Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JI_zCvs_Bylw2LlkSjD6gt44Des.roa
File: JI_zCvs_Bylw2LlkSjD6gt44Des.roa (raw, json)
Hash identifier: jcAW95Dzkl6x9WWzot+Ks9SOsIku7UTnb1iEZDfZT+k=
Subject key identifier: 24:8F:F3:0A:FB:3F:07:29:70:D8:B9:64:4A:30:FA:82:DE:38:0D:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018750E7B26F9DA2F758A7D0596418EC6D44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JI_zCvs_Bylw2LlkSjD6gt44Des.roa
Signing time: Wed 05 Apr 2023 10:12:54 +0000
ROA not before: Wed 05 Apr 2023 10:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:e7:b2:6f:9d:a2:f7:58:a7:d0:59:64:18:ec:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 10:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248ff30afb3f072970d8b9644a30fa82de380deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:bf:24:f3:40:fd:19:1d:d6:b2:ae:68:a2:
29:6c:9a:9a:af:c1:e1:04:0e:7e:4c:6a:c0:83:18:
d2:43:9c:0e:0e:c7:be:f7:ca:f1:8d:8b:43:62:6d:
df:5a:ce:82:7b:34:b0:01:3f:a5:ad:84:83:7e:5d:
94:de:a5:95:fa:86:2b:b8:71:19:86:a0:85:24:81:
d0:ac:28:ab:66:68:07:a1:bf:8d:da:e9:e4:0b:f4:
ab:f4:b0:44:fc:a4:e4:09:0c:b8:2e:c1:e1:d3:81:
62:1d:63:c7:6c:89:3d:70:ca:7c:d0:18:18:67:11:
df:69:88:6f:a6:a9:01:77:66:32:9c:b9:90:01:3f:
7e:7c:d9:43:e2:8f:9a:23:7e:4c:b6:0c:10:cb:3f:
b6:81:3e:8f:db:59:ef:fa:29:09:9a:43:28:15:10:
dc:4d:24:19:53:3f:d9:a6:88:a8:9c:f4:84:cf:47:
40:60:4e:56:21:37:f2:62:e5:bd:40:08:3e:24:0a:
d8:b4:72:68:a0:8f:3e:3e:66:b9:01:99:d4:4b:a8:
d3:9d:04:57:64:79:aa:f8:83:3a:d6:1b:f4:bd:d1:
66:d0:d7:1c:64:2a:1e:a0:fd:e4:4a:3e:e2:6c:e6:
fd:21:8b:8d:5c:64:98:f6:4b:a5:47:ec:68:42:12:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:F3:0A:FB:3F:07:29:70:D8:B9:64:4A:30:FA:82:DE:38:0D:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JI_zCvs_Bylw2LlkSjD6gt44Des.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:52:0d:83:1f:36:1e:cf:dd:da:7e:94:33:a0:36:bf:da:8c:
b6:85:84:75:61:34:f1:d7:d7:bc:1c:03:bf:81:36:ce:9b:a1:
12:06:13:dd:1a:77:d8:25:4f:c6:7e:86:ba:56:f6:b5:47:7a:
62:be:77:b9:64:69:af:d7:34:9a:96:c5:5c:df:14:17:ae:be:
b5:fa:5d:17:b8:6a:24:dc:86:be:b8:93:4d:79:f3:56:57:aa:
26:4e:0d:4f:33:bd:49:8d:14:66:4f:cf:14:7f:c4:f4:f8:6a:
e4:d5:79:ef:75:4a:5f:8d:79:4e:81:b7:d9:b9:3a:fa:79:09:
e0:99:68:e8:24:6c:71:b5:97:cd:85:77:39:78:4b:a0:29:94:
0b:59:18:da:5a:e9:75:4c:ad:8e:c3:51:4b:3c:3f:a0:97:66:
4f:f9:80:c1:29:31:29:c8:44:19:78:b0:d5:11:79:ad:af:a0:
36:e6:eb:ea:dd:71:71:7c:36:c3:57:28:0d:ca:b7:be:9c:35:
06:1c:f1:f2:7d:64:1a:9c:73:04:48:67:85:87:bd:4d:e7:94:
d7:1f:11:78:8f:3c:2b:e6:98:db:04:d1:4f:19:2b:c2:05:82:
21:d4:e5:76:99:fc:1d:e2:17:1f:69:87:c2:cd:9d:05:a5:38:
fe:1d:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:42:25 2025 by rpki-client