Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWqkWS_csNhJDAd8E0usBF6oTeU.roa
File: jWqkWS_csNhJDAd8E0usBF6oTeU.roa (raw, json)
Hash identifier: ZlGS344S1IkrhYxeEgpFyvTWzTI0gAtknfLFfe4wV2c=
Subject key identifier: 8D:6A:A4:59:2F:DC:B0:D8:49:0C:07:7C:13:4B:AC:04:5E:A8:4D:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184041BF6093B52BAFC36AC9C371694FE63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWqkWS_csNhJDAd8E0usBF6oTeU.roa
Signing time: Sun 23 Oct 2022 09:10:52 +0000
ROA not before: Sun 23 Oct 2022 09:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:1b:f6:09:3b:52:ba:fc:36:ac:9c:37:16:94:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 09:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d6aa4592fdcb0d8490c077c134bac045ea84de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:27:6b:fd:ad:4d:b5:d4:28:f2:87:fa:51:
de:14:16:6f:89:fa:00:b5:84:a5:d3:1d:80:e4:c2:
a1:78:d9:c9:e4:44:e4:02:d8:bf:f3:d4:80:c3:31:
33:cb:a2:03:f6:7d:18:ad:8f:fb:0c:d3:23:b6:bc:
50:8b:8f:1a:b3:f1:b7:61:8d:6c:61:51:dd:24:49:
80:dc:cb:c2:93:78:cb:8d:a1:b2:cf:ac:ae:d1:35:
31:8f:db:c0:53:74:29:27:60:81:e3:4f:88:07:76:
7f:64:d6:49:db:4e:81:86:8f:f5:7d:20:a6:4f:ad:
67:9f:52:72:94:a9:5d:32:e1:9b:8e:76:95:db:03:
a3:34:bc:d8:7a:cb:b6:dc:93:73:99:bb:59:d3:a3:
20:73:19:e9:51:d1:2f:33:a4:b8:83:2a:71:81:99:
c8:23:39:7c:d9:89:51:63:bb:28:ba:53:b2:30:41:
12:64:e8:da:0c:21:86:a7:9b:2d:59:a6:f0:f2:c8:
28:17:3e:fa:f3:27:9a:ba:61:bb:14:c9:69:61:0d:
bb:6c:54:e6:29:18:d1:78:6b:b4:29:f8:80:7c:8a:
7f:3f:af:0c:92:db:41:53:af:22:99:2d:9f:df:7c:
3a:df:c0:23:9e:3e:0e:3c:8a:0e:07:e3:a5:6a:a9:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:A4:59:2F:DC:B0:D8:49:0C:07:7C:13:4B:AC:04:5E:A8:4D:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jWqkWS_csNhJDAd8E0usBF6oTeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:ec:4e:f9:24:58:fa:7a:4b:61:2f:95:c5:fd:73:ff:d7:33:
8c:50:bb:b0:9e:0d:40:95:cb:dd:6e:e9:dd:84:05:49:8b:39:
90:ab:92:2a:6e:d8:36:6a:6c:35:37:0f:20:d3:17:70:41:23:
e8:1e:22:79:ce:56:a6:38:37:38:c3:c7:5c:4c:01:ac:36:24:
b5:08:33:5d:81:a9:77:00:6a:db:de:14:fa:c7:af:50:38:a1:
89:95:ac:cb:ce:cb:39:48:ee:de:a6:03:11:18:ff:c4:e2:87:
6f:e7:1d:7f:54:77:51:8e:9a:d7:8d:f4:79:0d:ff:cf:5d:bb:
81:07:9b:6b:df:fe:99:9b:d1:08:0c:25:38:93:be:96:8f:d8:
d0:53:21:81:f7:63:76:9c:f8:e8:5b:11:fe:32:43:81:76:5f:
45:54:d4:d6:97:ab:7d:7c:c0:57:a0:a2:fc:3e:0a:56:fd:08:
4a:ae:4c:86:ef:ee:ef:f5:8a:cd:97:4b:68:a7:a5:6a:dc:24:
c1:d1:c4:e1:62:49:c1:4d:c5:a3:33:96:fa:b3:11:12:20:a7:
b1:f7:ed:b1:56:e0:9f:1d:2c:65:ec:23:be:fd:5b:54:95:1e:
5c:0a:f0:2e:0d:3e:3a:d7:d6:55:e1:a1:ba:f4:42:ca:db:04:
5a:1a:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:11:59 2025 by rpki-client