Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ju_pFo_KG7hOpX3GtWjl60gP5vI.roa
File: ju_pFo_KG7hOpX3GtWjl60gP5vI.roa (raw, json)
Hash identifier: caiMdlEFeQUQ0jdr4Whsor3GXXWM7gRvAADcsTbWmmQ=
Subject key identifier: 8E:EF:E9:16:8F:CA:1B:B8:4E:A5:7D:C6:B5:68:E5:EB:48:0F:E6:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880C6E8581C6D5E444EA724EA1E9F016F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ju_pFo_KG7hOpX3GtWjl60gP5vI.roa
Signing time: Thu 11 May 2023 20:09:09 +0000
ROA not before: Thu 11 May 2023 20:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:6e:85:81:c6:d5:e4:44:ea:72:4e:a1:e9:f0:16:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 20:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eefe9168fca1bb84ea57dc6b568e5eb480fe6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:37:e4:cb:d0:2f:4c:e0:ae:6d:63:b3:80:
cb:7b:a4:fa:1c:60:cb:21:48:1e:51:fd:9c:de:e1:
ab:e9:7a:0a:9d:bd:ad:73:c4:2a:c4:9e:76:e2:1e:
e1:13:99:08:0e:69:a7:44:b2:fc:15:ac:58:2a:0c:
fe:ae:d6:57:b3:e4:f3:4f:7b:fc:14:41:a7:e4:90:
ec:eb:6f:43:e7:0f:6d:4a:f8:57:7e:ba:97:60:1d:
b5:ec:d9:65:f3:13:ac:27:f1:f7:56:4b:59:fb:0e:
53:4f:7a:3e:f3:f4:98:9c:8c:c1:58:b3:b4:7f:c5:
c1:76:a8:28:c5:0a:ea:7b:a1:1b:1b:f4:9e:bc:73:
88:51:a9:be:41:62:9c:04:a7:09:5a:e5:e9:05:19:
1f:f2:f0:a3:23:aa:0e:8e:75:0a:24:5a:8c:8b:c0:
9e:75:73:88:71:98:f5:11:b4:6f:4f:58:31:11:7a:
9b:45:6e:75:49:99:ab:be:96:c0:57:a3:37:ee:fb:
04:d0:2e:ff:1c:53:66:af:cf:e1:db:70:fe:ff:9b:
e3:d4:5b:54:67:0d:06:e2:c9:46:99:ae:69:9f:25:
e8:fc:44:51:6f:42:e5:b7:c5:e3:4b:08:f7:56:ac:
17:fe:42:fa:2e:34:22:13:70:84:4d:f3:11:ec:eb:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:E9:16:8F:CA:1B:B8:4E:A5:7D:C6:B5:68:E5:EB:48:0F:E6:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ju_pFo_KG7hOpX3GtWjl60gP5vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:0f:ce:ca:0a:d7:eb:a9:6a:45:5e:ea:45:14:ff:a0:ce:d1:
5c:fd:53:2e:9c:1f:ad:dd:27:90:c9:3c:2e:ce:59:23:65:de:
3e:cf:03:46:09:60:d4:f6:f0:42:6f:24:52:c2:3b:0b:44:2c:
33:39:d5:2c:4a:7e:70:b8:c3:59:9c:ba:2f:40:54:6b:d6:64:
8e:98:18:f1:46:d9:e5:0d:31:26:e5:25:0d:dc:14:fd:93:62:
4b:3e:0a:33:16:e4:92:9d:b2:2c:65:48:52:a2:34:09:71:ea:
cb:1d:3c:7a:ff:f9:fe:c3:07:e7:3a:f8:88:7d:ab:6e:2f:c0:
2a:e1:0d:7d:94:61:82:d3:49:db:1e:b1:86:70:df:9a:6c:b3:
82:f7:e9:1b:82:5a:dd:6b:76:ad:e7:a1:51:9f:f6:75:9a:67:
23:f7:fd:23:d6:9e:5f:54:df:17:e5:05:d2:3d:55:ae:3a:be:
84:6f:1b:af:c0:83:bc:a0:25:64:b4:90:f0:ed:f8:36:20:6c:
4f:97:9b:da:82:a0:e5:8f:ff:be:92:0e:79:5b:ec:15:64:d7:
ba:c3:12:54:1a:12:af:f6:0c:22:ff:6b:35:e7:d8:d4:50:61:
c4:a4:3d:c6:be:d4:e2:f7:87:25:35:9f:e3:cc:0f:63:3d:6f:
10:09:ba:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgMboWBxtXkROpyTqHp8BbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTExMjAwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWVmZTkxNjhmY2ExYmI4NGVhNTdkYzZiNTY4ZTVlYjQ4MGZlNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/835MvQL0zgrm1js4DLe6T6HGDL
IUgeUf2c3uGr6XoKnb2tc8QqxJ524h7hE5kIDmmnRLL8FaxYKgz+rtZXs+TzT3v8
FEGn5JDs629D5w9tSvhXfrqXYB217Nll8xOsJ/H3VktZ+w5TT3o+8/SYnIzBWLO0
f8XBdqgoxQrqe6EbG/SevHOIUam+QWKcBKcJWuXpBRkf8vCjI6oOjnUKJFqMi8Ce
dXOIcZj1EbRvT1gxEXqbRW51SZmrvpbAV6M37vsE0C7/HFNmr8/h23D+/5vj1FtU
Zw0G4slGma5pnyXo/ERRb0Llt8XjSwj3VqwX/kL6LjQiE3CETfMR7OvRwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI7v6RaPyhu4TqV9xrVo5etID+byMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvanVfcEZvX0tHN2hPcFgzR3RXamw2MGdQNXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF4PzsoK1+upakVe6kUU
/6DO0Vz9Uy6cH63dJ5DJPC7OWSNl3j7PA0YJYNT28EJvJFLCOwtELDM51SxKfnC4
w1mcui9AVGvWZI6YGPFG2eUNMSblJQ3cFP2TYks+CjMW5JKdsixlSFKiNAlx6ssd
PHr/+f7DB+c6+Ih9q24vwCrhDX2UYYLTSdsesYZw35pss4L36RuCWt1rdq3noVGf
9nWaZyP3/SPWnl9U3xflBdI9Va46voRvG6/Ag7ygJWS0kPDt+DYgbE+Xm9qCoOWP
/76SDnlb7BVk17rDElQaEq/2DCL/azXn2NRQYcSkPca+1OL3hyU1n+PMD2M9bxAJ
ulY=
-----END CERTIFICATE-----
Generated at Fri May 2 08:47:43 2025 by rpki-client