Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvkeVMf42AifEJB_KV8mtV4gvEY.roa
File: JvkeVMf42AifEJB_KV8mtV4gvEY.roa (raw, json)
Hash identifier: P2QBQk9CZBmitxghiFwFhYoF87YlSlNE5v1j3COxHIY=
Subject key identifier: 26:F9:1E:54:C7:F8:D8:08:9F:10:90:7F:29:5F:26:B5:5E:20:BC:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A0ED56D3E5D46E96E2334C812BED1F71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvkeVMf42AifEJB_KV8mtV4gvEY.roa
Signing time: Thu 20 Apr 2023 23:08:41 +0000
ROA not before: Thu 20 Apr 2023 23:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:ed:56:d3:e5:d4:6e:96:e2:33:4c:81:2b:ed:1f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 23:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f91e54c7f8d8089f10907f295f26b55e20bc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:ee:5b:99:13:7a:f6:92:fe:32:7d:63:ea:
30:bb:2c:92:0b:06:74:ab:77:2b:0b:78:f5:2a:82:
a3:fd:a3:3b:5d:98:d0:29:30:10:e1:bd:48:5b:26:
23:35:a3:8f:6b:9a:78:1d:ab:11:be:25:80:af:e8:
58:29:71:d4:e5:2c:7b:71:f8:c0:50:f8:ed:b7:54:
21:df:c8:03:14:6c:fd:c5:ca:be:2e:9e:c3:7f:1b:
06:01:42:8b:fc:aa:f3:86:4a:e3:a3:b2:97:1c:7d:
3a:b0:ed:85:2f:2a:16:44:5b:74:53:a7:42:22:ab:
da:9a:c5:81:fe:3d:6d:b9:39:28:8b:cc:8a:4a:74:
00:a9:1f:76:7d:06:04:18:18:59:14:f1:cd:cc:9d:
47:3f:03:57:18:aa:e0:d2:86:48:52:89:e0:fb:5d:
95:4e:77:74:d0:4a:1b:8b:b0:76:e2:8f:ab:b9:ab:
f1:03:bc:dc:42:99:ce:e1:8c:da:57:63:49:d2:22:
ba:38:1c:37:f3:5b:1c:8c:d5:f4:7a:5b:eb:ae:7c:
7c:71:46:b0:b7:b8:1a:64:11:7c:6b:dd:91:af:0d:
b9:d6:af:01:cd:54:8f:a3:d1:79:ca:f8:e5:a3:dd:
9c:d8:e3:b0:34:37:51:45:1d:97:ab:a1:0a:f3:13:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:1E:54:C7:F8:D8:08:9F:10:90:7F:29:5F:26:B5:5E:20:BC:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JvkeVMf42AifEJB_KV8mtV4gvEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:54:1f:c9:87:88:af:3e:a8:df:a1:e1:bc:41:35:0a:bb:29:
43:9f:f3:97:92:2d:3f:70:01:8a:56:8f:60:b6:c3:88:70:04:
c9:69:91:da:8b:2b:47:cd:f5:7a:a0:cd:7a:ab:a0:fa:4e:dc:
e0:b8:59:b9:c9:f8:81:37:13:72:d0:3e:1b:11:7b:58:37:c3:
c5:b5:2a:e4:10:41:9a:af:c3:b4:5b:b5:3d:3e:e7:fe:e9:cc:
cb:2b:46:a9:1b:57:ec:b0:8b:f9:7a:40:fd:fc:09:c0:36:74:
a4:4c:91:0a:09:a6:06:b5:d6:de:38:06:82:91:6b:5a:96:31:
df:4d:5a:57:20:71:0e:1e:c1:1c:61:7c:4b:89:6d:75:ce:ee:
2f:b0:3f:b6:aa:d7:7b:0f:f9:ba:cd:c7:ea:bc:2c:e7:71:1b:
85:c3:11:80:67:4f:d7:a2:ee:40:89:31:59:a2:e6:7d:a6:6d:
d5:b9:b2:e2:ef:8b:fd:3d:9f:f8:8f:94:a9:33:d7:5c:64:2b:
a0:e3:4b:56:cd:62:be:0e:1a:51:fd:40:e5:c6:d1:37:b5:d1:
74:16:ae:2a:eb:78:98:ab:bb:f0:ae:d9:43:f2:3a:7c:9c:60:
5f:74:2e:87:1e:c7:bb:7e:8c:49:e2:ad:36:6a:73:62:9f:af:
a3:e9:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:18 2025 by rpki-client