Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsPRZjvZNp3hEuQ9tLXvg2xs5Wk.roa
File: JsPRZjvZNp3hEuQ9tLXvg2xs5Wk.roa (raw, json)
Hash identifier: hcGMRvCqN2JNqbCoMvwvqMt2XPXbiVLMtXheX4Clr10=
Subject key identifier: 26:C3:D1:66:3B:D9:36:9D:E1:12:E4:3D:B4:B5:EF:83:6C:6C:E5:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187771201930ABE427AAB6850DA759110E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsPRZjvZNp3hEuQ9tLXvg2xs5Wk.roa
Signing time: Wed 12 Apr 2023 20:04:41 +0000
ROA not before: Wed 12 Apr 2023 20:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:7711:e67a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:12:01:93:0a:be:42:7a:ab:68:50:da:75:91:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 20:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c3d1663bd9369de112e43db4b5ef836c6ce569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:b4:cb:a9:5d:b1:1c:23:82:c6:9b:4e:0b:
40:0b:54:55:4e:92:c9:fc:63:2d:a8:d0:53:22:54:
88:a1:d5:a2:4d:7d:91:31:be:8c:59:a2:be:51:6f:
1b:84:5f:78:77:3b:b4:65:d6:c0:27:bf:42:44:42:
db:9b:1d:00:ae:e1:06:e4:23:08:a8:5f:72:b2:27:
47:ae:5c:be:57:6a:0a:4d:1b:18:62:64:a9:79:4c:
7b:7e:06:c5:59:aa:5d:1b:b0:55:9d:44:53:31:5f:
85:46:0e:02:13:44:f3:a6:7e:15:3e:08:89:a5:95:
1d:8d:97:8c:95:f3:c0:83:30:70:ba:3d:7c:a8:02:
de:47:fa:8d:84:f9:ef:c2:5c:43:42:de:69:a2:5a:
a5:9a:3b:82:c2:bf:39:64:22:3a:73:1c:be:c9:38:
eb:9f:6d:99:d2:85:c8:9f:0d:39:be:8b:a8:c5:9d:
25:74:2d:1a:25:4f:91:16:32:09:cb:64:85:08:9f:
0b:54:1d:42:df:d2:09:0a:5c:55:4c:9f:fd:37:30:
d2:08:82:11:5c:b0:82:ed:5f:9f:89:d2:c5:4f:7b:
31:00:92:81:00:a2:1f:ab:da:f6:e5:ef:e0:56:3f:
32:f0:6d:4a:eb:f6:b2:7d:56:50:3b:69:b5:e5:e7:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:D1:66:3B:D9:36:9D:E1:12:E4:3D:B4:B5:EF:83:6C:6C:E5:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsPRZjvZNp3hEuQ9tLXvg2xs5Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:43:fc:da:86:3d:6a:e3:47:97:0a:37:68:f9:0b:6f:35:fd:
8d:14:cf:07:4b:e6:2f:33:bf:5b:bd:4d:75:0e:a9:5c:a1:41:
c2:c8:d9:1e:a5:be:76:24:c4:08:a7:70:eb:c7:21:e8:7d:e5:
3a:98:3f:df:77:63:76:23:c0:07:d9:c4:12:9c:8f:76:e3:f0:
d4:be:c8:7f:c9:ef:2e:8f:f8:47:80:30:2d:21:17:4d:15:e0:
3b:10:97:de:1c:ce:43:6a:39:8e:a0:d2:0d:b3:c3:37:de:45:
b4:10:fe:f3:ed:68:b1:a0:d0:17:ad:d1:d6:d9:c3:8e:4e:6c:
83:15:02:db:d8:2d:2f:8f:f8:6c:2c:43:d7:59:cb:4c:15:e5:
9a:6a:05:7f:1d:c9:e4:e2:ed:7c:bb:ec:33:e8:a1:d0:96:0b:
e4:5f:96:f6:27:c5:a6:46:b4:b5:c7:a6:34:f9:9d:bc:d6:5c:
e1:0b:0c:e3:5b:91:83:bf:d2:3f:19:f3:f1:d9:cb:91:41:ed:
55:dc:05:d7:5b:c2:76:ec:35:31:f1:ec:59:d9:17:96:1b:a9:
87:40:71:47:6a:f2:67:3b:0f:a8:2c:b9:03:21:a8:ec:1b:c3:
e3:c5:ba:d6:49:79:f4:37:bc:87:99:23:30:29:7d:bd:d9:68:
83:9d:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:18 2025 by rpki-client