Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgYzmW5Iv3P53WotxlszEdbMxmE.roa
File: JgYzmW5Iv3P53WotxlszEdbMxmE.roa (raw, json)
Hash identifier: G+cUVVpnEU3Y/UqYHsI/V+FIze1CFR5Yhx1QneBZagA=
Subject key identifier: 26:06:33:99:6E:48:BF:73:F9:DD:6A:2D:C6:5B:33:11:D6:CC:C6:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187620AB8FE78E49D659F605A53DDE933FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgYzmW5Iv3P53WotxlszEdbMxmE.roa
Signing time: Sat 08 Apr 2023 18:04:42 +0000
ROA not before: Sat 08 Apr 2023 18:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:620a:6d4b/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:62:0a:b8:fe:78:e4:9d:65:9f:60:5a:53:dd:e9:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 18:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=260633996e48bf73f9dd6a2dc65b3311d6ccc661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:9d:11:40:9e:11:b7:8a:75:ca:fd:d4:c0:
cc:55:e0:6d:2b:67:b0:52:90:2e:1e:43:73:3e:cb:
54:ce:e6:72:9d:7b:7d:a6:fe:e2:8f:74:38:18:f3:
94:a4:f5:85:51:8f:49:a2:d4:8a:9e:e6:c1:aa:2d:
30:53:34:09:73:d8:79:f2:3b:02:4a:a3:79:f6:0f:
de:47:36:e4:f9:37:a7:1e:ca:84:52:84:a4:87:6f:
5e:7d:69:00:6d:b8:31:1f:6e:52:04:7d:8a:4e:09:
93:72:8a:85:1e:d8:75:db:23:53:2c:14:72:f4:28:
38:72:57:2b:0f:d7:50:73:c7:c2:62:2c:d4:b5:76:
be:53:88:40:41:04:05:6a:d6:d7:aa:b8:36:f4:04:
e7:a0:46:c5:6c:a2:57:71:e8:c2:47:3f:eb:e9:95:
e0:0e:bf:e6:b4:86:3d:92:64:a5:fc:c2:db:d1:e1:
0b:20:dd:1f:3a:e3:54:1d:1f:42:ca:45:2c:78:ad:
d8:fc:fa:62:90:b8:80:ce:1a:67:8e:71:82:0c:41:
f8:04:a6:0c:5f:f0:3a:0b:4b:a6:46:27:90:ef:38:
46:a7:20:5a:f4:12:f8:5d:af:42:2a:4a:91:15:89:
e7:57:50:2d:36:56:57:3f:47:cf:12:04:7f:9e:36:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:33:99:6E:48:BF:73:F9:DD:6A:2D:C6:5B:33:11:D6:CC:C6:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JgYzmW5Iv3P53WotxlszEdbMxmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:61:51:2b:07:39:af:85:a7:e6:d1:a4:a3:1c:18:4d:f4:ba:
5d:43:9e:d7:e7:fa:68:48:c0:1f:a0:3f:0b:d0:77:37:ba:0b:
0d:40:94:bf:28:02:ad:69:3b:6b:8e:cf:f1:39:b6:b1:d4:51:
e2:f3:f2:33:23:39:cf:40:7f:39:6a:13:da:46:02:0e:b6:d9:
27:b3:0b:65:54:3b:c0:e1:07:b5:4a:b8:f8:48:70:15:d4:4a:
b4:04:05:66:37:7e:7a:ad:8d:99:aa:8a:30:09:9e:3a:d0:e1:
d1:27:83:22:94:cd:52:b7:5f:c8:3c:30:38:f4:f0:ed:77:1e:
ec:a2:c6:c0:99:45:cd:4f:48:0c:95:50:72:a8:9f:32:04:ca:
9e:2a:17:b9:42:a4:49:01:da:2a:f3:c0:1a:6c:be:37:0c:6f:
9d:58:c6:9d:21:19:d0:ec:53:62:fd:2e:c5:1a:3f:ad:67:40:
62:a3:f0:a3:44:e3:6c:77:3e:e0:b0:f5:3c:79:61:56:24:88:
12:11:3a:cc:56:9c:df:22:bf:48:aa:94:41:46:db:f5:ec:b1:
54:d0:92:e5:6a:be:7d:9e:80:a6:5d:f0:99:4a:e3:89:ea:73:
39:05:fd:ff:84:96:cc:bb:f4:81:d2:3b:7a:b5:0c:d8:5d:e4:
f6:55:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:13:56 2025 by rpki-client