Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JSoFhZVBU7TPPx3r_Gvbysiwv_U.roa
File: JSoFhZVBU7TPPx3r_Gvbysiwv_U.roa (raw, json)
Hash identifier: E4Um/8/UBnSo2CZB7qlKl5gCv5SEy/u87LwUXRFjCfE=
Subject key identifier: 25:2A:05:85:95:41:53:B4:CF:3F:1D:EB:FC:6B:DB:CA:C8:B0:BF:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883E37CEB2CE25543BF444C03021776572
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JSoFhZVBU7TPPx3r_Gvbysiwv_U.roa
Signing time: Sun 21 May 2023 12:10:24 +0000
ROA not before: Sun 21 May 2023 12:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:37:ce:b2:ce:25:54:3b:f4:44:c0:30:21:77:65:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 12:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=252a0585954153b4cf3f1debfc6bdbcac8b0bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:36:98:70:7d:c0:99:5e:12:75:32:b4:d8:
88:0a:b7:d3:00:9c:a3:40:80:a8:b1:e0:cd:06:ad:
af:6e:01:0c:70:cb:ac:e8:22:a2:9d:ef:2b:b6:b0:
c9:b6:96:7f:0e:bf:ea:2c:3d:01:98:51:05:c2:a5:
0b:6d:7c:7e:5c:fa:5f:f1:d6:82:8b:3c:66:3e:4f:
61:03:3e:8b:aa:c8:6a:aa:1b:9e:0a:5e:b9:a0:b2:
f6:65:3e:21:cc:2e:13:81:fc:57:60:f7:22:6f:e2:
5d:f8:89:eb:e7:39:ef:ca:0a:09:f8:fc:08:02:a4:
3f:be:5f:54:4f:b9:e3:bb:95:e1:2b:a3:58:02:3b:
64:d9:fd:ca:a1:32:87:fe:08:2a:35:00:f5:77:e1:
af:24:2d:04:6b:d8:63:50:1a:13:6a:62:67:61:61:
9e:fd:b4:3d:de:ea:73:35:d1:69:fe:34:93:f3:56:
4a:fd:3e:aa:98:fe:b2:86:bb:93:62:31:4d:f2:e5:
b2:eb:dc:46:1a:8d:ec:ba:e5:8e:ca:90:50:6a:52:
ab:38:4d:35:16:ed:f6:60:c7:c8:10:9c:54:33:6a:
f3:49:ac:9d:69:a6:1c:88:55:43:6e:2b:6d:55:19:
5e:b3:3b:09:d2:6d:74:d9:3d:8d:5a:82:41:e0:d0:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2A:05:85:95:41:53:B4:CF:3F:1D:EB:FC:6B:DB:CA:C8:B0:BF:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JSoFhZVBU7TPPx3r_Gvbysiwv_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:7f:b3:b2:e0:81:0f:93:46:13:fb:07:bd:c6:80:a9:11:4a:
83:9c:3d:fd:31:2e:b4:9a:ff:1f:86:4f:a2:09:df:bc:a6:bc:
82:6f:25:33:14:61:45:45:6c:5a:ce:e4:c8:d6:df:e2:73:bd:
a2:39:c3:cf:1c:46:54:e0:84:ee:91:72:14:0e:15:ad:6d:b4:
86:12:ea:ca:ef:13:ba:03:9e:e7:11:0d:81:ad:1e:69:6f:7d:
ee:22:90:38:c8:ab:aa:3a:b8:4a:19:cb:20:35:18:09:50:21:
01:46:e6:24:41:19:1b:f1:7b:a4:9f:53:45:85:9e:02:e8:f6:
a1:0d:a2:a3:5b:67:69:0d:88:54:c0:9d:c5:18:4b:33:cf:3c:
4d:c7:43:8a:1d:24:8a:c5:82:d5:8f:80:7b:7a:d3:f3:5d:f1:
b1:a7:be:6d:03:9b:9f:f7:9e:d8:52:26:3d:14:ec:80:90:53:
a4:1d:1b:fd:f3:ca:2f:51:31:01:c4:90:e7:51:1c:07:95:64:
dc:dd:6a:57:03:28:8a:8f:48:fe:cc:b9:35:a0:30:2b:00:7f:
26:6b:13:6a:c1:1e:c9:b3:bb:86:4e:78:6b:f5:01:ce:98:94:
ec:d7:88:7f:c7:15:62:19:ce:e2:fe:f3:7f:a9:d8:69:f6:b3:
66:6c:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:43 2025 by rpki-client