Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JysB0CJ3iIm_PYo3YI5tJ5Dykj0.roa
File: JysB0CJ3iIm_PYo3YI5tJ5Dykj0.roa (raw, json)
Hash identifier: sARfO2nvNcHBKkUxARadsLPcwgJP0ehXwG/+PcN6/8k=
Subject key identifier: 27:2B:01:D0:22:77:88:89:BF:3D:8A:37:60:8E:6D:27:90:F2:92:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185085E42D08AE422DBF903214B767637D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JysB0CJ3iIm_PYo3YI5tJ5Dykj0.roa
Signing time: Mon 12 Dec 2022 22:04:33 +0000
ROA not before: Mon 12 Dec 2022 22:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:85d:df12/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:5e:42:d0:8a:e4:22:db:f9:03:21:4b:76:76:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 22:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272b01d022778889bf3d8a37608e6d2790f2923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:0a:50:1f:20:b5:76:37:c6:3b:d9:1a:11:
1e:e9:4e:95:56:50:57:9e:37:71:56:27:e4:bb:83:
4e:f2:17:b3:6d:cb:9e:1b:73:f1:75:46:2d:24:f5:
d6:5a:45:74:df:6d:f8:ae:f1:2f:de:8d:3d:ca:d5:
f6:4f:f9:3d:1e:fa:0f:b0:64:92:bc:4a:c1:9d:63:
dc:23:cf:2e:c7:7a:1a:f4:b4:91:f9:c0:2c:63:6b:
c1:ae:46:7f:8a:10:e0:0e:6d:08:6f:c2:c1:ba:b9:
4c:34:78:c5:5f:22:70:87:39:c4:cc:ab:98:04:d4:
01:d5:82:1c:b7:9a:30:56:a5:b5:71:db:84:a4:1b:
f4:56:41:d5:53:9f:38:d6:9c:cd:9f:f8:49:7e:3e:
af:2f:51:2d:3d:04:93:3a:ed:7c:2f:81:2a:96:c5:
ec:1b:97:be:70:b7:1e:14:c5:e7:18:c0:2a:17:1c:
af:50:4a:67:e9:0e:83:a0:91:35:6e:58:5e:e5:13:
23:68:f3:24:6e:f9:a6:aa:bc:52:03:59:6f:3c:e2:
94:9b:75:67:39:00:6c:2c:13:85:cb:c2:34:fa:4f:
c0:a7:73:a1:3c:35:76:77:a3:da:7f:63:88:d7:f6:
d6:09:0d:f8:8c:3f:98:22:9d:5c:da:b5:5d:26:23:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:01:D0:22:77:88:89:BF:3D:8A:37:60:8E:6D:27:90:F2:92:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JysB0CJ3iIm_PYo3YI5tJ5Dykj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:4c:a7:d6:e6:35:22:97:d3:e7:a8:87:57:82:c2:bf:1b:06:
19:1d:34:7d:a0:0b:d7:85:6d:34:07:82:ef:cb:64:f6:f3:a5:
3e:5d:92:c4:5b:44:fb:b3:0c:f0:38:48:da:ec:d3:33:1f:85:
3d:e3:6f:bb:27:0e:cf:54:8b:64:68:d9:30:c2:79:96:86:45:
44:75:e9:0b:d8:a9:97:49:11:15:0b:cc:06:a2:07:40:23:01:
de:64:5c:09:94:4b:c0:af:d3:40:b3:eb:eb:26:cc:48:ac:02:
35:fb:9b:c0:95:6c:24:35:9f:22:a6:fc:b5:45:ab:cb:44:61:
a8:ea:1e:c6:94:67:0a:c9:58:6b:4c:51:10:6a:88:da:4f:d7:
08:5e:43:6a:44:4c:8b:1c:f7:b6:5f:5f:f2:70:96:ad:e8:2b:
c0:83:07:ee:72:45:a0:86:bc:a5:dc:4b:e9:bc:9d:7d:ce:47:
f8:06:22:b6:74:99:d9:4b:eb:dc:6d:d4:bf:d4:fc:52:8e:0d:
fd:5f:dc:72:b9:1d:7e:fd:e2:8c:73:54:51:a8:a3:a8:27:ef:
f1:36:f7:c9:52:4d:4e:cd:37:b4:1b:7a:63:8f:5d:ac:e2:ed:
88:bd:d7:10:46:ed:e7:63:89:ab:56:b1:ef:b2:9d:d1:59:78:
81:33:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:07:34 2025 by rpki-client