Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J26YOI79avVmmQ2qYAeXpQTJves.roa
File: J26YOI79avVmmQ2qYAeXpQTJves.roa (raw, json)
Hash identifier: 4el1DEgmOHwOCV3ocRSt6uDdK0F5ni++HVLOO+9V11A=
Subject key identifier: 27:6E:98:38:8E:FD:6A:F5:66:99:0D:AA:60:07:97:A5:04:C9:BD:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A01B4E31DCB94DC7125C48AB736AF844
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J26YOI79avVmmQ2qYAeXpQTJves.roa
Signing time: Thu 02 Mar 2023 02:16:29 +0000
ROA not before: Thu 02 Mar 2023 02:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:1b:4e:31:dc:b9:4d:c7:12:5c:48:ab:73:6a:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 02:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276e98388efd6af566990daa600797a504c9bdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:89:bf:6e:09:26:d8:22:51:68:26:db:07:
96:7d:84:00:d6:97:e2:1f:bf:37:2e:46:e4:5b:e9:
fe:8c:91:9e:b2:52:b4:59:a9:0c:74:8a:c9:fc:9c:
53:f3:d4:70:c2:e8:08:9e:01:7b:ab:91:15:09:12:
ab:00:b5:5c:65:cb:e3:c3:23:a9:80:2c:fc:f8:9f:
80:cd:52:bd:83:65:3e:a4:07:b8:28:8d:7c:21:f2:
30:01:c4:d6:2b:58:40:f5:0a:4d:29:a4:c1:1f:4c:
c8:b4:77:30:7e:61:10:30:17:dd:5e:1a:77:b8:08:
20:25:a1:b3:de:77:c4:bd:f7:6b:7a:e4:00:e2:64:
c0:6d:82:f2:e8:65:3b:09:b0:24:84:bf:d9:ea:4d:
91:50:b6:24:a7:8b:c4:7a:ef:06:3c:7d:f9:6f:70:
8e:27:0e:b4:89:01:0b:e2:6f:28:58:e2:c9:c1:72:
1e:aa:5a:6e:f4:41:fe:97:46:3e:d3:58:8b:07:ff:
9d:6c:80:c6:9c:88:81:26:54:ca:6b:a7:80:78:e5:
9f:f6:f8:70:c2:fb:e5:2f:2e:56:d5:fd:10:c9:05:
02:69:2b:1c:92:55:89:ff:aa:b0:f8:db:8c:58:87:
b2:10:44:02:0b:ca:ae:77:d1:b8:5f:01:03:1a:a9:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:98:38:8E:FD:6A:F5:66:99:0D:AA:60:07:97:A5:04:C9:BD:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J26YOI79avVmmQ2qYAeXpQTJves.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:f5:8a:b5:7f:06:77:eb:64:90:ac:ac:34:bd:1c:1a:e1:7d:
43:20:88:7d:88:66:77:73:41:b5:d5:b6:e5:fb:3b:a0:0d:31:
33:75:7e:87:82:13:99:59:77:22:0a:13:9e:ea:25:12:b8:0a:
63:4b:34:de:65:b7:85:2e:45:50:f9:78:7b:cf:e8:ec:29:9a:
56:b7:bc:ce:1c:6c:52:69:46:02:72:d3:39:d1:f2:4c:ea:c4:
c7:b8:27:b9:b0:f3:41:c1:56:16:4a:e9:09:52:15:a7:9b:f0:
ce:a7:ae:8b:81:64:f1:12:17:7c:71:d5:cf:e5:ce:5e:39:3e:
3f:fa:5c:7d:ab:4f:53:51:8f:0a:2d:eb:ca:38:7b:53:e6:53:
62:4e:65:18:fd:7d:70:ce:f2:ba:22:61:02:96:20:42:aa:31:
ff:15:9b:12:b2:8c:66:71:f4:49:05:96:59:c4:b0:1c:77:f3:
6e:4e:90:90:71:bd:51:b3:b0:1a:ec:1c:88:15:87:6c:1a:a0:
5d:e9:57:bc:99:65:45:bd:81:0b:83:fc:26:ab:93:84:3c:ac:
f0:30:8b:fc:d0:2e:f5:73:c7:23:86:9c:7e:65:c4:65:c4:15:
b9:5d:71:07:5f:9d:e2:81:27:4a:a9:ab:9a:2a:31:8c:4b:8b:
49:11:1f:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYagG04x3LlNxxJcSKtzavhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMDIxNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzZlOTgzODhlZmQ2YWY1NjY5OTBkYWE2MDA3OTdhNTA0YzliZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWJv24JJtgiUWgm2weWfYQA1pfi
H783LkbkW+n+jJGeslK0WakMdIrJ/JxT89RwwugIngF7q5EVCRKrALVcZcvjwyOp
gCz8+J+AzVK9g2U+pAe4KI18IfIwAcTWK1hA9QpNKaTBH0zItHcwfmEQMBfdXhp3
uAggJaGz3nfEvfdreuQA4mTAbYLy6GU7CbAkhL/Z6k2RULYkp4vEeu8GPH35b3CO
Jw60iQEL4m8oWOLJwXIeqlpu9EH+l0Y+01iLB/+dbIDGnIiBJlTKa6eAeOWf9vhw
wvvlLy5W1f0QyQUCaSscklWJ/6qw+NuMWIeyEEQCC8qud9G4XwEDGqnxlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCdumDiO/Wr1ZpkNqmAHl6UEyb3rMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSjI2WU9JNzlhdlZtbVEycVlBZVhwUVRKdmVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAET1irV/BnfrZJCsrDS9
HBrhfUMgiH2IZndzQbXVtuX7O6ANMTN1foeCE5lZdyIKE57qJRK4CmNLNN5lt4Uu
RVD5eHvP6Owpmla3vM4cbFJpRgJy0znR8kzqxMe4J7mw80HBVhZK6QlSFaeb8M6n
rouBZPESF3xx1c/lzl45Pj/6XH2rT1NRjwot68o4e1PmU2JOZRj9fXDO8roiYQKW
IEKqMf8VmxKyjGZx9EkFllnEsBx3825OkJBxvVGzsBrsHIgVh2waoF3pV7yZZUW9
gQuD/Cark4Q8rPAwi/zQLvVzxyOGnH5lxGXEFbldcQdfneKBJ0qpq5oqMYxLi0kR
H9E=
-----END CERTIFICATE-----
Generated at Fri May 2 13:50:39 2025 by rpki-client