27:CF:09:FC:D2:9C:09:05:E3:A2:78:C0:59:C9:34:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A090D295DEB6030D18A65D85FF7690B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOAs-yfPCfzSnAkF46J4wFnJNI0.roa
Signing time: Mon 15 Aug 2022 08:13:41 +0000
ROA not before: Mon 15 Aug 2022 08:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:90:d2:95:de:b6:03:0d:18:a6:5d:85:ff:76:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 08:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e02cfb27cf09fcd29c0905e3a278c059c9348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:24:26:eb:ed:5b:9f:a9:a4:02:96:a2:02:
36:72:71:de:5f:97:72:03:cf:6f:8f:4d:21:40:f1:
a1:73:c7:a1:b6:87:44:98:71:78:0e:2f:e4:b7:66:
06:02:25:a8:13:81:1f:ea:96:db:0d:84:c2:a4:de:
c4:9d:98:e0:4f:47:5a:94:9b:44:6f:ea:42:50:2f:
a4:e8:b8:f5:f5:81:62:0f:e6:5e:98:38:7d:c7:5d:
b4:75:e1:0f:c8:40:19:18:cf:53:17:4e:a0:dc:9c:
36:f0:0a:af:a7:89:de:a2:cc:79:11:fe:aa:d3:f7:
43:e5:7c:74:ee:7a:29:87:2f:0e:c1:46:f7:55:b7:
04:dd:a3:54:f9:74:5e:21:38:1b:2f:d5:aa:4f:01:
d6:79:de:df:47:4d:3f:e9:02:c6:da:9b:1a:3c:16:
b4:1b:e2:43:db:40:d1:11:c7:85:92:85:a1:72:62:
90:ed:7b:9a:92:cf:bb:16:e8:3d:20:39:06:39:62:
17:4d:b5:94:8c:56:6c:95:6b:f8:ae:f8:cd:fb:b5:
86:98:60:ee:d0:ad:94:eb:a3:67:ae:65:9c:00:95:
6a:d4:46:30:8c:f3:2b:82:43:5b:65:74:1c:b3:3d:
eb:20:4c:82:fe:72:ac:96:d0:30:68:d5:94:66:1c:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:2C:FB:27:CF:09:FC:D2:9C:09:05:E3:A2:78:C0:59:C9:34:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOAs-yfPCfzSnAkF46J4wFnJNI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:a0:b9:05:61:00:27:f6:49:c4:15:a0:be:12:c5:2e:0b:22:
ad:f9:98:11:47:bd:bc:4d:4e:ea:83:f2:bf:32:0d:7a:b4:40:
ce:9c:81:c0:e4:d5:be:9d:3f:af:05:66:8f:26:6b:2a:d5:5d:
ec:dd:27:d8:e1:3d:04:3e:b6:8e:7e:6b:ac:f5:4d:f3:09:9d:
4d:05:58:b1:7c:80:e3:5c:a5:97:70:cd:90:44:cf:70:53:ec:
96:77:e8:c9:d4:17:2c:3f:05:c7:a7:e9:8b:11:e8:f5:a7:b2:
6c:d9:75:a4:09:03:52:81:90:89:4c:37:1c:48:4f:71:fb:b0:
49:e4:32:b3:41:db:cd:89:ff:74:d3:ff:29:fe:60:ec:59:0c:
fd:76:c3:ee:98:20:ca:37:e7:79:5f:17:66:64:4c:24:45:9c:
b5:c4:bd:45:1a:9a:44:7e:2b:5f:c9:b8:40:cd:04:e7:fe:55:
76:7f:55:db:5a:ba:d2:82:61:4b:49:6b:30:fd:65:dc:77:e6:
7e:9f:9e:bc:71:34:7c:6a:f9:9f:06:6d:ef:f0:84:1d:a5:2d:
74:f2:dd:81:7c:4e:82:5c:34:3d:c9:1b:d0:51:0e:6a:3f:ce:
5c:95:c6:c9:d3:83:48:10:2f:28:18:cc:fe:6c:f8:c9:0d:b3:
07:9e:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:38 2025 by rpki-client