Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIY8qwFkevcy68qTgcXPfcSusq8.roa
File: jIY8qwFkevcy68qTgcXPfcSusq8.roa (raw, json)
Hash identifier: NgeB2nN8MSNr1V1eO/ECvrffWTSUSF2HyODv3+b3vYk=
Subject key identifier: 8C:86:3C:AB:01:64:7A:F7:32:EB:CA:93:81:C5:CF:7D:C4:AE:B2:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821F62C87B6A40730732FF3E4C13F6CAA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIY8qwFkevcy68qTgcXPfcSusq8.roa
Signing time: Thu 21 Jul 2022 06:12:23 +0000
ROA not before: Thu 21 Jul 2022 06:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:62:c8:7b:6a:40:73:07:32:ff:3e:4c:13:f6:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 06:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c863cab01647af732ebca9381c5cf7dc4aeb2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:19:e8:6a:de:2d:94:74:3d:87:b3:43:72:
a3:7c:40:15:05:42:11:34:ad:ca:14:dc:b7:6d:61:
02:d3:09:e7:50:a7:bb:49:fd:01:79:a2:c3:6a:27:
1d:4d:07:3f:ce:a0:6a:8f:47:2f:58:92:dd:07:a0:
03:ce:b6:45:1e:69:e5:61:b8:ae:28:99:16:a0:ee:
60:52:76:4e:04:b1:60:2f:28:3d:44:60:d6:fc:32:
de:38:d7:e4:df:c4:0e:90:d3:cd:62:db:71:8e:b1:
9e:d1:45:e7:df:80:e4:aa:30:3d:e7:f5:01:1a:e0:
2f:95:42:52:27:7f:ca:f4:b5:23:90:aa:00:51:2b:
a4:e0:2b:c5:d1:58:b2:69:f9:1c:d2:76:ef:f4:ca:
f5:0a:da:88:ac:5b:e3:c4:2f:5d:47:40:7f:a3:af:
4d:10:64:fe:5e:a0:7c:69:47:68:d0:91:65:5c:0e:
e8:dd:21:49:b0:7c:f6:3a:16:f3:68:01:a7:a5:5a:
82:af:63:e0:76:b5:c5:51:23:bf:7d:3a:28:41:84:
0b:b0:98:00:ca:a6:ab:9f:56:94:8c:99:96:74:7c:
30:db:2a:d6:0b:9c:d5:ea:bb:32:c4:38:fb:b8:e1:
4d:84:7e:85:18:39:db:bd:30:14:64:bb:00:df:78:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:3C:AB:01:64:7A:F7:32:EB:CA:93:81:C5:CF:7D:C4:AE:B2:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jIY8qwFkevcy68qTgcXPfcSusq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:f7:63:c1:29:a2:50:de:57:6a:3d:62:9f:c6:3a:c0:f3:5e:
9e:50:31:13:55:bd:b3:56:cc:cb:55:86:2e:07:4f:98:46:54:
b2:7e:2a:7e:c1:fb:f3:6b:62:ed:14:00:d5:1d:84:df:fe:a2:
23:7d:ed:12:cd:02:65:fb:49:20:9a:c1:22:bb:99:c5:10:74:
cf:b2:63:0f:69:61:66:fa:59:4e:76:94:95:63:fa:3e:55:30:
55:e1:cd:6a:fc:5f:6f:74:ad:ed:02:a3:a1:16:60:5d:31:76:
77:d1:f8:1e:35:19:be:bf:69:70:b4:91:a3:79:9c:9d:cd:a5:
3b:66:ec:97:5c:ab:d0:ab:b9:c0:19:7e:15:3a:ad:d7:75:82:
4f:15:3e:e5:94:77:54:e7:18:88:18:93:0e:78:4e:b8:af:dc:
62:47:88:d4:ad:87:f8:58:a4:d7:52:90:d5:50:3d:57:74:ee:
5b:16:07:66:84:75:3d:09:7b:b4:39:e4:fa:02:7d:d5:90:7a:
20:c2:a3:0d:e1:19:67:3d:00:a1:ad:a0:4e:e3:53:d9:38:cc:
c8:79:94:5c:0a:cc:10:a5:5d:2f:d7:91:2f:a7:45:f1:86:72:
f5:e9:36:53:da:3f:13:56:2c:cd:99:91:09:e9:26:d9:5c:66:
b6:de:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:33 2025 by rpki-client