Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jyeOKO7yOImu8N0C3YaXANFAfs4.roa
File: jyeOKO7yOImu8N0C3YaXANFAfs4.roa (raw, json)
Hash identifier: 2BC5jB9nwpO8QR/vsOt7YFLJs5SB8+7OZvu9N87YA34=
Subject key identifier: 8F:27:8E:28:EE:F2:38:89:AE:F0:DD:02:DD:86:97:00:D1:40:7E:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887A836730D69BBFB90AE99992400C29C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jyeOKO7yOImu8N0C3YaXANFAfs4.roa
Signing time: Fri 02 Jun 2023 05:10:11 +0000
ROA not before: Fri 02 Jun 2023 05:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:83:67:30:d6:9b:bf:b9:0a:e9:99:92:40:0c:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 05:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f278e28eef23889aef0dd02dd869700d1407ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:54:c5:b0:04:65:cb:66:55:6e:ab:f4:dd:
9c:6a:23:9c:fa:27:61:4b:20:4f:56:03:2c:64:0c:
f5:f4:44:1d:80:ae:e4:cb:0e:59:95:db:5a:14:e4:
e5:36:f3:41:6b:a4:91:8b:19:bc:b7:32:90:5b:df:
14:cc:57:89:f0:75:7d:ed:67:b7:bf:bf:6a:b2:09:
35:9e:57:32:6a:18:b0:23:48:c1:7d:4f:f6:a4:8c:
06:db:c7:8e:47:43:15:f4:fd:2f:18:cd:cf:9d:67:
17:7b:42:11:cf:2c:d6:09:5c:cf:1d:a6:6f:9f:4d:
72:7b:0b:5b:d5:d2:50:25:a0:ee:86:ef:ec:15:12:
59:40:f8:80:0c:a2:8b:d3:bd:43:b0:0f:ea:e3:d6:
b5:11:3c:53:8b:74:02:51:43:e8:6b:9e:6f:0a:cc:
c1:dd:9a:58:49:10:27:fe:b8:67:0e:41:8b:2b:a2:
8c:50:a7:ae:94:ba:f6:1f:1b:d9:f0:99:36:50:fe:
2b:99:52:9d:ca:76:bc:c1:46:af:65:fe:d0:4c:53:
5a:3c:ed:0e:36:71:3a:40:bb:18:ff:2b:f9:12:d6:
4e:52:49:96:d6:50:9f:be:b6:23:64:74:d3:fa:15:
5d:f7:89:78:c4:a4:69:32:84:c7:43:c8:f8:c0:c4:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:27:8E:28:EE:F2:38:89:AE:F0:DD:02:DD:86:97:00:D1:40:7E:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jyeOKO7yOImu8N0C3YaXANFAfs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:57:e3:54:1d:0c:ba:16:4f:02:4e:3a:55:b5:12:25:9a:13:
71:5d:1e:3c:e8:5a:90:2d:e9:1c:dd:39:d1:12:10:3f:58:20:
34:41:74:aa:f8:c5:d0:8a:b0:e2:db:9c:ea:b7:d1:ca:22:ea:
07:c3:73:c5:43:67:81:7e:d5:73:25:5b:4d:aa:21:10:e9:90:
f8:4b:5c:c3:46:6f:8e:fa:eb:a4:da:0a:6e:a6:b4:36:03:25:
d8:8b:29:cd:a9:e8:df:b8:aa:5f:19:2d:a9:c2:68:d2:f6:d6:
5e:69:6b:2f:2e:17:b2:05:16:ff:08:95:94:b1:ae:6a:2b:d1:
ca:59:21:1d:db:ba:76:5e:9d:dc:f9:47:50:09:78:0e:b0:d2:
6a:13:78:0f:02:c3:90:0b:5f:8b:f2:0d:36:df:52:93:ae:46:
a9:2f:44:04:9c:d4:5e:37:91:6f:e0:1e:96:05:b7:02:b6:e0:
bf:44:64:eb:bd:ef:e5:4a:45:b5:46:37:8f:cb:d9:81:88:52:
1e:c1:5b:8f:fa:68:cf:f0:e5:1c:98:05:9b:e0:aa:21:29:01:
c6:5f:45:b2:11:24:98:11:d8:a9:b6:95:55:b5:45:5a:f3:8d:
f7:9e:11:34:8d:7b:e7:a1:97:10:bf:cb:31:f6:93:ba:a0:50:
ec:3a:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:36:08 2025 by rpki-client