Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JdzHlGCtV2mPWFZcS_V9Ivt5CLk.roa
File: JdzHlGCtV2mPWFZcS_V9Ivt5CLk.roa (raw, json)
Hash identifier: Ypm0XqDY1qU6HWVCToch2irSNfNri452mH3E8+MmLto=
Subject key identifier: 25:DC:C7:94:60:AD:57:69:8F:58:56:5C:4B:F5:7D:22:FB:79:08:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888FF7E46AAF0542E78A225669281FB76E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JdzHlGCtV2mPWFZcS_V9Ivt5CLk.roa
Signing time: Tue 06 Jun 2023 09:09:27 +0000
ROA not before: Tue 06 Jun 2023 09:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:f7:e4:6a:af:05:42:e7:8a:22:56:69:28:1f:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 09:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25dcc79460ad57698f58565c4bf57d22fb7908b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:aa:18:84:af:d8:e7:af:b3:1c:28:c9:80:
57:87:69:fe:43:96:fd:33:bd:6d:c8:d8:0c:0d:bf:
4b:32:d3:84:09:b1:27:94:4a:2d:fa:6d:6a:47:02:
e6:12:bb:e2:a9:b1:01:c1:fd:36:ac:b7:f6:f5:2d:
12:d3:88:c8:0e:f4:64:8d:47:63:fa:0d:db:db:4c:
09:4e:af:37:c6:b6:01:2d:ad:3b:e8:79:40:4a:81:
07:19:ce:1b:9b:7b:71:d3:f7:a4:2b:31:c5:9f:27:
43:37:1f:68:58:99:90:45:29:32:4c:b8:a4:b8:0e:
7c:ef:27:0e:b5:ab:43:cb:9a:59:23:78:16:c5:68:
dc:5b:fe:f8:23:3d:46:be:eb:62:c6:4e:8f:be:dc:
c8:d9:6b:64:fd:c6:20:f2:29:e8:42:17:db:01:1a:
d2:c1:38:57:1a:f9:72:03:f4:81:cb:09:4f:af:d0:
00:29:88:aa:41:29:5e:24:41:d4:61:6b:db:53:e8:
11:61:f1:32:17:2e:c5:a1:c3:09:0f:78:fc:5e:b1:
3a:7b:72:69:ce:82:81:8a:01:ec:52:58:02:02:d1:
c5:e3:5d:f0:d2:d1:c8:b6:1b:90:2b:db:51:7c:a9:
26:92:55:d1:42:17:06:8f:9d:b4:6b:26:c5:20:de:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:C7:94:60:AD:57:69:8F:58:56:5C:4B:F5:7D:22:FB:79:08:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JdzHlGCtV2mPWFZcS_V9Ivt5CLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b6:b5:e4:da:0f:72:f9:1f:54:2a:ba:c2:de:21:bf:cd:77:
fd:97:6e:21:f8:49:8f:5e:60:5c:38:60:6a:db:e8:0f:ec:49:
49:e0:93:a6:1d:4d:70:8f:23:36:61:8d:81:5c:f3:e5:47:99:
eb:0e:11:a2:cc:55:65:19:92:24:c6:b8:2a:c7:1d:72:d5:b4:
87:0e:f5:45:d2:46:9c:9c:c9:1f:fb:8a:64:55:32:03:6f:cf:
b4:09:ec:bb:0d:89:1c:78:d9:48:7e:c8:6d:31:4e:0b:8d:13:
72:59:ef:d4:1d:f3:24:61:01:d3:36:23:51:30:1c:70:e9:8d:
be:28:ad:e5:2b:93:75:84:02:f3:57:ef:b6:09:e9:91:eb:4a:
0b:9b:e5:8d:a4:41:7d:18:06:df:aa:f6:c0:14:c8:31:cf:87:
c0:7d:96:41:bc:a2:6c:f9:9c:8a:4f:cd:69:fa:1f:a1:6a:f4:
a1:0d:ac:a0:9e:70:1e:4c:f2:0a:f7:f2:93:05:10:3e:51:aa:
ae:2c:1d:3c:39:10:91:97:9f:84:d5:20:e3:3d:ba:63:38:29:
cf:8b:4f:0d:7f:ed:91:27:88:0b:43:b1:bc:8f:cc:c9:35:f0:
84:ae:bf:fb:55:d1:13:12:79:23:c6:9b:8b:93:c5:e4:c8:96:
c4:59:1f:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiP9+RqrwVC54oiVmkoH7duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA2MDkwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWRjYzc5NDYwYWQ1NzY5OGY1ODU2NWM0YmY1N2QyMmZiNzkwOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN+qGISv2OevsxwoyYBXh2n+Q5b9
M71tyNgMDb9LMtOECbEnlEot+m1qRwLmErviqbEBwf02rLf29S0S04jIDvRkjUdj
+g3b20wJTq83xrYBLa076HlASoEHGc4bm3tx0/ekKzHFnydDNx9oWJmQRSkyTLik
uA587ycOtatDy5pZI3gWxWjcW/74Iz1Gvutixk6PvtzI2Wtk/cYg8inoQhfbARrS
wThXGvlyA/SBywlPr9AAKYiqQSleJEHUYWvbU+gRYfEyFy7FocMJD3j8XrE6e3Jp
zoKBigHsUlgCAtHF413w0tHIthuQK9tRfKkmklXRQhcGj520aybFIN6sawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCXcx5RgrVdpj1hWXEv1fSL7eQi5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSmR6SGxHQ3RWMm1QV0ZaY1NfVjlJdnQ1Q0xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+2teTaD3L5H1QqusLe
Ib/Nd/2XbiH4SY9eYFw4YGrb6A/sSUngk6YdTXCPIzZhjYFc8+VHmesOEaLMVWUZ
kiTGuCrHHXLVtIcO9UXSRpycyR/7imRVMgNvz7QJ7LsNiRx42Uh+yG0xTguNE3JZ
79Qd8yRhAdM2I1EwHHDpjb4oreUrk3WEAvNX77YJ6ZHrSgub5Y2kQX0YBt+q9sAU
yDHPh8B9lkG8omz5nIpPzWn6H6Fq9KENrKCecB5M8gr38pMFED5Rqq4sHTw5EJGX
n4TVIOM9umM4Kc+LTw1/7ZEniAtDsbyPzMk18ISuv/tV0RMSeSPGm4uTxeTIlsRZ
H54=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:52 2025 by rpki-client