Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcozjGdD7XzQHVgQIeimN6GG2mQ.roa
File: JcozjGdD7XzQHVgQIeimN6GG2mQ.roa (raw, json)
Hash identifier: CCplXJuzxiwTtBs2Tx6qHt2vthDgv1FsNDBOgxlcHr4=
Subject key identifier: 25:CA:33:8C:67:43:ED:7C:D0:1D:58:10:21:E8:A6:37:A1:86:DA:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AD6C0FB879B164007F292D7FBF3D222D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcozjGdD7XzQHVgQIeimN6GG2mQ.roa
Signing time: Fri 25 Nov 2022 06:14:11 +0000
ROA not before: Fri 25 Nov 2022 06:14:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:6c:0f:b8:79:b1:64:00:7f:29:2d:7f:bf:3d:22:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 06:14:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25ca338c6743ed7cd01d581021e8a637a186da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:ae:46:72:b2:08:aa:9d:5c:0e:6a:2e:f9:
04:0f:4a:9a:93:c9:8b:89:da:ff:b4:8d:4c:52:a1:
b4:36:11:42:0d:6b:c2:4a:43:95:4c:5a:e6:3c:c3:
89:94:12:52:9b:4e:e9:63:5d:52:2d:df:0e:14:8d:
c3:67:82:48:84:b2:d6:eb:c1:44:7c:2c:29:c0:9b:
48:1b:b2:4c:60:44:87:e4:0f:91:0f:e9:b8:83:c2:
97:f0:e9:66:54:8c:25:57:a4:db:c0:e6:1d:a3:d0:
59:80:57:2b:e3:db:d0:12:df:ea:53:19:41:ae:04:
ad:8d:f6:b0:3e:05:9f:6b:b9:07:b4:ca:6a:c6:9c:
c8:fb:17:5c:4a:30:1b:af:96:07:6c:7d:00:a7:f1:
84:e4:d8:da:5d:02:22:9e:3d:16:d0:5f:a7:da:ab:
1e:d7:79:5d:48:45:34:86:db:26:86:fd:04:81:6c:
c5:97:59:2a:dc:d9:15:80:37:de:dd:da:ca:41:3a:
cf:b4:18:fb:91:f6:53:4d:a2:69:ff:7d:6e:77:43:
b8:6a:41:d2:af:46:df:5c:d3:55:1e:27:40:35:86:
00:74:33:b3:20:48:ea:48:0e:1b:68:14:db:9d:25:
13:04:c9:db:df:fa:89:2e:4f:f3:15:d5:fb:66:8f:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:33:8C:67:43:ED:7C:D0:1D:58:10:21:E8:A6:37:A1:86:DA:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcozjGdD7XzQHVgQIeimN6GG2mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:f3:ad:6c:40:51:5a:a4:2f:f9:c8:1d:95:d1:05:27:41:be:
63:2f:c7:07:1b:b4:f5:61:ff:a9:5e:75:18:8f:fc:04:ca:ab:
fd:18:b9:e3:1c:8f:cf:47:6c:4f:da:67:6c:27:62:b4:d4:84:
c9:4e:fd:69:e8:c5:14:7e:b5:7c:74:fc:c7:9a:a0:b3:d8:8a:
eb:e8:95:58:16:a1:e1:a4:09:80:37:95:e6:80:f1:f8:ae:f5:
e4:53:bf:3d:ed:df:59:fe:ee:3c:6e:48:a8:79:4a:55:bb:f8:
6a:25:a4:21:f5:ae:7a:6a:cf:a0:9d:fb:99:a4:f7:37:36:6d:
2f:55:e5:88:ae:ed:6c:ae:f7:eb:70:3f:bc:b9:ce:d3:b1:62:
f5:3b:75:a7:3a:07:9d:43:19:a8:51:42:c2:30:10:4c:cb:63:
9c:c5:43:7d:02:6f:09:58:87:61:1f:0a:0a:8e:82:d7:e8:71:
6f:7d:47:54:48:e4:a5:23:94:38:ca:c7:7a:69:a0:20:57:c9:
25:b5:7e:9f:63:07:44:4f:a1:ba:35:3a:94:45:77:16:34:5b:
80:83:6e:5f:d6:55:89:e3:d8:d3:4a:00:41:cc:81:4c:cf:42:
7f:79:79:ec:7f:a7:60:f5:57:f5:77:5c:e6:a1:cf:a7:cc:c4:
2f:c4:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:17:46 2025 by rpki-client