Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J01mYDb1HrrUVTNNDNynfofNUFQ.roa
File: J01mYDb1HrrUVTNNDNynfofNUFQ.roa (raw, json)
Hash identifier: iszuW/WcFCm/Dl1NTbGXY0qyF8CU8kG4B8EKXQvWNVI=
Subject key identifier: 27:4D:66:60:36:F5:1E:BA:D4:55:33:4D:0C:DC:A7:7E:87:CD:50:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835EE72653A42656F7AF7D7590DB27B939
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J01mYDb1HrrUVTNNDNynfofNUFQ.roa
Signing time: Wed 21 Sep 2022 07:15:50 +0000
ROA not before: Wed 21 Sep 2022 07:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:e7:26:53:a4:26:56:f7:af:7d:75:90:db:27:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 07:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=274d666036f51ebad455334d0cdca77e87cd5054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:27:e3:46:de:c6:f9:cd:f8:c0:c3:6a:8a:
38:63:be:35:c7:94:91:f5:40:1a:c0:4a:0e:cb:c7:
78:90:e4:65:17:bf:01:30:7b:67:d7:7d:15:a2:cd:
8c:6e:6d:24:2e:0f:b2:5f:fc:ac:63:20:7c:c9:75:
4b:24:dd:88:58:f1:0e:de:56:49:1d:d8:89:80:ce:
dc:c8:4a:60:05:c0:c4:6a:76:cb:39:54:70:60:f8:
d1:70:96:22:40:49:1c:b7:2e:b0:8a:9b:e4:a5:fa:
b1:e4:01:95:d7:23:89:5f:c5:ab:f0:53:e2:37:66:
63:56:88:c2:5b:e9:de:a0:5e:73:2e:a4:18:38:87:
71:bf:6f:49:d3:36:9b:35:b4:ec:95:c3:e5:cc:3e:
ff:7e:00:bf:e8:71:29:38:df:06:e5:17:4e:37:73:
80:c2:ce:1a:24:bd:aa:e1:5b:f6:3b:6a:f8:18:d4:
36:9d:ca:6b:99:ac:79:ea:20:3e:a5:d3:5d:3e:99:
38:37:ac:c7:03:70:71:2f:a5:60:6b:07:67:be:fa:
c4:fa:96:7b:6f:28:e0:f9:88:fc:cd:3b:a9:ca:7b:
fb:e3:ba:2f:7f:97:44:27:71:19:b0:f6:be:91:42:
52:67:93:30:7f:a3:cb:d0:7e:69:d7:bd:58:7f:02:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:66:60:36:F5:1E:BA:D4:55:33:4D:0C:DC:A7:7E:87:CD:50:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J01mYDb1HrrUVTNNDNynfofNUFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:04:e5:7e:84:df:72:44:94:f3:d2:d6:df:06:5f:3f:ab:89:
37:06:85:bb:cd:30:8a:09:3c:69:b8:cf:00:fc:ed:39:f9:92:
2d:9c:a4:8e:d5:ac:b0:5a:6a:9d:75:f9:70:d6:f9:9e:67:9e:
b5:fa:33:19:c1:e4:0e:a3:24:81:b1:26:c0:4a:a6:ab:02:4f:
39:09:61:6c:43:88:96:9e:44:d2:a3:ee:29:7d:37:8b:24:22:
c1:75:cb:01:a2:6a:0a:05:82:a8:ff:5e:0c:f8:8d:3d:9f:cc:
53:77:0e:43:4f:ed:cf:ca:b5:ee:aa:b6:4e:21:8f:d7:01:cb:
3c:04:86:73:75:ef:1b:cc:2a:6f:87:d6:37:08:4f:8f:0e:c4:
c2:1d:1c:08:12:86:ef:11:5c:ca:3c:6d:20:b0:c1:6b:06:f7:
e7:cb:42:1a:ec:92:b7:c7:5f:2b:1c:27:b6:83:9e:9b:7d:8d:
b3:4d:c3:59:c4:01:85:26:54:c6:bf:0e:be:26:e6:46:87:c5:
03:f5:d9:04:5b:25:98:50:56:6c:28:f7:9d:79:0c:9b:b7:eb:
7f:65:2f:56:02:ab:4c:8b:1e:c1:58:c8:d1:4a:11:ec:80:a2:
f6:d7:0a:2b:e2:58:3c:54:4b:8a:c0:8e:76:31:45:a9:a4:ae:
d4:60:01:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNe5yZTpCZW9699dZDbJ7k5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTIxMDcxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzRkNjY2MDM2ZjUxZWJhZDQ1NTMzNGQwY2RjYTc3ZTg3Y2Q1MDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJQn40bexvnN+MDDaoo4Y741x5SR
9UAawEoOy8d4kORlF78BMHtn130Vos2Mbm0kLg+yX/ysYyB8yXVLJN2IWPEO3lZJ
HdiJgM7cyEpgBcDEanbLOVRwYPjRcJYiQEkcty6wipvkpfqx5AGV1yOJX8Wr8FPi
N2ZjVojCW+neoF5zLqQYOIdxv29J0zabNbTslcPlzD7/fgC/6HEpON8G5RdON3OA
ws4aJL2q4Vv2O2r4GNQ2ncprmax56iA+pdNdPpk4N6zHA3BxL6VgawdnvvrE+pZ7
byjg+Yj8zTupynv747ovf5dEJ3EZsPa+kUJSZ5Mwf6PL0H5p171YfwK8pwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCdNZmA29R661FUzTQzcp36HzVBUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSjAxbVlEYjFIcnJVVlROTkROeW5mb2ZOVUZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEAE5X6E33JElPPS1t8G
Xz+riTcGhbvNMIoJPGm4zwD87Tn5ki2cpI7VrLBaap11+XDW+Z5nnrX6MxnB5A6j
JIGxJsBKpqsCTzkJYWxDiJaeRNKj7il9N4skIsF1ywGiagoFgqj/Xgz4jT2fzFN3
DkNP7c/Kte6qtk4hj9cByzwEhnN17xvMKm+H1jcIT48OxMIdHAgShu8RXMo8bSCw
wWsG9+fLQhrskrfHXyscJ7aDnpt9jbNNw1nEAYUmVMa/Dr4m5kaHxQP12QRbJZhQ
Vmwo9515DJu3639lL1YCq0yLHsFYyNFKEeyAovbXCiviWDxUS4rAjnYxRamkrtRg
AYM=
-----END CERTIFICATE-----
Generated at Sat May 3 14:47:43 2025 by rpki-client