Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jgyBMsFyK-YVl1EzsRZMkJX52vY.roa
File: jgyBMsFyK-YVl1EzsRZMkJX52vY.roa (raw, json)
Hash identifier: O9bsTF3ggOTiqd04+ObHLWPamQsbvp23zIIM7/hZQck=
Subject key identifier: 8E:0C:81:32:C1:72:2B:E6:15:97:51:33:B1:16:4C:90:95:F9:DA:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018871B67141888F20C1FED1DAFF2181367E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jgyBMsFyK-YVl1EzsRZMkJX52vY.roa
Signing time: Wed 31 May 2023 12:09:21 +0000
ROA not before: Wed 31 May 2023 12:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:b6:71:41:88:8f:20:c1:fe:d1:da:ff:21:81:36:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 12:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0c8132c1722be615975133b1164c9095f9daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:e8:92:0e:f9:19:66:5d:16:bb:36:61:3b:
17:e3:b0:fb:61:57:eb:d3:09:72:9b:8c:02:06:b0:
91:be:c6:47:ac:af:0c:f9:0b:41:0b:e7:dd:ba:a7:
02:13:bf:c3:88:a3:63:13:33:52:dd:95:55:81:ae:
6f:36:c3:48:2c:69:b7:4b:4a:81:45:6c:28:93:7b:
ea:b4:4d:0f:46:e3:f4:23:0c:69:ca:38:2a:fe:c3:
df:cc:a9:87:6b:e9:92:93:38:fe:59:f5:fa:60:23:
99:fa:1e:ed:2f:0f:11:e6:2d:08:de:8e:c4:19:27:
21:b5:a8:32:68:47:1d:43:24:5b:10:01:33:1f:81:
e3:2d:2b:aa:8c:97:14:2b:17:85:84:46:31:02:65:
ad:a6:74:77:0a:54:2e:cf:fc:72:76:5e:71:b2:05:
c1:e8:88:29:75:2e:7a:8e:7e:5c:a0:8a:91:4d:f9:
19:5a:cb:7f:05:c7:eb:35:e0:a0:3c:fa:f7:00:79:
92:0d:94:b7:2c:d6:f1:75:02:3d:a0:74:99:fc:6f:
f4:1e:1e:ec:4a:64:e1:00:7a:14:f8:08:ae:1e:d6:
89:db:9d:3b:98:56:35:58:eb:45:f6:da:c4:0b:f5:
c9:b1:d9:6c:6e:bd:54:ed:1e:8e:d8:c4:28:34:d1:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:81:32:C1:72:2B:E6:15:97:51:33:B1:16:4C:90:95:F9:DA:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jgyBMsFyK-YVl1EzsRZMkJX52vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:32:7f:bf:5e:aa:30:e3:c6:3e:c3:0c:2c:b1:71:64:be:72:
b8:44:ff:5b:01:07:0a:73:e1:25:77:22:27:8f:1b:af:6b:14:
86:f5:2b:83:c1:4c:ad:02:05:13:7a:70:21:e8:84:3f:78:7e:
e1:50:a0:07:84:2c:77:c0:cb:86:66:04:cf:77:73:43:1d:65:
ff:a5:ba:99:16:82:68:8e:f9:2c:61:d2:e7:0d:f3:1a:b0:83:
0d:f5:97:0f:1e:7d:51:49:ff:69:94:cd:b4:b0:e6:05:19:57:
0f:de:93:f6:ff:63:76:7a:54:68:d3:e7:e9:5c:4f:8f:c1:db:
2e:38:d2:78:94:53:13:da:4e:19:80:ed:c3:02:dd:ef:ef:fb:
bc:5f:d6:e0:5f:2e:e1:85:5f:0b:dc:89:32:29:dd:58:bd:b6:
71:dc:6d:cd:02:29:ca:de:7f:ff:dd:c3:0b:a4:43:d6:ba:8d:
74:6a:93:5a:25:1a:c2:db:6e:2d:e6:7b:02:73:cf:2e:a9:70:
8e:79:a6:8a:db:36:80:e4:bb:bd:aa:e8:72:3d:f9:2a:57:49:
a5:26:08:79:1c:a2:80:36:61:dd:9a:0a:7f:6e:44:09:fe:15:
09:c8:be:3a:0b:2d:81:2b:f7:ca:5d:d6:73:9b:24:f5:26:4c:
eb:71:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:38:25 2025 by rpki-client