Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jb9nDSont5pF3eNyDWBDzza9nl0.roa
File: jb9nDSont5pF3eNyDWBDzza9nl0.roa (raw, json)
Hash identifier: TLTPvGCgQG40JNXioU/dJXQh8EEJEfkTFkdgqO/r5Bo=
Subject key identifier: 8D:BF:67:0D:2A:27:B7:9A:45:DD:E3:72:0D:60:43:CF:36:BD:9E:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CE6AD8728858E416B3D77D348A4DC6A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jb9nDSont5pF3eNyDWBDzza9nl0.roa
Signing time: Sat 29 Apr 2023 19:08:41 +0000
ROA not before: Sat 29 Apr 2023 19:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:6a:d8:72:88:58:e4:16:b3:d7:7d:34:8a:4d:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 19:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbf670d2a27b79a45dde3720d6043cf36bd9e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:9e:cb:a0:d6:53:01:01:e4:62:8d:79:92:
45:0e:d4:0d:1e:d6:90:92:0e:88:43:f4:65:dd:3d:
21:d9:b4:67:dd:33:bb:e7:fc:18:8e:6e:1c:17:0a:
84:73:c4:4c:4e:b4:0c:60:bf:1a:d9:31:03:9f:f3:
9f:97:ae:22:86:21:12:c7:ad:3b:a2:7d:c5:c5:e8:
56:7d:43:14:a3:f6:b2:2c:0a:d8:8e:20:b3:4c:75:
21:f3:9a:fe:da:eb:0e:9e:f0:cb:ea:56:e4:b4:9b:
26:7a:12:d4:2d:5e:8e:1c:89:30:3f:03:7b:f0:ed:
83:62:b0:52:fd:0c:17:4b:f4:ce:03:f7:19:3a:57:
1d:bb:6c:be:9a:8a:42:21:56:43:ee:d4:a4:ab:38:
05:46:66:5a:64:d3:52:ab:de:f2:9d:ea:b1:7a:25:
d4:7b:25:c0:6c:85:f6:cf:32:38:0f:48:5f:36:34:
d1:25:5e:9e:de:a5:59:45:08:04:b1:c1:53:b7:4e:
1b:e9:94:5a:83:8a:6e:41:51:55:0f:eb:fd:0b:9a:
d3:34:89:04:ea:0f:4b:51:03:95:eb:73:eb:76:1d:
c5:dc:06:53:ea:3e:fa:b0:18:a9:30:bd:e3:a0:7a:
89:df:46:2c:7e:67:3e:e9:ce:eb:47:3e:af:a8:96:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:67:0D:2A:27:B7:9A:45:DD:E3:72:0D:60:43:CF:36:BD:9E:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jb9nDSont5pF3eNyDWBDzza9nl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:cb:50:cc:cc:cb:a1:29:e4:c8:7c:61:ff:91:6e:ef:e0:52:
d8:9f:f9:d5:af:4f:dc:af:0e:32:10:cf:78:1b:5d:82:df:94:
35:29:f6:bb:7b:db:e6:4b:c5:ec:7d:cb:f7:32:73:f7:49:0a:
90:ec:db:24:34:54:80:5b:3a:cc:56:26:cf:2f:dc:14:2c:08:
47:d7:df:27:ba:ec:17:d3:25:a5:1f:32:0b:c3:be:d9:40:02:
f3:de:75:92:2b:34:fe:5b:da:a8:fe:e0:d2:70:e8:8d:41:02:
54:da:64:f8:65:09:59:12:06:9b:18:7c:d2:d2:b1:c0:cf:09:
ad:c3:f9:b7:d0:63:4b:e4:67:c8:97:9a:9c:91:9d:b5:96:d3:
c1:e6:1c:d5:66:03:49:7c:f9:a0:c9:7d:12:7f:46:b0:4f:d7:
87:29:c8:76:eb:11:73:82:ec:36:f0:1a:31:b1:fc:4b:ec:1a:
29:8a:b4:f4:a9:2a:6a:d9:c2:71:f5:79:df:56:24:c8:86:9a:
61:da:b5:2b:c3:90:57:3c:f0:72:e7:72:d1:35:23:29:ee:15:
84:18:c3:bb:2b:85:a0:7f:25:8d:5c:61:75:c4:57:1a:76:92:
8a:4c:f7:bb:6c:4a:2e:f6:59:a9:58:7f:ab:93:dd:ec:d1:9c:
2d:0a:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:32 2025 by rpki-client