Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRG1K_g0xL5s_r7Zswm65K5i1X0.roa
File: jRG1K_g0xL5s_r7Zswm65K5i1X0.roa (raw, json)
Hash identifier: IPCwXLs78RwAgS9iCkmpMEePTAodRWQkr/a4191krgs=
Subject key identifier: 8D:11:B5:2B:F8:34:C4:BE:6C:FE:BE:D9:B3:09:BA:E4:AE:62:D5:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E30A822DEFA7877D32453E5CC3BF4B24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRG1K_g0xL5s_r7Zswm65K5i1X0.roa
Signing time: Tue 24 Jan 2023 09:09:54 +0000
ROA not before: Tue 24 Jan 2023 09:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:0a:82:2d:ef:a7:87:7d:32:45:3e:5c:c3:bf:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 09:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d11b52bf834c4be6cfebed9b309bae4ae62d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:f9:e9:c4:96:00:a6:88:19:d2:eb:b3:da:
97:94:9a:fa:47:55:11:63:53:06:2d:29:55:7b:27:
85:e9:09:2c:25:b4:9d:7c:fe:31:83:56:93:47:95:
f2:fd:f6:a9:a3:f4:8f:5e:60:70:e4:19:b8:ef:8a:
ad:78:97:09:92:3a:30:db:85:80:42:95:57:20:3e:
ec:c3:3c:0d:30:cd:fd:f1:a3:46:cb:08:6a:23:50:
47:8c:52:ea:39:d3:23:d7:17:ca:b0:26:b7:46:32:
02:b1:b7:75:c8:e1:f2:a8:14:40:cd:45:bb:9c:56:
73:31:d9:7f:10:a8:f0:92:a5:5f:fe:b3:a5:70:0f:
f8:47:06:33:86:eb:ed:13:f9:0f:57:d7:d2:c4:6c:
88:a3:6e:62:dc:01:60:50:83:60:b1:07:6c:65:ea:
3e:91:dd:23:02:92:09:bc:ff:e9:cd:eb:b5:00:0b:
9a:60:c8:da:e0:db:71:9a:2c:7c:a1:fe:5a:fc:f5:
de:1f:c3:ec:5a:86:ee:53:22:22:6d:a5:91:15:0b:
a2:41:98:d8:96:d6:d5:12:0f:f3:a5:9e:7c:e4:95:
82:85:d6:2f:1d:33:89:48:eb:dd:1c:87:eb:39:79:
75:70:fb:5c:f3:e5:89:99:dc:f2:a9:56:a5:d6:e2:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:B5:2B:F8:34:C4:BE:6C:FE:BE:D9:B3:09:BA:E4:AE:62:D5:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jRG1K_g0xL5s_r7Zswm65K5i1X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:62:21:c3:b4:f8:2e:3e:88:d6:a9:a0:25:c0:83:5c:36:4b:
8c:de:6c:0b:01:6e:be:0e:ab:da:4a:64:d2:e7:21:08:1c:86:
f1:52:ef:38:73:a6:e3:98:a9:26:17:18:ef:f6:3e:b8:10:0c:
c0:8a:cf:9d:5a:14:1b:68:48:71:5f:c4:8d:e3:68:13:30:f4:
08:51:ce:9b:c6:53:1c:d4:08:b9:95:4e:6f:12:e8:e7:f1:e7:
53:be:6c:74:75:d6:0e:50:c6:a1:0c:d4:c5:8a:fb:91:2b:6f:
cd:5e:bb:36:c4:42:fb:84:37:70:06:cb:3f:38:ec:76:bf:c9:
ad:c1:a0:9a:03:1a:0d:5c:3a:0a:e7:ce:8b:61:8c:d0:8d:bc:
8e:e7:2d:db:20:b5:30:ad:36:71:ff:5d:2e:00:c5:b3:1f:d8:
19:49:a3:cc:26:19:4e:d7:5f:17:d5:2c:5d:80:cc:60:73:53:
62:d5:b0:29:09:5a:96:04:77:c0:d9:55:69:f7:c3:0f:78:63:
44:77:b5:b2:cf:6d:4e:59:a2:f3:fa:6b:64:95:7b:d9:55:67:
3b:0a:94:33:0e:ff:61:15:10:3b:dc:09:1c:ea:41:1a:32:b9:
f2:70:42:1c:2f:ed:ca:7c:bd:e6:ea:45:e7:54:6c:22:96:45:
42:e0:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:16 2025 by rpki-client