Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUfs5rTnhQ74mr_e_96VnTOhKfE.roa
File: jUfs5rTnhQ74mr_e_96VnTOhKfE.roa (raw, json)
Hash identifier: IAWpjuBchu2FzfRLIrfBAuT+pLV6R+FJ1+C/0PkZmiA=
Subject key identifier: 8D:47:EC:E6:B4:E7:85:0E:F8:9A:BF:DE:FF:DE:95:9D:33:A1:29:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185763F0D3B7059D59EFC5F0F0C071EEAB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUfs5rTnhQ74mr_e_96VnTOhKfE.roa
Signing time: Tue 03 Jan 2023 06:08:41 +0000
ROA not before: Tue 03 Jan 2023 06:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:3f:0d:3b:70:59:d5:9e:fc:5f:0f:0c:07:1e:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 06:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d47ece6b4e7850ef89abfdeffde959d33a129f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:17:42:37:5f:45:aa:46:69:c9:13:7a:84:
1a:72:97:17:f9:e8:5c:d6:ef:d4:07:b5:a0:10:b4:
0d:31:fc:56:c4:78:3f:78:f8:b0:c0:69:76:cb:17:
ac:86:0b:f9:26:a6:2b:84:40:01:7e:49:89:6d:49:
df:64:09:25:98:52:b8:1c:96:d2:98:34:30:4e:7e:
e2:9e:4b:78:ab:41:a4:02:d8:0f:03:25:c3:07:ba:
25:05:8c:98:70:0a:bb:6a:80:01:e4:f4:66:e5:d6:
d1:b1:43:72:a3:fd:bc:92:9c:55:2a:58:d8:a4:41:
90:8d:29:7d:d2:8a:8f:ba:94:8b:fb:78:69:74:31:
03:f9:c8:99:c4:57:91:0c:1e:9c:23:03:76:a8:6b:
ff:c6:91:36:ed:73:06:77:00:00:60:b9:23:17:a2:
8e:cd:59:b5:78:f1:d4:19:c1:98:6f:82:56:1f:eb:
5e:94:9f:0d:15:2e:f1:01:95:ac:ee:2d:67:e3:53:
5f:02:3c:36:90:79:14:85:8c:a7:66:0c:7e:6d:04:
be:5c:60:f4:f1:46:ef:31:8e:9d:18:bd:17:b6:25:
e0:7b:6b:f5:1a:94:ed:89:af:17:db:c9:9c:70:9f:
75:c1:66:23:2a:57:85:6e:24:42:d5:9c:d4:e8:c9:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:EC:E6:B4:E7:85:0E:F8:9A:BF:DE:FF:DE:95:9D:33:A1:29:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUfs5rTnhQ74mr_e_96VnTOhKfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b6:02:6b:ab:1a:53:65:4a:cb:a6:ec:33:1f:98:7c:c1:14:
7e:e5:14:af:44:5a:c3:0f:ec:dc:85:19:1c:73:6d:1c:62:1c:
d8:38:1e:f0:cb:49:7c:c3:39:f5:d7:7f:7b:39:db:a2:5c:ed:
0f:3b:af:cf:7f:f7:89:eb:ce:81:e8:33:4e:c9:02:aa:fc:5b:
af:ee:b4:c1:63:99:6e:38:b1:77:cf:07:06:7c:84:02:3e:c2:
e5:b1:36:d3:14:d5:7f:35:b5:9d:c8:9f:19:b9:5e:ff:af:11:
a4:22:7d:d6:af:99:64:39:dd:af:3d:f3:1c:26:47:1f:29:d4:
95:e9:80:3a:ad:c6:18:e3:1a:a0:e2:9d:03:41:08:93:5a:5b:
ba:bc:3a:84:8f:cb:4c:8d:0c:97:0c:60:0c:17:ce:ac:de:73:
b1:93:e2:18:a6:ef:b5:48:e1:c8:64:4f:e3:9c:6a:b0:67:9f:
c0:68:50:50:21:95:32:56:23:16:a6:1a:64:17:6e:28:9b:d8:
a4:77:5b:a0:8b:6b:af:92:c0:ba:da:96:cc:56:51:b4:07:00:
6e:16:80:e7:18:80:6c:23:d3:12:9f:ce:cb:5f:09:17:02:ca:
6b:ae:b7:a9:92:f5:3a:54:c8:77:6c:db:ff:ed:95:9c:69:a6:
88:fb:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:08:13 2025 by rpki-client