Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JX3szM4090nCQ7Vkye86Jpm-N3Q.roa
File: JX3szM4090nCQ7Vkye86Jpm-N3Q.roa (raw, json)
Hash identifier: b1U3fs52W88SZ4AD0OJrfUCcytfAD6bpFbv5CmVlCu0=
Subject key identifier: 25:7D:EC:CC:CE:34:F7:49:C2:43:B5:64:C9:EF:3A:26:99:BE:37:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875D8BE7A4CC9A0AFD5F0800E9F58A8A6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JX3szM4090nCQ7Vkye86Jpm-N3Q.roa
Signing time: Fri 07 Apr 2023 21:07:42 +0000
ROA not before: Fri 07 Apr 2023 21:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5d:8b:e7:a4:cc:9a:0a:fd:5f:08:00:e9:f5:8a:8a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 21:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=257decccce34f749c243b564c9ef3a2699be3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:d7:df:25:2e:8b:72:fa:df:4f:df:71:d9:
18:bb:d7:2d:75:5c:80:ab:ab:08:e1:b4:6c:99:19:
29:a6:79:95:d1:42:71:d3:fe:0a:02:7b:1f:0e:8a:
89:16:fa:49:e2:fa:4a:45:11:af:04:e7:37:88:b1:
ec:d3:ab:1e:b6:fb:ef:85:22:f6:8b:fc:db:f4:f5:
f1:3d:e2:86:81:4e:b4:a7:ac:e8:28:7a:5c:d9:2f:
c5:10:bc:57:26:74:16:68:a2:bb:c8:00:ef:d3:ee:
7a:c9:f8:b8:01:db:a6:1d:8a:a6:c3:85:1a:13:e8:
9f:10:73:f9:ce:2e:f1:68:23:40:45:c8:b4:d5:5a:
30:70:38:f4:3b:0d:11:f3:57:0b:06:f3:93:60:4a:
4d:44:44:f6:5f:72:e2:ab:a0:61:3e:0a:01:b5:92:
91:7e:a6:77:c6:05:f1:62:98:a8:e4:76:83:ec:43:
29:cd:8d:4d:65:13:f3:3d:4d:ca:1d:88:22:d6:41:
46:91:b9:b0:2b:5b:c2:d9:6a:bd:d3:e5:08:dc:64:
cf:29:d8:a5:ce:db:78:7c:43:d7:42:95:90:9f:3a:
36:8d:51:b2:eb:50:31:9a:23:29:c8:9e:b4:b0:33:
63:61:2b:e4:6c:d2:84:32:2c:27:71:43:dc:c5:ec:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:EC:CC:CE:34:F7:49:C2:43:B5:64:C9:EF:3A:26:99:BE:37:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JX3szM4090nCQ7Vkye86Jpm-N3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c1:8c:65:35:1c:ae:99:9c:15:8b:d7:d4:fa:8f:8e:10:ce:
94:cd:73:a5:08:53:57:37:1f:b6:47:d4:7b:68:7f:60:09:da:
f3:d7:70:41:c8:30:02:0e:31:d7:f9:89:dc:fc:21:a6:7a:80:
10:37:d7:10:97:98:ff:e1:ba:40:2a:15:19:12:ac:31:41:1a:
ad:20:a4:98:6c:69:0f:a2:f6:4c:d1:a6:80:f7:ed:e9:64:9d:
5a:a3:03:17:8f:b1:ae:f1:2b:67:e3:3d:15:d4:e8:d6:25:2f:
42:a1:f0:3f:d4:28:52:71:81:52:db:c0:f8:0f:32:0c:d1:5e:
36:37:38:87:ee:68:0a:bf:14:42:14:84:fc:09:d4:6f:8a:b8:
e2:46:85:e7:36:5f:1f:0b:cb:95:62:78:29:cb:58:b5:c3:30:
2a:65:cf:05:09:6e:c3:05:d1:bb:cb:3b:c6:71:4c:1a:da:b4:
33:fc:28:30:aa:3b:ea:cd:7b:73:f8:fc:85:91:26:a5:f7:4e:
3a:44:e1:ef:83:b6:4a:e8:30:b5:21:d7:f0:e0:50:ca:12:bb:
71:22:f3:f4:2f:2a:e1:ab:f1:52:f0:78:3a:87:d2:67:c8:84:
e4:67:90:a7:0f:3c:70:6d:4b:23:80:7f:9f:16:da:83:f7:59:
4b:9c:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:39 2025 by rpki-client