Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JYXO_YCxnqKo7Tt1qKayl7MGW5U.roa
File: JYXO_YCxnqKo7Tt1qKayl7MGW5U.roa (raw, json)
Hash identifier: rEFEVfw8gkJXUBLeOTtm2KLqiSlbh11ytWyZHGssZEU=
Subject key identifier: 25:85:CE:FD:80:B1:9E:A2:A8:ED:3B:75:A8:A6:B2:97:B3:06:5B:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187243E5243B9F1889721CDCD17A27A1ADC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JYXO_YCxnqKo7Tt1qKayl7MGW5U.roa
Signing time: Mon 27 Mar 2023 18:04:36 +0000
ROA not before: Mon 27 Mar 2023 18:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:243d:e26a/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:3e:52:43:b9:f1:88:97:21:cd:cd:17:a2:7a:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 18:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2585cefd80b19ea2a8ed3b75a8a6b297b3065b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:d2:d3:d1:56:e5:93:64:ff:c1:d0:fd:94:
1b:16:2c:1d:2c:7f:56:a5:e9:15:64:53:fa:91:a2:
30:98:e6:90:4c:e3:27:fc:19:2f:d1:a7:38:84:bb:
3f:91:77:de:19:b5:0d:76:43:fe:8c:e7:3c:03:41:
c9:d0:18:75:11:60:3f:e6:0a:df:8b:2f:73:96:60:
cb:23:cb:40:e1:c2:60:c0:98:c5:76:11:1f:d8:7a:
7f:4c:e9:0d:93:85:c8:bf:f2:31:24:8b:a9:60:c5:
cd:fe:dd:f9:1b:8b:78:fc:dd:81:6f:4e:4e:e7:ab:
66:18:44:2e:ce:52:79:ac:39:95:4b:1a:45:a8:46:
e6:97:33:1c:e6:d0:e1:14:75:5e:0a:94:dd:1f:fb:
a9:93:1d:2e:83:ea:8a:be:1e:15:83:35:16:7c:c1:
4f:f0:1f:f8:e6:13:df:20:2d:db:ba:89:1f:58:91:
21:66:45:56:8e:cb:85:d3:37:03:1c:f7:c9:52:fd:
49:04:ff:73:e5:e9:9e:fa:b1:d5:94:57:09:74:b5:
5f:82:7f:4d:96:72:e5:b5:af:76:f7:75:09:35:be:
de:00:c5:ca:1b:e9:8b:5e:78:d1:f3:9e:03:9a:36:
1e:5d:23:a6:79:03:4c:bd:16:da:7d:01:f4:c7:1e:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:CE:FD:80:B1:9E:A2:A8:ED:3B:75:A8:A6:B2:97:B3:06:5B:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JYXO_YCxnqKo7Tt1qKayl7MGW5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:f8:d3:83:46:84:df:69:d1:0c:f8:09:55:c5:b1:07:c2:90:
bb:3d:92:f7:4c:1c:7f:b9:94:0c:87:fc:0b:2e:97:0d:57:04:
02:20:72:e3:88:34:6f:49:ee:dd:67:8a:2e:47:c7:93:97:65:
10:d7:83:14:88:d3:21:da:46:a6:47:f9:b8:4c:a8:0d:b7:6a:
a1:40:1d:7a:3a:3f:c5:9e:a4:c7:8c:ad:4a:f3:0d:07:3c:4c:
23:4f:0c:e5:85:24:a8:3e:58:50:2f:9b:9b:60:09:64:b9:75:
5f:e6:80:3e:20:97:78:0a:32:a4:ab:86:58:96:cb:5a:e0:79:
aa:25:a8:4f:5c:80:9b:02:7b:e8:fd:a4:10:f6:da:19:6e:e3:
9b:82:31:be:38:fb:9a:89:05:02:53:7b:6e:3d:ed:3e:de:73:
e7:1c:1f:3a:88:e6:08:33:56:2f:f9:76:f2:f8:5c:e3:ed:71:
65:a3:6c:33:bc:4a:8a:fa:79:89:c9:8b:f0:5e:ae:06:1a:77:
6f:32:9a:3d:2d:2e:fa:75:e1:d3:88:6b:b7:f6:f5:66:1c:e1:
4c:3e:be:73:3a:c2:ce:4f:8d:51:75:4c:b7:61:0d:96:1c:61:
15:90:c1:62:ef:73:76:00:57:6d:96:2c:ab:57:6d:9a:e7:3e:
f9:9e:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:41 2025 by rpki-client