Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_JMLYVdCmqbHxz_9Q6PoyM_vec.roa
File: 3_JMLYVdCmqbHxz_9Q6PoyM_vec.roa (raw, json)
Hash identifier: PlbAjhWM18roAmLfA+bLHHCRi1ljht06oxmCKoAgvt4=
Subject key identifier: DF:F2:4C:2D:85:5D:0A:6A:9B:1F:1C:FF:F5:0E:8F:A3:23:3F:BD:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018888E31E91AF961E8E433CA3CCD1229168
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_JMLYVdCmqbHxz_9Q6PoyM_vec.roa
Signing time: Mon 05 Jun 2023 00:09:25 +0000
ROA not before: Mon 05 Jun 2023 00:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:e3:1e:91:af:96:1e:8e:43:3c:a3:cc:d1:22:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 00:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dff24c2d855d0a6a9b1f1cfff50e8fa3233fbde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:4b:f3:22:de:50:90:3f:45:c2:95:82:f4:
d1:89:96:ea:83:32:c3:3a:f4:03:98:b9:9d:bc:e1:
6f:50:1c:7b:44:49:40:ab:7b:ee:06:57:be:b5:dc:
38:b2:cd:0b:fe:3d:42:58:30:e6:57:7d:a0:00:ab:
c1:a5:e5:35:39:02:68:0a:9c:c2:28:13:33:3b:28:
a6:bb:95:88:5d:3d:86:7d:3d:66:11:5e:65:b1:9a:
64:e5:2c:80:c1:ab:d1:28:9c:02:17:06:59:e2:cd:
ae:45:d2:11:93:aa:43:4a:9c:6f:0a:a0:c8:f9:e9:
90:2b:93:63:a8:ca:b1:80:17:03:d9:0e:cd:38:33:
2b:ee:63:c1:f7:6e:ec:dc:23:d3:14:d9:d6:55:ed:
aa:b0:65:55:91:fb:d5:3a:9e:69:83:b4:d9:e5:82:
df:8f:7e:60:a0:0e:c3:4e:de:a7:d1:c3:8a:f3:a6:
e2:b9:c2:d8:da:dc:78:21:ed:42:3b:d4:7b:af:65:
7c:1c:e3:06:a6:1c:f4:df:4c:2b:f9:c8:5d:e5:d7:
41:b0:72:9c:99:f2:c8:e3:5f:ae:a7:ec:0e:bc:30:
47:dc:0e:56:29:a7:6b:15:e0:3d:f9:29:93:ff:41:
dc:f7:db:36:2a:fe:13:d9:0c:13:63:b0:30:38:b0:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F2:4C:2D:85:5D:0A:6A:9B:1F:1C:FF:F5:0E:8F:A3:23:3F:BD:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3_JMLYVdCmqbHxz_9Q6PoyM_vec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:7a:b8:25:e5:15:98:42:50:6e:d5:7d:bd:61:b3:1b:8e:7f:
28:e3:70:35:82:09:80:a6:07:6d:9d:53:56:98:25:86:c1:7b:
33:80:96:a5:e6:18:f3:7f:3f:1c:6a:8e:67:41:2a:a0:25:67:
de:a1:69:a2:bb:6f:13:09:81:ea:75:79:fb:11:75:96:e2:30:
f3:40:08:f4:ca:9b:9a:1c:32:e1:32:65:17:a6:69:b8:f8:4b:
e3:e1:fc:03:15:6d:71:13:76:1a:e8:a9:89:6c:c7:d7:58:46:
33:32:db:b7:de:64:0f:ec:14:8d:41:4a:aa:8b:39:e9:5a:f4:
b4:b3:bf:47:d2:84:a4:85:6b:09:14:e1:28:48:44:48:f8:e1:
ca:55:0c:5a:b1:86:ca:33:92:1f:b5:25:e6:07:0a:08:54:15:
89:1b:f8:4e:68:85:7a:58:df:3b:8b:ad:94:64:f7:47:e0:0a:
f4:ed:bd:d3:ba:a7:70:a6:af:97:c3:15:11:4e:e8:09:ae:fd:
f5:a4:e2:83:d7:b2:f4:c5:43:ee:64:79:db:a7:16:e8:a6:99:
3b:43:5b:bc:8b:55:df:8c:5c:74:74:b5:12:18:4f:d2:d8:b5:
f4:8d:b2:e0:a6:7a:65:42:ee:bf:2a:6b:d0:22:fa:3b:da:a2:
b0:40:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:44 2025 by rpki-client