Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKZCsxqgC8xMqJNLlC_mJu6wvmw.roa
File: JKZCsxqgC8xMqJNLlC_mJu6wvmw.roa (raw, json)
Hash identifier: 8uDWFh35KMj8JQthXN4B9Fr7vH08LOlJvkF7RUUKpnE=
Subject key identifier: 24:A6:42:B3:1A:A0:0B:CC:4C:A8:93:4B:94:2F:E6:26:EE:B0:BE:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FBE707E8932EDC1A01B032367153F562
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKZCsxqgC8xMqJNLlC_mJu6wvmw.roa
Signing time: Sun 19 Mar 2023 22:04:27 +0000
ROA not before: Sun 19 Mar 2023 22:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:fbe6:e1c5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:e7:07:e8:93:2e:dc:1a:01:b0:32:36:71:53:f5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 22:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24a642b31aa00bcc4ca8934b942fe626eeb0be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b9:0c:a6:b9:bf:69:7a:50:76:fd:9d:46:
34:8f:97:dc:c1:fe:27:58:6b:71:1b:c4:f6:e9:67:
79:63:45:2d:31:dc:88:43:fa:f3:fa:d0:d0:89:b8:
a7:6d:b7:ef:81:ff:dd:e8:da:fd:ec:0c:a1:d4:f2:
4f:ef:8a:0d:77:7f:01:a0:24:c3:bb:e6:fa:a3:0f:
f3:ac:87:48:d8:c5:02:b1:6a:ae:da:55:46:5a:ad:
a6:b2:b4:09:e1:e8:0f:2e:34:f4:31:f2:29:ea:db:
99:78:d2:e0:92:10:ee:37:8b:84:77:e0:18:84:5b:
7d:1a:47:a6:d2:ee:53:3d:d0:b4:09:7d:ba:81:fe:
c5:8b:af:b3:84:a6:15:e2:c4:46:a0:b8:99:97:bd:
77:74:69:16:05:2b:f8:45:2f:1e:e5:98:05:ca:b6:
04:2e:61:6c:50:d8:63:64:2b:66:ce:1b:5c:37:cc:
3c:06:d5:da:d9:5c:49:18:11:60:ca:bd:ec:d3:25:
ee:a4:e1:95:c3:58:a5:ff:05:ba:77:94:45:24:37:
6b:8c:21:22:2c:ad:71:aa:d1:f0:f3:81:62:3b:c9:
79:ed:03:87:7c:d1:c4:eb:18:e5:45:00:08:61:17:
8a:5d:35:45:f4:af:cd:08:0b:35:32:65:d1:7a:d1:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:42:B3:1A:A0:0B:CC:4C:A8:93:4B:94:2F:E6:26:EE:B0:BE:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKZCsxqgC8xMqJNLlC_mJu6wvmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d0:f6:8e:22:f6:0b:46:bb:ca:70:32:7c:6e:67:07:c2:a1:
f8:ab:22:f1:16:5a:72:e2:fd:e9:a6:f5:c4:53:87:be:64:0b:
27:8c:d7:a5:e0:bb:ce:b6:07:74:c6:9a:ea:b2:b8:17:fe:e5:
5c:86:d6:58:db:82:0f:ba:72:ac:69:9c:a0:ae:f9:d4:51:ce:
37:2c:c1:a4:66:ab:38:ab:06:79:6b:f3:80:00:5f:62:ee:41:
80:54:ce:4c:0b:fa:03:5a:0a:0a:72:b8:77:f8:4c:84:34:c6:
4a:6c:bb:a2:78:2a:8b:90:1d:39:9a:0a:09:b0:43:41:21:f6:
d1:12:cf:af:4e:47:ce:80:ad:95:f5:03:6c:90:2e:8c:16:96:
e5:44:49:d6:59:76:f1:1e:9b:2a:ae:ae:1d:bc:6b:13:68:00:
58:dd:e3:81:47:fb:10:84:f6:95:be:02:34:92:7b:9f:86:24:
f7:fe:31:f1:75:36:77:b7:36:41:9f:80:de:e0:af:01:10:cc:
12:e0:c8:27:c8:02:0b:5b:76:9b:fb:cc:bc:ce:45:bf:ce:0c:
53:7a:6f:3c:af:cf:fb:c8:36:b2:7c:60:6e:cf:e7:47:f8:6e:
e7:6c:df:5e:1d:f5:41:19:ba:5b:dc:2b:4c:a7:a1:90:46:aa:
18:e7:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:10:03 2025 by rpki-client