Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcCIX53yRaFAT9c93KUuDknoD4U.roa
File: JcCIX53yRaFAT9c93KUuDknoD4U.roa (raw, json)
Hash identifier: vHP0SoEm7VUu5AdiCQvMo1+MB8Zjrep9Lydlq7Zh6Yw=
Subject key identifier: 25:C0:88:5F:9D:F2:45:A1:40:4F:D7:3D:DC:A5:2E:0E:49:E8:0F:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886F234E9BCBD9480BBBD31DF8287F8E6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcCIX53yRaFAT9c93KUuDknoD4U.roa
Signing time: Wed 31 May 2023 00:09:24 +0000
ROA not before: Wed 31 May 2023 00:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6f:23:4e:9b:cb:d9:48:0b:bb:d3:1d:f8:28:7f:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 00:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c0885f9df245a1404fd73ddca52e0e49e80f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:95:72:00:c8:9f:7e:0d:03:26:2a:19:1b:
32:cf:b3:67:79:7d:ec:d3:e4:79:73:bd:86:58:bc:
0b:af:b2:58:52:42:11:1c:66:74:44:3e:77:f8:cc:
e5:83:23:58:ba:4f:51:3a:b8:1c:90:59:2b:74:73:
e7:18:5f:b6:e4:52:c2:36:94:e2:2b:57:cd:84:94:
02:c7:69:16:e7:c4:cd:9a:62:2a:db:1b:1d:51:d5:
9f:cb:d5:f4:0a:b9:03:9f:bd:36:2e:d3:99:1b:b3:
2f:0c:96:e2:fa:97:a3:5d:2a:20:68:f4:68:73:46:
92:dd:a2:1d:76:1f:9e:60:73:85:6d:b3:59:65:be:
80:bb:de:d0:67:26:24:68:de:b5:18:d7:c0:29:15:
ee:76:9a:dd:63:07:06:5f:f0:ed:1d:68:b0:0e:9b:
70:25:c3:f0:cb:0d:ca:33:ac:75:50:12:17:eb:e5:
d5:c5:39:d9:38:8a:aa:0a:54:b7:2a:00:2d:4d:fd:
6a:87:66:3c:a5:91:e5:bd:95:0b:58:9e:cd:5d:a8:
04:47:a7:02:25:8e:1e:99:f9:25:ff:0a:4b:a5:1b:
3c:01:1a:7c:a9:26:b3:e5:0a:56:08:9f:c5:7f:fe:
64:b0:40:79:77:b0:ac:89:17:a0:9d:4b:1a:5c:b5:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:88:5F:9D:F2:45:A1:40:4F:D7:3D:DC:A5:2E:0E:49:E8:0F:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JcCIX53yRaFAT9c93KUuDknoD4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:2e:68:27:d4:48:30:54:df:36:25:2a:ad:2d:8c:a9:38:7c:
be:53:4d:37:ab:98:fe:eb:94:98:d5:1d:53:ad:81:8d:3e:0d:
d2:30:cc:4d:76:9d:66:6b:e6:39:00:b6:3a:fb:0d:0e:0a:b8:
78:40:6f:3d:34:3b:0e:58:1a:31:9f:4d:56:c5:26:e5:c6:8b:
30:46:6f:03:be:62:89:27:0e:69:f9:8d:91:79:c2:10:9c:4f:
cb:99:0b:31:9f:f2:5e:34:b0:37:d0:84:cd:9f:91:37:2d:29:
12:aa:e9:b9:42:06:0d:91:ec:10:5f:cb:51:a0:22:c0:60:7b:
ed:d6:b0:59:f3:f2:4f:af:88:ef:cd:7e:32:39:2a:48:98:3e:
95:b7:c3:38:67:7c:bd:85:6a:ce:44:c4:70:20:7c:06:cd:34:
b8:31:45:de:99:f8:e3:9f:0d:28:c1:f3:4a:2c:b7:4b:e5:1d:
a8:31:9e:3b:c0:d3:0e:43:cc:12:1d:58:92:d5:26:e5:82:71:
24:15:8c:c0:96:ab:59:23:a6:b4:e5:ae:73:30:8f:54:32:3e:
43:43:16:8f:ae:3e:91:40:dc:20:99:76:d7:5d:65:74:61:7b:
dd:f6:f3:26:0c:d5:b2:e3:c3:75:74:4a:54:d4:c9:52:ba:5b:
d1:a6:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:57 2025 by rpki-client