Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTdnykK0QOw-coaymquyHWTddCk.roa
File: JTdnykK0QOw-coaymquyHWTddCk.roa (raw, json)
Hash identifier: 8tf04UW82Ik/W4+4CIkSwNh+3dCD+An4lUhR7EKJyTs=
Subject key identifier: 25:37:67:CA:42:B4:40:EC:3E:72:86:B2:9A:AB:B2:1D:64:DD:74:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69E8CE4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTdnykK0QOw-coaymquyHWTddCk.roa
Signing time: Sat 12 Feb 2022 06:07:51 +0000
ROA not before: Sat 12 Feb 2022 06:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776864844 (0x69e8ce4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 06:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=253767ca42b440ec3e7286b29aabb21d64dd7429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:f5:d9:70:5e:3a:4b:61:c6:74:58:09:1f:
00:79:4a:10:73:b8:53:58:33:50:d0:30:7e:47:35:
88:90:7c:37:f4:0e:28:94:34:09:37:6d:30:42:43:
bc:bc:28:1e:26:0c:6a:4a:33:87:ed:fb:a9:ae:ae:
ee:55:d1:9d:87:31:18:50:c1:89:c5:fe:fc:ed:2e:
c4:b2:89:37:36:57:b8:ab:d7:ac:d5:8f:11:1d:cb:
d8:67:dc:1e:b3:69:d2:bc:2f:43:b5:64:dc:c8:8d:
8d:dd:87:27:1e:d7:d8:7c:0a:ac:93:6a:75:ef:bf:
b7:34:03:47:07:5c:37:7c:28:51:3e:a5:96:63:dd:
a7:fd:0b:82:1c:b3:67:ac:bd:aa:75:e0:fd:77:a5:
b4:65:ff:8e:11:bc:7e:1a:20:10:8c:ed:96:69:50:
3f:c2:9a:bb:ae:c5:b5:95:f7:6d:e8:93:08:7e:95:
81:58:83:08:82:b8:a5:f5:21:49:df:87:f9:94:26:
00:64:06:30:d4:d0:aa:d2:91:22:ef:a6:99:59:8f:
54:01:e2:f0:0f:b6:a6:75:61:9b:57:77:7c:8c:02:
a9:b9:7e:99:6f:a6:c9:20:f7:0e:9d:64:72:1d:71:
fc:af:1d:09:00:e9:ef:99:f8:ee:0b:e3:d3:03:ce:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:67:CA:42:B4:40:EC:3E:72:86:B2:9A:AB:B2:1D:64:DD:74:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTdnykK0QOw-coaymquyHWTddCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:02:85:42:3a:94:4d:92:9a:67:6e:a5:9a:7f:ed:15:fd:3c:
4e:bb:dd:fb:b2:08:44:98:52:a2:8e:86:51:e8:53:55:b8:89:
95:95:c5:30:3f:79:90:9a:e2:be:64:2f:50:c3:fb:81:8c:91:
a5:c1:b7:e7:ff:26:e8:f5:e4:d3:c9:9f:bb:db:52:57:99:84:
1c:e3:e2:06:fe:32:e2:22:26:da:9b:7d:53:fe:dd:bb:3b:f6:
c6:2b:af:8e:dd:00:be:0e:bd:59:c6:74:2b:df:27:32:96:04:
25:2d:f4:31:23:dc:e8:00:5c:bb:3d:15:03:18:4f:47:e2:d0:
be:0d:34:3d:5e:13:26:cc:31:36:24:06:83:2d:34:2e:11:1c:
d6:a5:66:b0:30:93:50:ab:32:8e:f3:3c:02:b5:c1:5b:d8:19:
9c:e7:6a:fd:7e:a6:9d:92:a2:84:7f:ff:dd:ee:a9:94:b8:5d:
8b:4a:b9:24:58:ce:32:83:f8:9d:84:19:8e:3a:1b:df:4b:5a:
3a:91:9d:1c:c0:e8:88:00:ca:48:1e:3e:e2:9f:f2:0a:d8:4b:
e3:a9:04:7a:fb:19:8a:0b:2c:c8:e4:8d:d3:02:2a:87:a4:8d:
20:53:ca:e1:8f:cb:0c:e7:2f:b2:45:37:c6:83:71:13:8f:fa:
ba:58:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:49:22 2025 by rpki-client