Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbsFW_CM2v1kKXRurBnvLt58o3E.roa
File: jbsFW_CM2v1kKXRurBnvLt58o3E.roa (raw, json)
Hash identifier: lMq9DGcAxUVtmVb+Gr6d75N3m4Xxzcf6sUR52raQUBE=
Subject key identifier: 8D:BB:05:5B:F0:8C:DA:FD:64:29:74:6E:AC:19:EF:2E:DE:7C:A3:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EC76D95645C08864A2A3B2EAA586C2A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbsFW_CM2v1kKXRurBnvLt58o3E.roa
Signing time: Sun 13 Aug 2023 01:15:58 +0000
ROA not before: Sun 13 Aug 2023 01:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ec:76:d9:56:45:c0:88:64:a2:a3:b2:ea:a5:86:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 01:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbb055bf08cdafd6429746eac19ef2ede7ca371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:32:fc:12:9e:9c:5c:74:57:dd:13:84:17:
b8:29:5f:00:83:a6:21:89:69:86:85:98:e6:39:dc:
1f:ee:83:aa:6c:6e:76:37:ca:71:21:dc:7d:34:88:
79:3f:35:00:ed:35:16:f0:78:f5:0a:77:d0:cf:35:
f1:da:91:a0:5a:be:19:c3:39:e2:3f:24:74:85:01:
10:fc:bc:f7:21:e6:30:8b:9e:72:bb:fb:d5:93:ad:
26:05:7c:42:6f:da:b0:c1:78:5a:c5:24:c4:8a:f3:
90:fe:f8:b7:8e:e9:2f:be:a5:06:17:35:98:3e:6f:
bb:23:a3:26:1b:9f:78:c9:fe:6d:5b:b5:61:b2:a0:
1b:80:eb:ab:e6:99:5c:cb:28:b4:17:90:9f:2f:2e:
43:7c:67:cd:3b:5c:8b:a1:30:73:a2:15:5c:ed:41:
ad:5f:bf:4e:0d:3e:8c:b6:e7:21:a4:71:1f:95:33:
6c:df:da:69:6e:72:dc:44:b1:5d:a4:a5:0b:63:ab:
01:ac:5f:5b:f7:c4:46:ef:0a:55:7b:e6:7c:eb:ee:
16:8c:40:81:cd:e1:4d:b8:bb:3a:09:0b:21:f2:43:
ad:0e:5c:ad:63:c1:f7:c8:51:a9:0e:c8:51:f6:d5:
7a:16:3c:23:a7:f7:cf:e2:f2:d8:7a:15:83:04:7b:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:05:5B:F0:8C:DA:FD:64:29:74:6E:AC:19:EF:2E:DE:7C:A3:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbsFW_CM2v1kKXRurBnvLt58o3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:89:2c:de:d2:36:53:e9:96:c0:e7:c5:16:08:4b:e7:85:5e:
97:11:d4:d5:be:63:44:f1:d8:78:17:76:09:35:68:65:5c:69:
49:b3:b1:65:d3:03:01:e1:b2:7f:9c:f4:0a:12:b1:47:4e:c4:
0a:61:62:ea:02:03:51:64:6b:4b:1c:ef:8f:90:48:6b:78:21:
13:ac:11:a9:2e:68:3a:5c:4b:c0:8f:cf:3a:13:ca:1d:c7:8b:
fe:64:e0:09:e6:19:61:69:1f:59:13:8b:34:37:80:23:72:f7:
b5:ea:78:e3:66:d3:8f:fd:94:92:52:09:60:1f:67:e1:19:66:
bd:70:d1:79:c9:38:9a:51:ce:f3:5a:a7:78:27:95:ca:ab:bc:
2a:56:d2:07:e6:04:22:e5:9e:c9:7b:cc:9e:88:fb:89:07:f3:
00:d8:1f:99:e5:4b:ba:db:84:41:fd:4a:45:90:bd:19:02:de:
11:bf:86:1e:ab:1d:07:7a:64:8e:8e:97:c3:4a:4e:b9:13:6a:
c7:a0:24:74:7c:6d:1f:75:24:6a:af:2f:65:ed:2e:8a:90:12:
02:fb:49:f5:a3:de:a5:97:c1:b3:8f:bb:84:1d:68:eb:4a:43:
58:1c:bd:d3:76:d0:dc:5b:18:85:50:f9:0b:14:8e:07:47:29:
e5:ae:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:41 2025 by rpki-client