Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ji5BRvxQUW1foLejSXn9Fmmqy24.roa
File: Ji5BRvxQUW1foLejSXn9Fmmqy24.roa (raw, json)
Hash identifier: DFgBn+cpT1uCldkc0ZG7rD6MsWGO0ZhcHJn/ing7Va8=
Subject key identifier: 26:2E:41:46:FC:50:51:6D:5F:A0:B7:A3:49:79:FD:16:69:AA:CB:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75E8EE9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ji5BRvxQUW1foLejSXn9Fmmqy24.roa
Signing time: Sat 26 Mar 2022 17:10:34 +0000
ROA not before: Sat 26 Mar 2022 17:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978199710 (0x75e8ee9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 17:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=262e4146fc50516d5fa0b7a34979fd1669aacb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:9c:ca:da:70:77:3f:30:0f:9a:a8:21:42:
a5:4e:50:4f:95:df:3f:40:9c:f3:d5:be:ba:d3:a0:
d8:04:b6:23:76:8f:7b:fd:37:ff:4b:33:e6:58:da:
14:94:9a:0c:99:b6:34:84:5f:40:bc:e0:60:ea:19:
72:b4:9a:95:2a:74:8d:a0:bc:c8:4a:67:e7:18:80:
ff:85:d4:02:8b:27:fc:61:22:82:25:61:3b:28:00:
71:71:72:01:34:c1:2e:c0:17:51:14:da:2f:29:92:
33:f2:db:ea:c9:a8:3b:65:71:1e:e2:a7:33:8b:f9:
91:98:9f:8e:49:d6:ca:b3:85:27:6d:9c:22:25:f9:
7b:16:e7:7d:e9:90:bb:61:d1:d3:8b:de:fe:f8:43:
3b:7d:2e:39:37:d7:09:04:ce:1b:cf:df:aa:02:9a:
83:02:d8:17:b6:af:b7:f2:00:fc:d5:83:f8:65:61:
8e:45:0f:a3:1a:9e:6b:09:00:88:b0:09:01:f4:45:
a3:56:90:a4:e8:02:d5:90:c6:c5:dc:67:46:af:07:
49:ff:bb:a9:f0:74:25:e9:07:6c:45:39:ae:fa:1b:
a2:73:a1:9a:8d:d6:ff:11:df:e6:ce:d7:9a:e7:65:
4b:cc:10:6d:fc:67:5f:d0:25:ab:71:3c:92:f2:1b:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:41:46:FC:50:51:6D:5F:A0:B7:A3:49:79:FD:16:69:AA:CB:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ji5BRvxQUW1foLejSXn9Fmmqy24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:99:cb:46:d7:2f:ac:8a:8d:60:36:96:2b:e3:2c:32:47:67:
a3:db:e1:fb:f6:92:f1:71:95:12:e4:21:8c:ad:32:08:aa:14:
15:e9:93:d7:0b:e1:a7:e1:ed:08:d2:8e:0d:a0:ff:0a:e0:63:
30:46:44:9c:ec:3d:2f:aa:d7:93:f2:67:40:f8:e6:d2:64:7e:
3d:46:a0:61:41:f5:b3:56:1a:05:cd:ec:27:b7:fd:da:9b:d7:
db:70:c8:56:4c:6b:69:b6:90:3b:54:96:92:4d:78:e7:bb:64:
0e:b3:60:03:40:bb:22:8b:3c:a2:96:04:16:e6:c4:64:68:23:
f6:f0:f6:74:e3:f1:3b:b1:b3:00:88:1f:80:9e:b2:bf:66:b1:
8a:d3:d8:ac:16:0b:86:0b:df:f1:5a:2f:50:a3:bf:dc:e2:1f:
95:5e:c5:56:f5:2a:55:60:05:f2:e6:9e:82:88:a1:62:91:71:
9e:1b:69:fc:07:0f:61:e8:68:91:b6:4d:14:be:a5:a4:e0:84:
40:be:43:65:b8:6a:fa:fe:03:68:e3:7d:08:6d:33:03:f0:0d:
ba:a4:f9:44:a3:b7:e1:54:b3:44:c4:39:b9:e4:47:27:50:f8:
80:1d:dc:fe:f1:82:a2:a1:d0:8c:ed:24:d4:f8:57:57:a7:0f:
05:a1:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:45 2025 by rpki-client