Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jo0Knjov5ogwGl4mKbYCkc13zTY.roa
File: Jo0Knjov5ogwGl4mKbYCkc13zTY.roa (raw, json)
Hash identifier: hKCfcvFzZGqPfXalBcOL0mDN0crWTEihv69nLYQKLnI=
Subject key identifier: 26:8D:0A:9E:3A:2F:E6:88:30:1A:5E:26:29:B6:02:91:CD:77:CD:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F6C4DF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jo0Knjov5ogwGl4mKbYCkc13zTY.roa
Signing time: Fri 24 Jun 2022 10:15:02 +0000
ROA not before: Fri 24 Jun 2022 10:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406239730 (0x8f6c4df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 24 10:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268d0a9e3a2fe688301a5e2629b60291cd77cd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:5d:fe:cd:66:25:2f:dd:72:59:30:94:25:
0a:93:f9:db:b6:6f:59:14:68:ba:56:5c:2c:d6:3a:
ec:d5:3d:99:13:7d:1f:88:b1:62:45:b1:09:da:6d:
f8:6b:80:53:54:21:cc:8e:2a:6d:c9:cc:94:2b:7c:
16:33:0b:d1:44:84:6a:c9:1f:48:ec:5b:e1:a1:ef:
a5:2a:be:81:b7:7e:31:64:cd:ff:33:04:6c:2c:58:
c6:c9:5d:47:e2:c7:62:08:35:0e:10:97:53:6e:f4:
4b:45:c3:94:a2:c1:35:46:80:b0:24:5b:80:fa:61:
7b:5f:1b:35:27:92:3b:73:92:00:42:35:02:b6:22:
40:2b:54:8a:c1:3c:5c:6f:4a:ce:65:a7:1d:1b:47:
2c:c7:96:8a:b0:cd:f5:fa:57:49:15:e2:22:b9:3c:
7e:89:4d:c9:c4:b8:d1:d9:4d:6d:a7:f6:aa:3d:f5:
60:d0:99:ac:f6:53:79:83:42:0e:22:1d:a2:bb:0b:
62:96:25:72:1a:0e:89:83:59:c3:90:a9:f4:49:15:
2f:b9:e2:14:64:fc:22:4b:18:a9:df:f2:c1:50:bc:
a4:ae:a4:5a:46:ea:16:99:21:eb:26:77:82:f4:93:
ba:34:e3:96:f8:74:61:60:c4:1c:67:a4:b3:7d:d3:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:0A:9E:3A:2F:E6:88:30:1A:5E:26:29:B6:02:91:CD:77:CD:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jo0Knjov5ogwGl4mKbYCkc13zTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:51:f4:a7:75:10:13:a1:e7:b3:e7:ec:91:2e:ee:bc:7c:53:
63:48:a0:ed:a7:63:bf:b2:2a:ab:30:10:df:3f:13:68:04:da:
54:55:ef:71:f3:73:46:bc:0a:96:53:ef:33:05:f8:9f:b6:c2:
b5:ad:17:a2:a5:b1:c5:87:46:f5:54:c6:35:a4:1d:09:a4:3f:
e0:62:12:f4:37:f7:7d:da:76:84:10:12:fa:da:58:95:47:41:
a1:2a:bd:c8:4a:9e:38:89:d5:dc:19:70:bd:ad:3f:65:c5:1e:
1b:10:06:ae:81:57:af:d0:4b:00:fe:77:1f:1f:ac:00:8f:1c:
5a:06:4d:5f:94:8a:32:b3:76:62:7e:b2:b4:0a:eb:7e:cd:53:
cb:48:ac:4a:51:cd:9d:f1:5e:a8:17:23:29:9c:65:fd:9d:2e:
46:b5:25:66:44:7b:13:4d:4e:1e:b9:61:95:f6:a8:b6:68:19:
a3:4f:39:99:c1:c6:89:20:55:32:be:5a:15:a1:76:f8:98:1b:
b6:71:17:9d:15:d3:2b:9c:bc:ca:9e:4b:0c:80:69:34:ad:d4:
fc:71:8c:39:c6:99:56:f5:95:5c:e1:3c:54:89:aa:a9:ce:e5:
ac:08:79:52:a0:aa:4d:20:ad:09:a6:45:51:bf:30:02:be:bf:
3b:d5:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:13:25 2025 by rpki-client