Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvPJjmCeBiByXFOw-0tLVBrnKMQ.roa
File: JvPJjmCeBiByXFOw-0tLVBrnKMQ.roa (raw, json)
Hash identifier: FXTyzLe39BP7yP4kG4X9RvCmI5fnIdwHIDZme5mbUYw=
Subject key identifier: 26:F3:C9:8E:60:9E:06:20:72:5C:53:B0:FB:4B:4B:54:1A:E7:28:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CA1FF20E37DFB74FE02CA12357772AB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvPJjmCeBiByXFOw-0tLVBrnKMQ.roa
Signing time: Sun 06 Aug 2023 09:13:58 +0000
ROA not before: Sun 06 Aug 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:1f:f2:0e:37:df:b7:4f:e0:2c:a1:23:57:77:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f3c98e609e0620725c53b0fb4b4b541ae728c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:93:e5:21:5e:b2:41:4e:9e:47:c3:ab:a9:
2d:b2:26:aa:18:ac:34:0b:9b:5b:4b:c0:80:44:67:
82:a4:75:42:00:26:ee:6b:9b:9e:6d:f4:5d:87:0b:
74:38:03:64:86:bf:29:c5:f5:16:c1:8e:8c:4e:94:
f9:e0:54:b6:3b:27:9a:cd:f3:56:f3:8e:2a:bb:8b:
bb:da:0b:47:d8:d1:cd:fe:c6:39:e1:41:85:f5:23:
20:89:d8:ac:f1:e2:7d:c6:6c:9b:70:3c:5c:64:70:
7e:56:1c:33:5d:0e:ae:f7:3a:84:eb:f1:15:f2:93:
3b:54:f7:b6:a5:c5:e1:70:5b:17:eb:34:c3:7c:36:
47:22:fd:cb:f3:da:ec:99:3b:ae:44:f7:a6:46:47:
b4:8a:e6:77:47:9b:0c:51:02:ce:cb:26:81:a9:3e:
d9:e5:a1:40:0a:7c:ca:99:bf:fa:e4:a4:b1:20:11:
70:5b:a3:51:a4:8e:8a:36:3c:81:a5:83:2d:23:f8:
bd:0a:f8:a3:39:db:69:e2:d5:12:aa:56:02:7e:f4:
f7:c3:23:e9:d5:f8:c9:06:ac:ec:db:0f:00:db:af:
f1:ad:42:d3:52:69:3f:b2:8e:e5:30:0d:4c:74:9e:
f0:dc:36:09:32:ce:da:01:86:92:f4:c0:8b:7c:b4:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:C9:8E:60:9E:06:20:72:5C:53:B0:FB:4B:4B:54:1A:E7:28:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvPJjmCeBiByXFOw-0tLVBrnKMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:ef:4a:0c:6f:76:0b:83:9e:f7:c4:d0:0e:09:64:91:ae:7d:
d4:96:62:80:74:0d:5b:63:e4:32:09:51:77:f8:e3:ac:85:0d:
4d:20:af:31:f6:8e:e1:86:0f:36:5c:0e:89:9e:9f:c3:c2:18:
af:c1:88:2f:ad:39:08:bb:41:09:52:cb:1e:c7:6e:a6:c4:19:
be:8e:f5:c8:c7:d7:59:a1:61:27:62:ee:9c:08:e5:46:38:8e:
ef:24:c6:df:37:b5:4a:b0:be:4a:06:e4:77:a5:14:dc:de:76:
eb:ea:e8:ec:39:48:53:5b:6f:9c:7d:e7:be:bf:8e:33:86:8c:
9d:0c:da:8d:0f:33:f2:3a:87:d9:52:11:31:d3:14:0e:83:27:
a0:ca:bb:d5:13:42:6e:5a:a3:ef:77:89:ed:aa:34:55:4f:cd:
99:9c:1c:d8:fa:41:f2:f7:bc:e4:b8:4e:b3:0c:d9:59:2a:96:
41:56:71:ae:71:b4:ba:a4:98:e7:e2:bd:3b:13:20:11:be:15:
67:96:3e:5b:56:7d:4a:3f:a1:b5:a1:b9:e1:3c:82:ed:6c:48:
56:3a:8c:40:50:45:77:e7:77:d3:a3:33:3d:0d:6e:22:9f:5b:
d9:93:a2:16:cf:41:1d:cc:18:a5:2e:81:7f:d4:e6:7d:ea:93:
1f:8d:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:57 2025 by rpki-client