Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jiq-OPehUCFc5T8U95DYVbO04iQ.roa
File: Jiq-OPehUCFc5T8U95DYVbO04iQ.roa (raw, json)
Hash identifier: HZZ2gK8dzX5/jbwGniLH/mTWTz4xlzJ1RP7lrtS1A5o=
Subject key identifier: 26:2A:BE:38:F7:A1:50:21:5C:E5:3F:14:F7:90:D8:55:B3:B4:E2:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BB28D4DD5D40C95757B8B62088BC551D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jiq-OPehUCFc5T8U95DYVbO04iQ.roa
Signing time: Tue 07 Mar 2023 08:21:00 +0000
ROA not before: Tue 07 Mar 2023 08:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:28:d4:dd:5d:40:c9:57:57:b8:b6:20:88:bc:55:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 08:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262abe38f7a150215ce53f14f790d855b3b4e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:4f:c9:51:ef:94:e6:97:18:78:45:e2:a5:
88:28:1e:14:f1:fa:8f:d2:84:f0:8b:bc:76:88:2f:
71:05:49:9b:0e:f4:a1:5f:38:37:21:29:2b:a1:5c:
b4:19:68:f6:eb:3c:af:7b:8b:31:63:48:40:8b:55:
07:57:f1:6e:35:4f:cf:2e:da:c2:d1:87:30:24:54:
c0:af:4e:4e:be:f5:79:ac:92:3e:ad:e2:05:99:0f:
3b:a9:69:ad:db:ce:a2:35:76:7d:97:56:67:dc:a3:
34:51:e5:b5:7d:dd:be:ea:e1:f0:d9:77:16:b1:8a:
91:ed:1d:ef:35:f3:ab:1d:8f:d2:4a:8e:e8:91:d1:
ce:48:09:68:2a:83:c7:49:c6:4a:c9:09:3a:c7:cf:
17:44:e2:14:06:cd:1c:ce:42:11:f6:97:32:b7:f6:
70:a6:9c:80:cf:9b:29:90:d0:80:73:52:ed:2d:96:
ba:7d:1c:42:18:5d:6c:1b:20:dc:ef:dd:bb:82:b1:
6c:1e:36:e4:95:92:06:b2:d4:a7:86:14:0e:4f:e7:
b6:57:5f:50:17:51:1b:03:a4:3d:95:65:8b:78:ae:
0d:0d:77:ed:06:13:9e:1a:b0:27:c3:be:55:23:0d:
4e:94:bc:e4:58:a3:6c:07:a1:ce:6f:0e:99:82:f7:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:BE:38:F7:A1:50:21:5C:E5:3F:14:F7:90:D8:55:B3:B4:E2:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jiq-OPehUCFc5T8U95DYVbO04iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:7e:cb:bf:e3:36:bd:26:56:61:fb:0d:22:a6:c3:81:6a:71:
48:4c:a0:ba:42:78:6d:23:8b:7d:a7:b2:e2:6c:0f:f0:99:bf:
76:89:49:b1:67:5d:4d:22:e3:b7:26:2b:cc:00:06:ef:f2:f3:
28:17:a5:28:19:41:51:46:31:ea:e0:cb:e4:af:b2:08:e5:89:
5d:6c:31:d1:12:f5:de:82:c9:94:30:f4:74:ee:38:a2:34:92:
e3:67:cf:0f:16:15:74:8d:32:2d:c4:7e:60:f0:24:96:ff:ea:
b4:09:df:3b:c9:93:35:49:80:e9:e7:16:fb:70:fb:50:81:98:
f5:d6:fa:7a:53:1b:fd:0f:f3:bb:79:9d:b5:98:da:cd:0a:be:
77:44:5b:44:af:8c:e8:27:ac:fd:96:a2:80:54:b8:e8:cc:43:
19:0e:fa:1f:cd:03:c3:85:f6:64:50:00:e5:60:02:9f:f8:eb:
61:1d:8b:db:39:be:bc:2b:a3:24:d1:ae:36:30:dd:c7:fa:ad:
fe:dd:76:8f:03:a7:db:ef:55:f0:5e:0e:32:60:a2:d0:35:5c:
0e:29:23:e4:66:d1:12:85:53:d3:a4:3d:f1:b9:1e:57:9a:7c:
90:9c:cf:92:d8:01:07:24:6c:d0:f3:06:d3:64:07:e8:61:f4:
f0:4e:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:11:31 2025 by rpki-client