Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JezzQA8g4pR6h0Q-jNMVB80VZZ4.roa
File: JezzQA8g4pR6h0Q-jNMVB80VZZ4.roa (raw, json)
Hash identifier: S/g8QHnXfyST/7t6pAK8kc6da8JuWqjXu18kqzWHNHE=
Subject key identifier: 25:EC:F3:40:0F:20:E2:94:7A:87:44:3E:8C:D3:15:07:CD:15:65:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E55F37665E3FA0AC151FDB9E32934DCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JezzQA8g4pR6h0Q-jNMVB80VZZ4.roa
Signing time: Wed 15 Mar 2023 13:04:27 +0000
ROA not before: Wed 15 Mar 2023 13:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:e55f:613/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:5f:37:66:5e:3f:a0:ac:15:1f:db:9e:32:93:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 13:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25ecf3400f20e2947a87443e8cd31507cd15659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:45:0a:04:d1:2f:c2:50:25:e5:ff:8b:50:
a9:77:f8:45:d8:85:75:d6:af:5d:03:7b:a7:a6:24:
76:cd:17:99:73:4a:54:4e:5c:66:10:3c:a2:43:a7:
b2:c2:8a:ee:c2:85:ab:5b:65:2d:9e:28:75:d4:93:
c2:6d:11:2f:c9:58:e6:d7:80:ba:dc:01:ba:b9:04:
57:31:78:bf:f7:7e:b5:89:f0:8f:2a:3c:cc:25:58:
0c:1b:90:d0:e2:29:26:4d:31:8b:bb:80:89:12:fd:
fb:46:d7:e2:d5:6f:38:ce:04:8f:f9:df:66:93:2a:
24:14:c3:d2:f0:e6:e7:ea:ee:39:b5:30:ae:76:a6:
be:74:d6:43:1d:05:80:5e:f8:65:58:25:03:6e:3c:
50:c9:11:1c:b0:53:d9:4e:2c:73:98:57:5f:75:5d:
23:41:9f:34:b8:1b:50:cb:ba:61:36:aa:eb:ad:58:
63:4b:12:66:0a:07:7a:aa:6b:1d:da:b8:52:68:d0:
8e:b0:14:60:35:ab:fa:81:76:92:54:49:1b:f8:96:
33:c7:16:a0:bb:ef:c6:d5:b6:c9:b3:fa:cd:46:dc:
45:77:57:5f:97:ad:25:14:a9:b5:5e:25:9a:95:ed:
d0:0b:de:61:a1:77:0c:bd:2d:84:47:f5:b3:ee:db:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:F3:40:0F:20:E2:94:7A:87:44:3E:8C:D3:15:07:CD:15:65:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JezzQA8g4pR6h0Q-jNMVB80VZZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:47:ae:33:f7:54:8d:ed:ca:4a:4e:34:58:2f:55:77:64:24:
31:da:2e:59:18:40:f0:ea:f6:8d:80:19:62:9d:0d:b6:7e:91:
d3:fd:01:6b:a0:b7:0c:36:c0:e6:21:f6:39:9d:aa:cf:35:85:
7b:8b:45:79:bd:c7:40:ca:0d:01:1b:bc:d6:fc:14:39:0d:ec:
c8:f4:7f:c7:c3:ae:2b:14:72:4a:9e:94:30:b1:7e:22:da:96:
eb:b7:73:72:30:5f:80:34:47:b7:2c:24:32:33:9d:f3:9e:c3:
c1:f1:a7:a7:5a:55:ef:c6:a2:50:d2:b3:31:e5:85:9c:22:27:
20:32:41:6a:1d:7a:65:54:4b:f4:97:79:82:5e:e5:84:6c:d2:
60:77:c2:51:cc:36:db:5f:fd:8e:ce:a4:1f:a0:66:2a:33:68:
6d:a6:a5:4c:6a:3d:79:22:15:7d:af:8f:50:3d:1b:61:3e:70:
36:6f:16:49:7b:70:7b:2f:af:88:4f:07:7b:91:dd:4b:cc:67:
76:2f:a0:d1:81:7f:cd:e8:f1:85:b6:d4:d2:ea:37:3b:2b:7b:
f6:8c:81:e1:74:6e:f8:bc:d0:19:4e:23:cc:0c:7b:a8:7a:48:
8e:84:8b:f4:c7:70:77:73:5d:61:3b:c1:72:db:2e:aa:ce:4e:
f7:90:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:45:16 2025 by rpki-client