Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjg4v294wCB1FrCPXV71CwQI-OM.roa
File: sjg4v294wCB1FrCPXV71CwQI-OM.roa (raw, json)
Hash identifier: gZnYSiAwSVsXRJPhCuoe0PQ50XCHJ8OzmuF2aGq1+Hg=
Subject key identifier: B2:38:38:BF:6F:78:C0:20:75:16:B0:8F:5D:5E:F5:0B:04:08:F8:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E64FE0C884A72F9298504CE2692DD1F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjg4v294wCB1FrCPXV71CwQI-OM.roa
Signing time: Sun 10 Jul 2022 04:13:23 +0000
ROA not before: Sun 10 Jul 2022 04:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e6:4f:e0:c8:84:a7:2f:92:98:50:4c:e2:69:2d:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 04:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b23838bf6f78c0207516b08f5d5ef50b0408f8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:d0:a6:8a:7f:ad:71:8e:be:b4:a1:95:4e:
9f:32:d2:e4:da:40:f0:90:85:9a:b5:37:3b:f7:4a:
85:95:93:c8:9f:34:56:6d:19:af:70:3b:7d:5d:0a:
06:4e:67:2f:ba:c6:46:e3:81:17:4b:33:60:95:78:
c5:dc:f4:e8:98:d3:20:b0:09:29:b9:b7:4f:01:e6:
f9:2e:4b:a3:58:5f:0b:29:5b:fb:e9:58:33:78:aa:
e2:93:59:62:a8:f6:b4:79:af:8f:ac:f7:d4:77:b1:
86:21:0d:ed:e9:a9:ca:52:f6:de:f7:08:6a:35:3d:
f2:ea:b0:d5:68:d5:09:c8:c6:b5:f8:e8:53:61:f0:
63:1f:34:12:20:bc:f7:0b:c1:b2:ff:3c:06:4c:2c:
d9:07:82:78:eb:d2:ef:5f:5a:5f:4f:a5:dd:3b:5e:
19:89:f7:d0:0b:08:e0:0b:4b:25:fe:e4:a0:a7:c8:
b7:3d:e1:4d:9d:ef:f1:1c:3e:54:3a:06:b0:83:df:
25:a7:1d:3b:1d:00:67:b6:6c:30:d8:03:21:a6:4d:
4b:e0:d2:b2:d8:f4:39:e1:4a:48:4f:8c:2c:2a:4b:
df:47:c8:db:45:77:83:68:5d:4a:34:cb:10:a7:58:
a4:53:3a:f1:c9:4b:e2:1b:6c:46:56:3d:17:13:6a:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:38:BF:6F:78:C0:20:75:16:B0:8F:5D:5E:F5:0B:04:08:F8:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjg4v294wCB1FrCPXV71CwQI-OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:50:50:a3:2e:2b:3f:11:e4:2c:5c:5a:86:a5:f2:70:e2:fa:
52:7d:29:89:66:05:24:09:2e:23:3f:e0:53:b8:f7:98:09:6d:
6c:99:f6:44:46:2b:cc:03:98:a8:8d:b4:95:5d:3b:47:7b:0e:
21:41:da:22:3f:50:82:a0:34:51:04:4f:61:04:59:f4:13:31:
19:2f:ee:08:e6:f1:a9:bc:5e:d2:4d:21:a1:d6:c6:75:e9:81:
60:70:83:af:97:32:18:d3:ea:07:6c:30:75:b6:42:91:2d:ae:
9d:39:ec:ba:f0:21:19:90:11:c7:72:77:52:95:6e:e2:fc:5a:
5d:bf:62:2f:6f:69:b4:bb:58:5d:41:cd:27:0f:83:5f:eb:00:
de:08:13:51:f7:e0:33:8b:7d:66:bb:c7:f8:d8:5e:b2:b1:bb:
fb:e2:67:d7:38:58:bd:0f:03:99:17:27:62:02:e6:82:d5:1f:
68:28:73:e2:19:56:b9:83:77:64:78:10:ca:b6:12:55:ac:4d:
14:9f:12:9d:74:f1:05:c3:eb:83:bf:91:51:5e:26:e5:47:13:
83:9a:2b:8b:1a:22:77:ad:c7:47:85:73:d9:37:7a:85:8c:64:
c5:92:ef:a2:0e:75:3e:4f:d7:d3:66:77:d9:df:c0:44:77:50:
7e:87:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:38 2025 by rpki-client