Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jghPlzZh3JU8mb5kiv-yitiJ96g.roa
File: jghPlzZh3JU8mb5kiv-yitiJ96g.roa (raw, json)
Hash identifier: ieegaVDuivbtdVlHCtS6fL+ocgzpTnEKTsJ/ytZr2vY=
Subject key identifier: 8E:08:4F:97:36:61:DC:95:3C:99:BE:64:8A:FF:B2:8A:D8:89:F7:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AC4DF50089840D7EF32241D784071DE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jghPlzZh3JU8mb5kiv-yitiJ96g.roa
Signing time: Fri 13 Jan 2023 18:04:28 +0000
ROA not before: Fri 13 Jan 2023 18:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:ac4d:b658/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:4d:f5:00:89:84:0d:7e:f3:22:41:d7:84:07:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 18:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e084f973661dc953c99be648affb28ad889f7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:91:70:51:a4:cb:4f:43:ae:a4:98:1a:17:
9c:7b:08:09:f9:3b:0c:99:08:05:61:ee:50:20:6f:
ee:e3:43:62:8b:c5:77:19:9f:2e:f4:3a:f2:d6:d3:
f1:6e:0c:93:a9:f6:bd:33:a9:b5:1b:49:ff:df:35:
00:d4:76:e4:6c:24:46:1c:86:d9:51:9f:d3:b9:4f:
d3:e9:3a:60:60:6b:e5:6e:2f:13:d8:0f:98:fd:80:
b5:7e:0f:8a:5a:0f:8f:1d:4b:1e:7b:eb:f0:f6:b5:
80:db:35:15:18:0d:b5:01:37:7f:72:ba:44:16:32:
8b:4f:51:70:f0:3a:9a:aa:87:8b:43:03:4b:c8:35:
04:ae:c5:4f:96:2e:aa:8b:e8:ad:94:f8:44:c9:ff:
7a:a1:bb:81:db:ce:b3:86:6d:d4:22:1a:09:be:79:
e5:e3:ca:0e:57:ca:9b:64:38:9d:59:10:ef:c3:0c:
2b:c9:36:fa:ca:4d:45:10:05:d6:e2:e9:be:fd:a0:
9f:13:c2:a6:56:bf:69:55:94:df:fb:cd:6b:0d:0c:
8d:b5:ab:6d:6d:37:b4:1c:f6:4d:cb:7e:4b:58:9c:
62:a7:63:a5:96:6d:f0:cc:eb:c8:b8:b6:55:55:4e:
3b:c5:d7:27:34:77:dc:86:2a:b1:72:3a:79:c6:14:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:4F:97:36:61:DC:95:3C:99:BE:64:8A:FF:B2:8A:D8:89:F7:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jghPlzZh3JU8mb5kiv-yitiJ96g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:67:64:62:fc:bf:ed:8d:54:94:0e:5c:21:d0:f5:ee:d0:db:
35:2a:49:17:fb:bb:e9:38:1e:3e:55:e0:41:1c:dc:d4:a4:a2:
a9:b1:ab:03:f5:fd:17:44:c3:24:88:8d:ed:5b:c8:b4:d6:76:
92:6d:49:a3:54:71:b4:c8:71:ff:d2:b5:e0:72:77:22:6f:17:
13:50:2d:fc:e3:56:50:84:27:a2:78:cf:67:2c:c5:36:4d:ee:
d9:b8:63:06:3b:bd:ef:44:5f:87:a8:5f:71:ee:e0:41:1d:76:
2f:33:b5:21:b0:17:4f:5d:62:61:8d:e7:22:ac:f2:4d:68:33:
37:a0:4e:8c:bf:92:93:db:00:70:cf:c3:b0:a8:ef:43:9b:75:
d2:29:7c:73:ad:b1:c0:5f:7b:42:86:c7:95:9e:4c:6d:17:c9:
7e:77:5a:97:78:e4:5e:bf:a1:0c:52:55:4e:16:40:3e:0f:22:
5c:fe:b2:99:4f:3a:5c:41:68:99:17:d1:06:6d:81:d0:79:03:
c0:f8:8a:82:0f:e1:f8:8b:24:a2:79:4d:46:be:5d:65:32:00:
04:19:0d:16:4c:e3:d9:bf:80:c7:20:46:1f:a7:4f:3c:21:b8:
1d:75:81:ce:74:b1:e5:74:bf:18:7f:99:c8:89:99:c5:a2:e4:
07:01:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:05 2025 by rpki-client