Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKqqE17Z1l0LuPcBMeSx0P3b8wM.roa
File: JKqqE17Z1l0LuPcBMeSx0P3b8wM.roa (raw, json)
Hash identifier: 9as88d1qTPEWklIp906ARsHDtIeP/IoIo6LgoSN6sSE=
Subject key identifier: 24:AA:AA:13:5E:D9:D6:5D:0B:B8:F7:01:31:E4:B1:D0:FD:DB:F3:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AA263AC2CCCA1ABBBB1C709B03F25E0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKqqE17Z1l0LuPcBMeSx0P3b8wM.roa
Signing time: Sun 11 Jun 2023 11:10:12 +0000
ROA not before: Sun 11 Jun 2023 11:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:26:3a:c2:cc:ca:1a:bb:bb:1c:70:9b:03:f2:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 11:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24aaaa135ed9d65d0bb8f70131e4b1d0fddbf303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:ed:2a:d4:a7:66:a6:99:61:58:9d:ba:a3:
cd:b9:e4:df:55:ad:5b:87:a7:d5:17:b4:0f:ed:7f:
07:f7:b4:f1:fd:db:04:86:85:b0:30:a5:2c:fd:e8:
78:3f:26:35:22:a3:bf:d6:d2:6e:dd:de:63:a0:7b:
75:d8:c5:d9:72:1b:a0:65:1b:7b:cd:ef:5a:e5:dd:
51:f0:4c:c7:82:1f:3e:2f:9f:93:59:c3:40:c4:fd:
3f:e6:90:de:c9:38:71:fa:53:eb:6c:07:de:c9:97:
a0:3a:da:78:05:67:ff:30:cf:84:cf:07:e3:00:e3:
63:4c:1e:f5:01:9b:b2:ce:b5:f9:b8:42:e7:cd:e4:
98:70:60:cb:27:b8:f6:62:94:42:63:ce:dd:d9:65:
61:7b:69:f1:0d:e7:31:74:fa:12:85:01:1d:e1:eb:
59:53:92:5b:b9:29:ed:6e:78:3e:f4:43:d1:f7:7a:
b2:9a:55:d5:70:db:8c:c7:53:b6:cc:03:fb:11:51:
ce:33:bd:63:09:48:d1:72:c9:0b:d8:ff:10:7e:1a:
1c:50:f5:62:23:b8:2e:0e:7c:5b:64:28:45:52:24:
8f:54:02:37:a1:da:e7:f0:77:5b:23:dd:a1:1f:b3:
60:ef:90:fd:f1:1a:f9:9b:16:67:0f:3e:41:ce:1c:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AA:AA:13:5E:D9:D6:5D:0B:B8:F7:01:31:E4:B1:D0:FD:DB:F3:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JKqqE17Z1l0LuPcBMeSx0P3b8wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:b6:c9:78:a5:bf:92:73:46:16:ef:d8:86:b9:b1:33:f3:e9:
c9:d4:84:93:e6:3c:9c:01:e4:5d:58:03:18:50:a9:c4:27:d0:
17:0d:45:7e:c0:ee:6f:28:31:85:bb:da:f9:48:32:54:d4:fd:
17:c1:48:ae:70:16:9e:57:9f:37:63:40:08:3d:fb:97:12:33:
26:3f:20:c3:8a:12:25:16:82:ea:6a:47:c7:1e:0c:6c:33:d1:
03:5c:2e:63:37:fc:bb:48:39:e8:f8:1b:5e:6f:32:25:04:b9:
af:64:ed:f1:6d:10:65:94:66:2e:b1:36:50:41:d1:11:4b:9c:
9d:37:46:a6:10:ed:a6:2b:36:91:fd:f1:cf:0e:50:34:64:b8:
21:69:d4:f9:3f:dd:e7:8b:2e:97:fa:61:a1:3f:ef:b1:1e:41:
e0:de:d5:5d:df:a0:cd:3b:6d:41:29:b2:60:b2:56:75:39:5a:
a7:9b:4b:90:51:ad:ce:70:39:92:d6:8a:9a:7c:fa:0a:08:c5:
21:35:4f:dd:9e:ba:ba:13:68:a0:3e:e8:57:34:11:fa:32:01:
8d:f2:69:4e:25:b6:73:3c:20:9f:1c:74:4f:28:5f:fd:df:e4:
8c:59:2d:c4:04:b4:26:4c:8c:7f:6d:28:6e:24:46:46:06:3d:
38:5d:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:15:55 2025 by rpki-client