Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeXJbzdkDN7jZQrqICqC5q0UE6E.roa
File: JeXJbzdkDN7jZQrqICqC5q0UE6E.roa (raw, json)
Hash identifier: wJ1QONwtevm+kQnN1JTnV+EwJH4h5K2D/tLnVbcp01E=
Subject key identifier: 25:E5:C9:6F:37:64:0C:DE:E3:65:0A:EA:20:2A:82:E6:AD:14:13:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B7053086B1C770F3F4035EAF48672F4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeXJbzdkDN7jZQrqICqC5q0UE6E.roa
Signing time: Wed 02 Aug 2023 16:11:57 +0000
ROA not before: Wed 02 Aug 2023 16:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:05:30:86:b1:c7:70:f3:f4:03:5e:af:48:67:2f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 16:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25e5c96f37640cdee3650aea202a82e6ad1413a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:a1:a7:76:cf:13:c7:3e:57:42:e7:d6:fe:
1d:88:0d:e0:e5:ad:72:33:a9:fa:25:8f:17:c6:ae:
2e:39:11:41:1a:13:4d:ec:fe:b8:5e:55:aa:80:1b:
05:5e:91:06:6b:50:21:68:d2:d8:0c:a1:2f:0d:49:
44:63:42:73:be:ac:8d:1d:dd:66:d1:24:33:5f:88:
c1:58:b7:9b:4d:cc:7a:82:7b:33:ed:bd:9b:6a:77:
8b:43:1f:53:94:d0:b3:b9:78:93:40:af:60:a7:3a:
78:34:b8:6d:e5:d0:b5:03:c4:8d:db:79:f8:9b:3e:
11:f1:ad:87:7c:ed:35:6f:5e:e0:83:38:4e:20:f6:
1f:27:af:96:eb:c5:4f:32:54:52:f8:4d:5d:cf:e1:
5b:a1:a9:ec:14:97:e1:bd:73:fe:1d:36:e1:48:5a:
74:10:e9:a9:6e:5c:6f:d1:d0:99:7d:ac:6e:93:68:
2b:e6:2c:60:aa:d6:2d:e5:9e:ed:25:51:8e:61:26:
e4:c1:dc:49:6e:93:24:e2:3f:8f:fb:e3:c5:4f:29:
a1:5c:8c:7b:c0:c9:2e:85:a2:57:7a:bb:4f:ef:db:
49:68:65:b6:c8:12:8c:3d:11:32:3e:4e:78:a8:fe:
fd:ff:53:9e:23:70:59:ce:7c:da:e4:81:94:94:ac:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:C9:6F:37:64:0C:DE:E3:65:0A:EA:20:2A:82:E6:AD:14:13:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JeXJbzdkDN7jZQrqICqC5q0UE6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:68:a8:3b:db:36:8e:86:a8:63:89:d7:99:1b:c7:28:47:14:
9b:54:0f:bf:8f:21:28:9c:7f:37:f0:70:47:a1:ea:f3:67:03:
15:7a:5b:94:75:ae:20:34:bc:fd:f8:9b:de:5a:be:c5:cc:1e:
2d:db:88:b9:d9:3a:9c:ac:36:08:9b:16:9c:08:ed:d4:a6:68:
aa:a1:d6:7f:c8:e2:37:bc:f6:a0:9c:7c:09:66:73:22:f5:45:
43:13:dd:2a:76:21:eb:1d:ce:67:ae:58:8e:b7:3a:85:8d:c5:
70:f6:f1:43:a9:4f:4b:c7:83:97:83:b5:76:fa:ee:2a:0c:2f:
b2:09:ed:16:6c:2e:30:02:d6:43:6f:d9:1c:78:df:db:7a:a9:
ac:4b:f6:c2:c6:9a:97:c9:04:e3:e7:fc:24:b9:b8:0d:7b:14:
04:c1:4e:c3:d1:3c:0a:62:55:29:19:f9:a8:7f:db:0d:38:96:
b2:a9:00:8b:1c:c0:e0:ff:b0:f8:5a:e9:aa:88:1c:91:d2:33:
85:4c:bf:0e:11:21:6a:c7:2f:f6:0c:0a:3f:62:a6:13:ee:89:
cd:93:e6:64:3a:be:c9:a1:79:83:4a:e3:6a:94:ec:c0:db:7a:
55:7d:3a:c8:ad:06:73:de:14:ae:aa:58:2d:c6:33:a7:82:df:
aa:f3:13:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:19:47 2025 by rpki-client