Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbTsU2pcp1QRMAVDhWlcDNKvXdk.roa
File: jbTsU2pcp1QRMAVDhWlcDNKvXdk.roa (raw, json)
Hash identifier: qK784SQSCE1f5plw0Lq6jPjV3iRjAroPK9sXN15ThGo=
Subject key identifier: 8D:B4:EC:53:6A:5C:A7:54:11:30:05:43:85:69:5C:0C:D2:AF:5D:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 691A02E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbTsU2pcp1QRMAVDhWlcDNKvXdk.roa
Signing time: Wed 09 Feb 2022 08:04:32 +0000
ROA not before: Wed 09 Feb 2022 08:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763312361 (0x691a02e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 08:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8db4ec536a5ca7541130054385695c0cd2af5dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:e8:64:1e:75:14:fe:60:6f:22:b3:b9:30:
ed:25:0e:5b:3e:45:54:c0:03:bf:ce:f6:5c:7a:34:
29:1e:26:d8:9b:5e:47:12:88:c2:a4:43:6e:c1:8b:
f1:28:4a:b9:d9:d3:ff:6a:c2:be:a4:db:b6:0e:ff:
69:90:96:15:e3:11:53:38:ca:0c:d7:43:48:12:44:
de:60:9b:81:32:da:19:d6:0c:8f:29:3f:1b:d1:55:
a5:9b:65:b4:c4:8c:9b:c5:f5:14:ab:f2:34:88:a5:
22:4b:98:a1:67:91:1e:31:ec:d4:35:c7:17:0e:ba:
03:0b:b7:62:d6:f7:9f:a5:ae:ce:5b:b3:40:be:a2:
c7:c2:36:bb:2a:bf:86:01:69:17:4c:e9:2f:55:36:
1c:4a:af:1b:41:91:85:e8:30:96:1a:aa:47:37:fd:
f4:8f:69:ed:b2:f4:fc:c1:ab:ef:59:49:8d:2c:4b:
28:de:04:e0:4a:67:ee:2b:62:df:a9:8e:00:e0:e2:
5b:7d:f1:52:dc:35:a3:6a:52:fb:da:68:4f:1e:95:
dd:43:98:18:32:6b:08:db:e4:7a:50:1f:b2:c7:1f:
26:49:06:94:de:ce:fa:25:91:4a:5f:7e:fb:08:3a:
f6:20:cd:a4:85:84:d4:2a:3d:f7:80:06:bd:9f:f6:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:EC:53:6A:5C:A7:54:11:30:05:43:85:69:5C:0C:D2:AF:5D:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jbTsU2pcp1QRMAVDhWlcDNKvXdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:c3:79:94:f0:19:df:79:c0:33:a9:c0:d3:fa:b5:2e:02:19:
8b:f1:9c:bc:31:24:01:f9:de:c1:ea:57:d3:8d:dc:66:3c:76:
e1:bd:2e:6f:5f:46:93:35:c8:9a:16:c1:15:f8:25:b7:d0:1d:
10:12:a2:19:e1:14:7b:5e:fb:dd:f0:a6:66:64:63:43:c7:a8:
73:3c:5d:03:43:49:b5:6b:5a:04:04:62:59:8a:04:3b:7e:76:
fe:68:73:7f:1d:6f:07:6d:5b:62:37:e9:04:4f:c9:6d:89:c8:
35:c0:dc:3b:1d:71:57:48:3d:df:84:71:33:60:45:32:f4:b9:
29:20:b3:20:23:c3:25:10:29:42:7f:91:68:da:f7:27:64:96:
5b:1d:65:59:58:73:47:59:01:ca:64:44:52:1c:2d:e9:eb:28:
0d:8d:1b:84:54:2b:f1:30:0c:75:fa:49:bb:b0:e9:ab:cd:20:
f9:f4:2a:53:62:99:48:ae:9d:49:ad:5d:90:90:fe:d6:86:1c:
a2:a5:5b:ce:41:86:a1:90:49:fe:1c:15:c1:02:a3:fa:08:93:
d8:e5:9a:08:9f:0a:a2:3f:e1:96:9d:04:c3:9b:9f:2e:52:75:
85:19:b6:9f:7d:2c:17:dc:9d:23:8e:cc:45:56:a2:07:c7:92:
d1:7f:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:47 2025 by rpki-client