Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JwG5K-kT73KUvj1zySoMKtsHKI.roa
File: 8JwG5K-kT73KUvj1zySoMKtsHKI.roa (raw, json)
Hash identifier: 1STWg7CLRLATY9AHHm9+SyAflcezeMmWjh4qi/nZO1o=
Subject key identifier: F0:9C:06:E4:AF:A4:4F:BD:CA:52:F8:F5:CF:24:A8:30:AB:6C:1C:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68CD45B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JwG5K-kT73KUvj1zySoMKtsHKI.roa
Signing time: Tue 08 Feb 2022 01:09:10 +0000
ROA not before: Tue 08 Feb 2022 01:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758283186 (0x68cd45b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 01:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f09c06e4afa44fbdca52f8f5cf24a830ab6c1ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:89:22:15:81:71:54:fa:bd:ec:ec:f0:71:
ed:b8:d2:ed:3b:36:e5:8f:62:2a:48:85:b8:cb:8f:
aa:b8:07:a5:9f:b1:c3:d5:7b:bb:dd:84:dc:7d:4a:
73:01:d4:cf:98:43:e1:cb:de:ff:c5:53:2e:cd:36:
57:a7:c9:b0:a4:7d:d6:46:1e:fd:fd:ee:21:b9:d8:
b8:5b:f8:a5:50:f1:53:bf:c3:5f:8a:15:bb:4f:b8:
6e:91:b7:60:3d:0b:d6:ef:b0:13:5b:5f:ef:c2:04:
ac:60:4d:b4:6b:db:03:ec:db:23:8d:86:40:1b:79:
95:15:6f:1f:f7:57:44:20:63:29:31:04:3a:be:e6:
6f:24:39:9e:9a:0c:2b:9d:d8:10:9f:11:0c:d3:16:
69:2c:1d:49:1d:4b:8d:36:a2:dd:ba:7a:44:ee:02:
e1:ec:7b:32:cd:bd:e2:e2:87:de:5a:76:35:43:e2:
76:f0:07:5d:58:7b:07:23:40:c2:0c:c6:4c:08:be:
6a:69:5c:0f:7c:a9:49:e7:4e:cd:e1:e0:84:98:6e:
51:17:8c:2b:71:c0:1b:81:79:2d:9c:72:19:20:e5:
a8:b3:25:d6:b6:63:8d:d1:94:93:b7:44:37:bb:c7:
59:61:47:19:1a:66:80:a3:3f:0f:01:58:a4:4d:0e:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:06:E4:AF:A4:4F:BD:CA:52:F8:F5:CF:24:A8:30:AB:6C:1C:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JwG5K-kT73KUvj1zySoMKtsHKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:f9:93:91:72:86:93:8d:36:12:75:d8:02:9a:61:7a:bb:4d:
27:64:1d:b8:b5:2e:7b:37:61:00:da:d8:38:18:18:f2:42:07:
33:c5:1c:08:10:cd:46:ae:b1:be:81:a3:6a:bf:93:74:5f:de:
0e:66:9d:d4:7a:d3:92:2f:b3:51:94:46:2c:1e:e9:d7:96:3e:
36:4a:2f:14:4d:4f:93:57:f4:54:bc:b9:5e:43:d7:5e:3a:91:
b8:62:41:76:7e:cf:23:4c:cd:4e:5e:4b:e0:89:d6:a0:4b:f2:
e8:e0:d1:a8:8a:72:12:75:30:c2:b0:9e:11:39:29:aa:47:da:
38:2e:d5:15:de:d0:3c:82:6c:2e:4f:0c:c4:c1:50:c3:08:cd:
43:5e:0d:12:02:8c:42:41:59:32:f1:0b:f3:2f:32:7b:59:79:
0e:4b:71:7c:31:ba:58:61:9e:d2:92:c2:2e:88:7b:fe:e3:83:
5d:8a:d2:f4:47:80:bf:11:aa:20:fc:ac:27:6d:70:bb:a2:dc:
20:95:61:8a:9d:3a:33:7c:94:0d:46:c3:93:a5:bf:a0:6a:9d:
6f:8f:53:2d:b6:97:43:ce:37:f2:ac:02:69:02:58:9f:f9:6a:
f0:2c:18:b1:c5:95:13:21:88:94:65:3b:ed:58:3f:6d:89:a2:
8d:db:0b:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaM1FsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
ODAxMDkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjA5YzA2ZTRhZmE0
NGZiZGNhNTJmOGY1Y2YyNGE4MzBhYjZjMWNhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxtiSIVgXFU+r3s7PBx7bjS7Ts25Y9iKkiFuMuPqrgHpZ+x
w9V7u92E3H1KcwHUz5hD4cve/8VTLs02V6fJsKR91kYe/f3uIbnYuFv4pVDxU7/D
X4oVu0+4bpG3YD0L1u+wE1tf78IErGBNtGvbA+zbI42GQBt5lRVvH/dXRCBjKTEE
Or7mbyQ5npoMK53YEJ8RDNMWaSwdSR1LjTai3bp6RO4C4ex7Ms294uKH3lp2NUPi
dvAHXVh7ByNAwgzGTAi+amlcD3ypSedOzeHghJhuUReMK3HAG4F5LZxyGSDlqLMl
1rZjjdGUk7dEN7vHWWFHGRpmgKM/DwFYpE0OxhMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTwnAbkr6RPvcpS+PXPJKgwq2wcojAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzhKd0c1Sy1rVDczS1V2ajF6eVNvTUt0c0hLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAY+ZORcoaTjTYSddgCmmF6u00nZB24tS57N2EA
2tg4GBjyQgczxRwIEM1GrrG+gaNqv5N0X94OZp3UetOSL7NRlEYsHunXlj42Si8U
TU+TV/RUvLleQ9deOpG4YkF2fs8jTM1OXkvgidagS/Lo4NGoinISdTDCsJ4ROSmq
R9o4LtUV3tA8gmwuTwzEwVDDCM1DXg0SAoxCQVky8QvzLzJ7WXkOS3F8MbpYYZ7S
ksIuiHv+44NditL0R4C/Eaog/KwnbXC7otwglWGKnTozfJQNRsOTpb+gap1vj1Mt
tpdDzjfyrAJpAlif+WrwLBixxZUTIYiUZTvtWD9tiaKN2wsH
-----END CERTIFICATE-----
Generated at Thu May 1 08:32:05 2025 by rpki-client