Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUg6-3X2aRqT1nFLWuubWI_QChg.roa
File: jUg6-3X2aRqT1nFLWuubWI_QChg.roa (raw, json)
Hash identifier: ViI7ggAq1702764WMu2UCwXpcTodo+VpO0mtm5fle2s=
Subject key identifier: 8D:48:3A:FB:75:F6:69:1A:93:D6:71:4B:5A:EB:9B:58:8F:D0:0A:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186149B071E82F25BE9C2DFD1DAE56D603D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUg6-3X2aRqT1nFLWuubWI_QChg.roa
Signing time: Fri 03 Feb 2023 00:09:09 +0000
ROA not before: Fri 03 Feb 2023 00:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:14:9b:07:1e:82:f2:5b:e9:c2:df:d1:da:e5:6d:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 00:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d483afb75f6691a93d6714b5aeb9b588fd00a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:6c:b6:48:c8:00:f5:1e:6e:02:bf:89:3b:
2f:91:a1:ac:ca:db:4d:12:82:70:ac:58:41:b2:9d:
0a:16:1a:70:6b:71:bf:8a:a0:a5:25:8b:78:12:86:
3c:a0:3e:b6:02:c4:22:4a:29:d2:cb:1a:eb:18:4f:
3d:35:00:58:ca:11:49:8c:8e:8c:48:7c:ac:1a:f3:
2a:83:c3:86:7b:3d:56:e4:f9:25:60:87:e9:07:13:
a8:26:85:14:b2:23:5c:bc:2a:5b:5b:d0:0a:2b:29:
47:92:b9:ba:22:8c:0b:e7:56:22:c7:8c:bc:35:29:
c6:11:1c:ea:7f:8d:d9:f7:97:6e:29:c9:93:21:41:
ca:08:c0:8b:84:0e:eb:03:6a:7d:55:4e:ee:cb:32:
61:58:0b:53:f8:7f:52:96:2e:19:a4:16:04:b2:b9:
ec:14:59:c9:ef:f8:44:68:a3:d7:51:05:7e:cd:6d:
15:7b:86:ae:ed:86:36:36:15:b1:8f:04:f3:9c:4e:
16:56:a8:40:42:46:87:95:8b:d1:17:58:c6:1a:a2:
9f:b3:31:5d:6e:f4:e4:1b:a6:de:33:cc:b9:08:52:
73:c7:53:bf:19:d7:7c:b0:9e:f6:81:19:48:e3:bc:
ef:26:46:a0:03:71:f9:83:f0:b1:e9:d4:fb:7f:06:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:3A:FB:75:F6:69:1A:93:D6:71:4B:5A:EB:9B:58:8F:D0:0A:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jUg6-3X2aRqT1nFLWuubWI_QChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:03:cb:5a:20:86:0d:7e:51:34:74:f9:e2:d1:77:fe:7d:7d:
ad:85:7d:eb:15:7e:89:f5:67:d9:60:2c:58:83:3a:0a:6f:33:
d4:03:93:76:20:50:00:da:69:a0:42:ad:f8:47:21:5a:80:8c:
d6:31:6d:f9:0e:fb:2e:8a:6c:59:0e:26:78:0e:2c:72:a8:e5:
3a:b3:17:b6:37:d8:8f:65:9b:47:03:4e:42:db:fa:07:86:91:
c8:df:09:94:54:de:67:f0:a8:d9:0d:ed:be:fb:5e:a6:1a:e4:
c1:29:c4:9b:9d:37:8c:de:bd:51:e3:26:0e:c9:2d:09:ab:70:
ef:c4:c0:e2:29:80:6a:b9:68:bd:54:ad:e3:9b:d1:bb:bf:17:
90:53:60:0b:09:c4:84:88:7b:8c:17:fa:1d:62:80:d4:2a:d9:
24:38:10:72:c6:33:73:47:2e:87:5b:fb:bc:a6:94:83:73:03:
3d:8e:32:f9:17:ee:ec:b6:69:59:2a:99:8d:bb:20:4f:38:11:
e9:39:8a:e4:83:0a:a3:ae:a3:4d:1d:cd:8d:75:13:f5:a7:f3:
a5:b9:7a:ce:1d:1f:9c:10:56:1b:ee:a4:e4:64:68:45:42:ba:
de:4b:4f:79:f2:ec:3e:f7:2c:5d:87:5f:b7:ba:07:43:46:0d:
a1:4d:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:22 2025 by rpki-client