Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jYdMUEYtjNls_SRx35SSHIQl8oI.roa
File: jYdMUEYtjNls_SRx35SSHIQl8oI.roa (raw, json)
Hash identifier: xzS9Ld9P7dSNEaZ69VA/++0mb4gLc7NljMm1daihBoc=
Subject key identifier: 8D:87:4C:50:46:2D:8C:D9:6C:FD:24:71:DF:94:92:1C:84:25:F2:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B8BDEF8B46CC37411714DDDBB126B3A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jYdMUEYtjNls_SRx35SSHIQl8oI.roa
Signing time: Mon 06 Mar 2023 21:05:00 +0000
ROA not before: Mon 06 Mar 2023 21:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:b8bd:3d6b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:bd:ef:8b:46:cc:37:41:17:14:dd:db:b1:26:b3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 21:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d874c50462d8cd96cfd2471df94921c8425f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:94:a1:8c:3e:5a:40:38:0c:89:1f:2c:42:
9b:82:3f:9e:39:ec:84:a4:f9:78:75:a7:26:d4:24:
90:db:89:62:52:1c:72:c1:14:b0:74:0f:fe:ed:1d:
69:ba:02:65:88:75:1d:6a:94:06:54:90:3b:8c:eb:
19:8d:31:1a:10:13:6e:6f:fb:a0:e5:89:7a:05:0b:
08:d7:e6:83:95:7c:69:8d:01:61:98:c8:54:de:36:
c8:60:de:58:15:d3:48:e2:8b:d5:07:af:4b:3b:cf:
b3:07:5c:2a:e5:67:20:b4:6a:3a:75:75:95:9a:12:
bb:41:91:96:eb:1e:9f:b7:d0:cd:cb:93:63:9d:91:
2a:5c:e1:70:b5:88:ca:c5:c0:d2:b5:d4:2e:e5:f8:
89:21:96:1b:1f:0e:94:07:a7:3c:09:1e:fa:97:8e:
81:03:18:d4:91:3d:65:c0:54:c9:2e:0b:ee:d1:19:
4a:65:48:5c:c2:17:c8:54:94:8a:64:4f:13:69:e7:
6f:71:c4:7d:3c:b1:86:12:c2:4b:3e:ce:ef:2c:ff:
f2:11:10:13:dc:c6:98:93:c4:34:26:bd:c1:21:a0:
f6:f2:6c:e0:0d:99:08:c0:69:a6:17:d4:23:14:92:
e1:1c:90:91:11:60:69:8d:6b:72:90:ff:24:07:38:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:4C:50:46:2D:8C:D9:6C:FD:24:71:DF:94:92:1C:84:25:F2:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jYdMUEYtjNls_SRx35SSHIQl8oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:41:a1:be:ed:80:af:e1:b4:fe:27:80:08:67:25:84:6d:ce:
dc:82:fc:8a:dd:67:ca:b1:00:08:fa:be:90:27:3c:d7:5d:bc:
e0:3b:5e:24:69:b6:f4:86:8c:af:47:75:f5:0d:7f:b7:f7:b1:
42:aa:c3:7d:c9:da:92:48:1d:fa:71:94:0a:58:78:02:73:43:
59:7f:95:17:ad:5f:35:29:d5:30:6a:69:90:36:87:bc:b4:b1:
60:da:e0:65:d3:64:88:f7:cf:e3:9e:e2:1b:e1:9d:17:7b:5c:
0e:2e:44:ff:11:d1:33:08:3a:e4:03:4c:01:5a:aa:68:df:30:
f6:d1:a9:e3:df:6b:61:65:93:61:ca:9d:9d:6e:10:2b:81:dc:
7b:8f:c4:ce:2b:28:04:50:c4:61:9d:d3:42:29:d6:fd:9b:1c:
7f:5c:b3:aa:b8:14:f0:36:e7:ac:61:77:43:9b:f1:89:39:df:
1c:38:e2:70:91:0a:be:2d:6d:c0:44:70:a4:51:ee:98:30:7a:
f5:b6:d5:90:be:16:95:23:88:2e:88:31:80:16:b9:d8:48:f9:
8e:73:b6:1d:02:20:19:b4:88:d0:32:12:c0:50:ae:2a:92:4e:
c3:a9:a8:cd:93:5f:13:5d:49:95:1d:c1:cb:f6:ac:f2:0d:96:
42:ff:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:19 2025 by rpki-client