Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jngyMoNK_gsZxSESrLW3txiD-WM.roa
File: jngyMoNK_gsZxSESrLW3txiD-WM.roa (raw, json)
Hash identifier: bkqH0TTY7GeSDsSoZ+ytJJrzufoy1feSrZuPWhL2bVA=
Subject key identifier: 8E:78:32:32:83:4A:FE:0B:19:C5:21:12:AC:B5:B7:B7:18:83:F9:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73A49210
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jngyMoNK_gsZxSESrLW3txiD-WM.roa
Signing time: Fri 18 Mar 2022 21:10:24 +0000
ROA not before: Fri 18 Mar 2022 21:10:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940165136 (0x73a49210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 21:10:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e783232834afe0b19c52112acb5b7b71883f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:62:99:bc:eb:e2:fc:0c:8e:a2:ac:8e:e1:
c8:7f:e9:c3:c2:bb:c6:9a:17:af:44:e8:e8:bc:9d:
de:fb:25:64:13:fc:00:43:4c:e8:95:4d:45:ac:fc:
38:7c:7e:97:4d:37:5f:8a:d4:94:2f:8a:76:36:d9:
fb:63:28:f7:42:3f:b7:70:be:74:de:30:0c:ed:e4:
16:ad:91:c9:4d:a2:62:6b:dd:e3:b6:6f:77:00:fd:
e0:04:25:83:ff:2f:73:26:8e:b8:c8:fd:6e:e2:1c:
08:5e:d8:f9:0f:72:49:e5:98:d7:d8:f3:77:fa:b5:
b7:2d:60:3d:c9:8a:e5:6c:89:77:b5:0a:cb:a8:a7:
b1:58:01:1c:df:8d:01:1e:0d:45:92:94:ee:d4:d5:
b9:56:21:1a:94:2a:a7:b6:e6:be:66:50:89:b3:e8:
59:08:52:aa:df:f3:e0:4a:b0:24:af:8c:21:b4:83:
d8:c9:03:eb:47:5d:af:e3:18:fd:73:e4:4c:15:12:
88:66:38:ba:92:02:dd:c2:ee:13:8c:0f:41:f1:dd:
86:6d:54:67:b6:0d:0e:9e:ea:df:b6:b8:95:9a:d8:
83:09:29:1b:53:8a:a8:6a:f3:ff:2a:61:e3:b0:4a:
e3:6e:7e:76:8e:df:f0:9a:d4:42:00:56:ea:36:20:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:32:32:83:4A:FE:0B:19:C5:21:12:AC:B5:B7:B7:18:83:F9:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jngyMoNK_gsZxSESrLW3txiD-WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:46:42:f4:5f:43:5c:b7:c0:96:ea:20:22:fa:e4:5d:9c:04:
54:2b:c3:cb:ee:91:89:d9:58:ae:d6:f7:3c:09:b7:1e:83:9c:
7c:9e:1b:4c:39:45:ad:83:ff:34:13:eb:73:66:e3:e8:38:a8:
79:ae:92:4e:16:20:05:0e:a3:f7:3a:69:30:d4:a0:4d:6f:0e:
f4:4c:25:d6:62:20:79:20:44:a1:de:a1:a2:2f:b4:71:4d:80:
94:0c:3c:2d:f5:bc:09:59:05:d1:cb:f2:af:45:34:02:18:bb:
11:9d:3e:3d:35:63:3d:c0:b5:a1:5c:76:ff:b9:04:6a:90:b5:
26:6b:d8:cf:25:a1:43:f0:5d:82:d1:a6:70:c1:59:d2:5e:5f:
6c:d3:45:ce:ab:e3:47:a0:bd:61:09:8c:25:3d:9b:a6:03:aa:
41:21:a5:99:88:a3:04:ae:3e:a6:05:77:3b:10:cb:ab:5f:47:
52:8c:a4:74:ce:f7:f7:7a:d6:a7:df:24:bf:56:2a:82:e4:61:
df:a1:52:2b:3e:d4:d8:0b:0b:10:b7:9b:27:c6:a6:5e:66:3f:
39:4a:68:5e:9d:66:cf:c3:62:fc:61:71:bd:79:01:72:5a:e5:
21:c8:61:65:1b:4c:31:4d:d4:a7:5b:41:3d:d0:21:e1:b3:05:
dc:76:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:59:09 2025 by rpki-client