Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jtuiLPwWVUtiTIpe4QrxtXLKI_E.roa
File: jtuiLPwWVUtiTIpe4QrxtXLKI_E.roa (raw, json)
Hash identifier: /28D0MM0bPN4bXz4/hNYuRPOacoLKfUiyP+HsTwzVtM=
Subject key identifier: 8E:DB:A2:2C:FC:16:55:4B:62:4C:8A:5E:E1:0A:F1:B5:72:CA:23:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018960853C286AB05D6FA810DF7312D9347E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jtuiLPwWVUtiTIpe4QrxtXLKI_E.roa
Signing time: Sun 16 Jul 2023 21:04:51 +0000
ROA not before: Sun 16 Jul 2023 21:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:6084:a073/128 maxlen: 128
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:60:85:3c:28:6a:b0:5d:6f:a8:10:df:73:12:d9:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 21:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8edba22cfc16554b624c8a5ee10af1b572ca23f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:f6:90:31:70:09:ca:6f:a1:1c:3e:69:07:
82:e8:c5:77:87:c9:f7:75:40:e6:e1:5a:9c:5c:38:
ca:a1:a5:fe:5c:55:95:03:d3:28:4f:6e:a9:dc:15:
f1:93:44:45:70:5b:d2:30:29:6c:32:9b:e3:9c:cb:
f2:f2:c7:08:17:21:a8:55:4c:c9:41:0b:da:66:17:
90:1f:94:17:c5:6b:60:1c:9d:c5:6e:2d:0c:7b:6f:
2f:20:b0:55:73:f1:ec:bb:d1:5c:e4:76:61:21:5d:
5d:55:c8:1d:aa:6b:10:a6:8c:32:42:9b:68:4f:93:
b3:ac:9b:8e:a6:e4:e7:46:03:c1:78:90:49:14:9c:
03:ee:f1:1e:29:38:f2:91:3d:65:03:11:67:67:ea:
bd:a9:e6:e9:7d:7b:37:e4:87:83:5b:86:76:c4:e2:
13:27:c2:e7:46:02:42:89:52:f2:5c:02:8d:97:d3:
83:ab:a2:cd:25:b8:61:f7:77:f7:c9:78:03:6c:f4:
a8:a7:e7:90:3a:e7:fc:64:fe:be:d9:85:ce:24:f2:
77:39:af:8c:f0:6b:b8:c9:91:e5:01:77:d7:b1:dc:
45:d5:8a:9d:a6:d0:87:5a:d6:04:64:54:05:41:df:
1c:8f:31:42:bb:e9:9e:0e:cd:2a:3d:06:98:a5:10:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:A2:2C:FC:16:55:4B:62:4C:8A:5E:E1:0A:F1:B5:72:CA:23:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jtuiLPwWVUtiTIpe4QrxtXLKI_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:8c:61:9a:38:b3:31:eb:fc:1e:1f:c9:af:58:70:d9:d2:d3:
11:23:f7:bd:f1:af:61:7e:54:67:74:65:cd:4c:af:8d:cc:34:
6e:d5:49:1f:e9:6e:fe:67:8d:5e:5c:18:74:d6:f8:62:cf:79:
de:57:f3:74:de:60:09:aa:80:20:9e:96:cb:d9:08:92:dc:2d:
81:d9:cf:b0:3c:02:f2:c2:ac:5a:89:b1:04:39:94:16:ff:21:
ec:ba:02:b1:c2:c1:49:fa:0a:ba:29:bb:38:6d:80:1a:54:6e:
f6:5c:f6:18:21:38:1d:94:84:79:f1:d4:c6:3e:4a:25:65:2e:
cf:eb:26:82:64:0b:e9:03:64:36:64:0d:aa:c7:75:d3:07:f7:
b2:c2:b2:9f:b3:9e:c6:6c:51:ef:f4:7a:66:b8:94:5f:c4:9f:
35:b8:ac:c6:73:3b:27:cc:a8:6a:de:af:20:65:4b:e8:7f:58:
c9:ea:8f:ee:d7:8b:35:80:91:5d:fd:02:6e:03:4d:50:63:c8:
1c:2d:3d:47:b3:d2:98:e6:23:ae:b9:39:48:56:b7:a6:45:27:
da:38:74:76:23:43:6b:ee:16:cc:d5:4f:5c:43:9c:61:fd:dc:
be:65:24:01:31:e1:de:f6:a5:c5:db:b1:39:86:f1:d8:68:1a:
15:7a:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:09:27 2025 by rpki-client