Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm1Ow8LsW4zGbhCuLYsum3oL1C8.roa
File: Jm1Ow8LsW4zGbhCuLYsum3oL1C8.roa (raw, json)
Hash identifier: cMDUDQvQJfsLDqfcT67dO/DWwynaBrmkgx3nSbrwClQ=
Subject key identifier: 26:6D:4E:C3:C2:EC:5B:8C:C6:6E:10:AE:2D:8B:2E:9B:7A:0B:D4:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AADBD5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm1Ow8LsW4zGbhCuLYsum3oL1C8.roa
Signing time: Tue 12 Apr 2022 12:11:35 +0000
ROA not before: Tue 12 Apr 2022 12:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058206555 (0x7aadbd5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 12:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=266d4ec3c2ec5b8cc66e10ae2d8b2e9b7a0bd42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:b9:b6:2e:49:50:48:e3:c8:85:a9:fc:eb:
7f:5d:5e:13:27:ba:db:9a:e6:0d:25:aa:ba:e8:81:
a4:85:57:1c:d6:09:45:45:ac:47:2a:81:07:2f:be:
26:48:4c:b2:bc:5e:98:c2:ba:da:59:61:3f:be:77:
f8:00:3b:72:90:8e:8a:4b:83:49:75:ec:73:3b:15:
3d:7c:fe:cc:a1:0e:00:e8:96:31:f9:4b:8c:c5:eb:
f6:5b:3a:5e:ed:16:de:f5:ad:ae:90:60:61:5f:d8:
1f:d6:79:b4:24:85:6e:6f:1d:08:6e:33:bf:b2:1b:
f1:40:26:2c:f8:7c:2f:a9:9b:45:02:6d:ab:b5:40:
a6:17:25:a4:87:fe:d6:0d:df:51:ca:ca:ef:ef:99:
51:f7:c3:18:7b:f3:37:d1:e7:80:c1:c1:98:3a:13:
b2:89:32:c7:10:d3:a6:6f:13:66:c6:cd:b2:99:a3:
3b:50:92:16:77:b7:f7:22:4e:9a:d8:3a:bc:ab:31:
b0:e7:fd:9b:c2:a2:39:f8:93:35:5e:9b:8a:be:cb:
39:c4:1d:31:d3:00:19:ed:57:40:3c:9e:42:f6:05:
70:cb:28:05:ae:bf:4e:7a:9f:29:9c:ea:05:f6:59:
16:37:b8:b6:70:02:dd:0f:d1:78:dc:06:e1:3d:54:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:4E:C3:C2:EC:5B:8C:C6:6E:10:AE:2D:8B:2E:9B:7A:0B:D4:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm1Ow8LsW4zGbhCuLYsum3oL1C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:39:e1:d7:1d:7a:39:78:32:fc:5e:b8:8b:71:9a:48:5d:dc:
d2:84:6d:35:ec:c6:a4:a9:10:83:31:34:6e:bb:e3:e7:7c:22:
2c:9a:40:69:2f:f9:fa:6c:bd:04:dc:7a:ca:51:ad:e0:cd:37:
37:9f:e9:11:6b:fc:3c:7b:f2:62:80:c5:06:2e:a5:0b:d1:11:
c3:f4:6f:f0:02:55:d2:83:12:cb:6f:c0:75:4d:05:9a:01:60:
15:9d:48:38:d1:82:e1:b5:95:f7:59:a4:5c:05:8e:cc:00:d8:
4f:66:f8:50:64:89:dc:bc:bb:bc:85:a7:a9:29:5b:a3:8e:12:
22:8f:9e:b9:4d:35:2c:92:91:e0:41:75:b1:ef:4d:3b:86:5a:
ff:c9:7a:9c:95:63:fd:65:b8:0b:b9:9e:e6:93:72:33:f6:57:
11:ea:a4:6f:91:cb:5a:b1:86:59:e1:f5:b6:bd:6b:f3:02:15:
ba:f3:35:30:12:f4:c7:42:b8:46:c7:20:ad:cb:04:3d:a9:c8:
84:fd:bf:37:e9:23:fb:9d:e0:d4:e8:db:01:c8:f8:9a:d0:42:
a8:7f:83:4a:e9:86:1a:11:9b:6c:7a:27:a7:c7:16:58:a6:34:
93:2f:00:96:dc:c1:66:be:ba:02:9e:b8:0c:c0:32:0d:34:22:
3f:63:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:27 2025 by rpki-client