Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJZ9eHh8LH19ExyOgRMLHyIJ-v8.roa
File: RJZ9eHh8LH19ExyOgRMLHyIJ-v8.roa (raw, json)
Hash identifier: /VdJycjUleBVR/9WQjX48skipt/YvWBpuTuMTtUCDVI=
Subject key identifier: 44:96:7D:78:78:7C:2C:7D:7D:13:1C:8E:81:13:0B:1F:22:09:FA:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CCE0D6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJZ9eHh8LH19ExyOgRMLHyIJ-v8.roa
Signing time: Tue 22 Feb 2022 16:17:29 +0000
ROA not before: Tue 22 Feb 2022 16:17:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825443178 (0x6cce0d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 16:17:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44967d78787c2c7d7d131c8e81130b1f2209faff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:fb:2f:d8:8b:2c:8e:b9:f8:19:2b:60:a3:
e9:65:a0:af:f0:6e:a1:61:13:dd:45:b4:a0:9d:05:
01:6c:39:75:67:a7:db:0a:68:13:df:2b:f8:0e:13:
8e:4c:62:4f:35:3e:39:2f:70:9d:d5:f4:f1:01:51:
66:4e:33:aa:2d:6f:77:52:61:ee:00:34:6e:d9:0f:
3f:62:40:b2:d2:e6:d9:8a:f3:33:cb:53:13:4b:54:
70:f3:24:c0:cc:d4:fc:b4:1b:53:24:7c:81:2d:09:
35:a4:f0:e2:32:0c:7f:0f:47:4e:c4:b2:86:01:e8:
c5:46:ba:5e:47:ba:1d:ad:0e:23:f8:23:25:ae:e0:
17:dd:6d:96:de:f0:8e:af:94:f8:85:01:92:f1:b9:
c8:e4:05:f8:32:ed:0d:a0:cc:a5:24:df:fd:93:ec:
1c:ec:e9:9d:ed:2d:32:3f:16:06:2e:30:64:32:f3:
76:37:0a:48:1b:1d:88:66:3f:db:36:8d:bb:1f:f9:
14:6f:52:e0:71:d5:d6:f4:8d:51:4f:ca:8c:a8:ba:
43:d9:0d:d2:04:08:58:9f:5e:7a:ed:cd:4a:79:40:
54:c0:c5:0b:2e:2b:b2:7b:5a:cf:5c:e6:55:2d:66:
92:9b:2f:c8:7b:3a:61:82:8e:cf:cc:be:82:07:c3:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:7D:78:78:7C:2C:7D:7D:13:1C:8E:81:13:0B:1F:22:09:FA:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJZ9eHh8LH19ExyOgRMLHyIJ-v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:a5:52:54:8f:95:0a:8d:bb:6b:b2:97:63:2c:18:88:17:8c:
9e:aa:74:b6:f0:b1:9b:08:45:88:b6:4c:81:40:9c:3a:b5:de:
aa:1b:18:92:f5:1a:cd:60:fa:6b:7c:52:9b:d3:b9:a9:a2:f2:
cb:b7:08:2f:6d:5c:47:0e:0d:c5:e7:56:e0:37:70:75:e3:1c:
fe:1a:8c:0c:bc:a2:62:92:66:20:6c:ac:28:77:8c:fb:c7:b9:
7f:fb:23:14:fd:16:1b:7e:d4:fe:1e:65:88:b1:b6:73:9a:24:
26:02:61:91:b7:59:f5:77:76:08:40:67:75:ab:78:c1:3e:4e:
b7:cd:49:19:11:21:92:e5:f9:d2:84:5d:73:f2:ba:b7:49:04:
5f:61:f4:c1:64:1c:68:75:d6:f4:18:87:f4:86:fa:93:f0:16:
40:2f:1a:8a:d7:f4:2f:41:ab:f0:eb:f3:15:e5:1c:db:be:96:
f6:36:22:f0:26:ff:3a:db:d4:5c:fc:ac:75:1b:e0:91:e4:0c:
c3:67:23:6f:e9:45:43:8b:9c:9c:82:96:fe:f8:bd:41:ba:86:
50:c2:1e:2e:a4:09:5d:7c:1c:f4:39:5d:35:46:5b:31:39:fe:
b3:fb:f1:bd:46:bf:fb:a0:07:51:83:fd:18:b3:b9:e6:8b:d4:
8f:f4:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:28 2025 by rpki-client