Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jmnld5pXdMkoDsII6mRCBPiYxy4.roa
File: Jmnld5pXdMkoDsII6mRCBPiYxy4.roa (raw, json)
Hash identifier: ZGpKgu7KeT4/1pPyqwcmc8q63CFQbZ2UG8K5msm8C74=
Subject key identifier: 26:69:E5:77:9A:57:74:C9:28:0E:C2:08:EA:64:42:04:F8:98:C7:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018813843103C35F7A0849AF97C0F69A909F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jmnld5pXdMkoDsII6mRCBPiYxy4.roa
Signing time: Sat 13 May 2023 05:10:10 +0000
ROA not before: Sat 13 May 2023 05:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:13:84:31:03:c3:5f:7a:08:49:af:97:c0:f6:9a:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 05:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2669e5779a5774c9280ec208ea644204f898c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:a1:61:1e:c1:6e:e7:9b:1c:be:3d:af:33:
65:cb:f5:aa:4c:d3:e6:45:f5:f9:0e:46:2e:7e:3e:
da:c9:bc:f7:08:ce:a4:cf:5a:24:48:29:63:d1:97:
ba:d2:6f:e4:3d:12:c0:6d:a0:37:e5:c4:b2:7f:31:
48:31:83:65:98:98:12:22:78:0b:b3:fd:49:31:34:
ef:b0:0d:aa:2d:54:99:40:d8:e5:2a:be:42:48:bb:
66:73:f9:59:4c:17:46:12:30:03:de:b6:16:63:9e:
ea:39:0b:dd:52:26:3c:2b:6f:6c:93:b7:06:2b:f9:
d9:fa:f9:5f:66:32:72:d8:37:46:78:0a:65:cb:fd:
5f:b8:06:98:48:6d:fc:19:f5:14:b5:5a:63:38:ac:
75:d4:27:1a:27:08:2f:8b:72:b1:14:37:ee:ee:32:
ab:fc:3c:be:99:c5:4c:c1:29:0b:e8:f1:12:13:c1:
47:e6:65:93:8c:b4:00:68:ac:4f:63:17:53:66:5d:
ed:7c:b0:66:ab:8b:b7:a7:b8:e3:04:0f:a8:f5:67:
8f:69:58:df:c4:34:25:01:ef:cc:aa:29:3d:17:ca:
d2:2f:7c:84:31:ba:f1:52:c8:30:73:2b:2e:06:f9:
03:8e:d8:54:b5:ce:d8:a9:ce:30:c9:ad:29:82:83:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:E5:77:9A:57:74:C9:28:0E:C2:08:EA:64:42:04:F8:98:C7:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jmnld5pXdMkoDsII6mRCBPiYxy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:f3:ac:a2:4b:aa:8a:ca:9a:e3:83:22:cc:64:4b:96:48:5c:
9f:c5:08:99:6c:14:75:a8:88:46:80:10:19:51:d7:cb:96:43:
c0:cc:83:82:6f:87:48:e6:75:f9:20:79:3d:91:9a:0e:7c:48:
f0:0f:e2:85:7c:de:1e:78:ec:5a:10:76:e4:48:d2:5d:2a:c3:
95:5b:83:d0:63:90:34:0d:6d:98:cf:db:19:7a:9d:20:07:62:
f0:ef:37:1c:95:07:26:ba:fb:33:05:55:8a:59:7f:7b:73:b8:
f7:3e:1f:30:a7:42:4f:ea:09:6f:a5:73:c1:64:fe:24:1b:7d:
98:dd:41:97:ca:c1:c0:84:80:0b:c9:1c:6d:e8:49:27:0b:da:
bf:82:f2:44:38:49:fa:49:4a:c5:81:30:6d:10:6b:f9:19:b8:
7c:51:19:02:f6:f9:2b:7e:89:fc:37:69:b1:f9:e6:fa:41:f5:
cf:e9:a1:7d:a9:27:51:65:11:a3:e6:02:47:dc:48:e6:0e:ff:
70:f0:35:c7:d9:68:ce:99:ff:48:a8:b5:37:55:20:86:49:7d:
fb:45:2b:9a:bc:bd:67:a9:58:ac:42:47:1b:5d:00:27:9e:09:
46:d1:e7:58:93:87:6d:cb:22:84:35:e2:7b:02:dd:ca:df:f4:
a3:85:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:23 2025 by rpki-client