Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_UssA3YHOr6pPGAJ1WQZvaLQ9E.roa
File: J_UssA3YHOr6pPGAJ1WQZvaLQ9E.roa (raw, json)
Hash identifier: my3T2iU30X0Jz7DQ6zwsCnYSKoNeRYlhYyA1FRE0DM4=
Subject key identifier: 27:F5:2C:B0:0D:D8:1C:EA:FA:A4:F1:80:27:55:90:66:F6:8B:43:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847A1B0DDD040FACF5E9AF181FED90F3A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_UssA3YHOr6pPGAJ1WQZvaLQ9E.roa
Signing time: Tue 15 Nov 2022 07:05:04 +0000
ROA not before: Tue 15 Nov 2022 07:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:7a1a:f847/128 maxlen: 128
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:1b:0d:dd:04:0f:ac:f5:e9:af:18:1f:ed:90:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 07:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27f52cb00dd81ceafaa4f18027559066f68b43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:24:32:28:6b:78:38:55:0b:e1:95:8f:3a:
75:9b:01:4d:e4:4b:b7:f3:e9:40:8c:55:2f:de:f4:
2d:de:3b:bd:23:48:51:b6:b9:62:0b:53:29:90:00:
74:b7:8e:50:03:f1:53:25:44:7e:01:d6:3a:82:1b:
27:04:31:92:2e:b8:72:d2:4c:70:3e:73:bf:f2:86:
30:6f:00:cc:d0:08:43:f6:01:f9:fe:49:a4:dc:d5:
e5:9b:cc:cc:7c:28:7b:8e:58:03:93:df:38:d2:e0:
8f:86:66:d3:4e:92:93:9f:7d:46:fc:6a:b2:24:5a:
87:d2:1b:5a:93:8a:90:81:0d:91:75:ea:74:5e:89:
a4:4a:39:1b:d3:84:75:07:0e:1a:e0:9f:fc:e5:76:
8a:10:4c:51:aa:5f:a4:b9:f8:39:5e:4c:50:a2:d1:
de:ab:e2:37:a4:0d:d7:98:36:47:61:d1:ba:9d:2e:
b3:f3:a1:d0:1f:12:40:5c:cd:58:20:79:1d:a6:f3:
29:c5:37:fd:40:5f:cf:33:20:ae:66:4e:54:72:f1:
38:d8:14:37:6c:4d:ee:0b:97:49:1e:9f:a3:91:f4:
f6:ad:a7:cd:f9:4b:6b:6c:61:7d:9f:66:d0:ba:0e:
83:9a:a8:7a:6f:33:62:9e:d2:22:af:f9:52:04:e4:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F5:2C:B0:0D:D8:1C:EA:FA:A4:F1:80:27:55:90:66:F6:8B:43:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_UssA3YHOr6pPGAJ1WQZvaLQ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:d2:68:84:69:6e:13:4b:62:b0:a5:79:0f:a8:93:14:92:52:
a9:19:75:66:f7:78:3e:af:44:83:92:6c:83:fd:c2:01:52:44:
52:0f:51:16:19:4a:be:85:a3:2f:88:6a:04:ea:69:e4:85:4f:
e7:7c:e8:6f:91:7d:c2:23:21:52:c3:25:be:9b:1b:c3:b8:5e:
99:15:e2:92:cb:b7:e1:11:ad:86:13:71:e1:ad:66:77:31:9e:
e2:c6:ef:0a:14:a7:7f:4e:d2:81:d4:85:56:5f:76:d6:73:ef:
a6:95:6d:d9:4c:1e:a8:bc:36:a8:a7:c0:65:d3:5e:bf:3b:e3:
47:54:17:b2:4f:2f:2a:68:8b:95:f9:be:e3:03:3c:16:62:44:
97:de:78:fa:22:e6:20:f7:66:2d:3a:0c:69:f0:28:d4:8d:e6:
df:1f:e6:78:e7:38:bc:d8:c7:f1:e5:89:58:fd:5f:2a:5f:6b:
5d:b4:78:1a:15:d0:08:79:c1:c8:dd:c6:91:15:32:a7:86:0b:
1a:7e:43:f6:1e:90:8c:70:c8:38:0c:99:86:38:17:f6:ca:9a:
1f:d8:20:f6:3c:a7:f1:8a:47:00:be:5e:51:a3:84:db:43:ae:
0d:c8:c9:f5:7b:ec:ed:d2:ee:b4:3f:34:1e:5b:ca:de:8f:84:
53:3f:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:23 2025 by rpki-client