Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JFwozC5P6krBBot3xlM7Xhlcnek.roa
File: JFwozC5P6krBBot3xlM7Xhlcnek.roa (raw, json)
Hash identifier: K1X3GZS25Mfx4I8NY6ZgjcABk693Pskespl6uMAsCw8=
Subject key identifier: 24:5C:28:CC:2E:4F:EA:4A:C1:06:8B:77:C6:53:3B:5E:19:5C:9D:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896987FC4E2A74B5FB41E33EA0411743D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JFwozC5P6krBBot3xlM7Xhlcnek.roa
Signing time: Tue 18 Jul 2023 15:04:26 +0000
ROA not before: Tue 18 Jul 2023 15:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:6987:cf6f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:87:fc:4e:2a:74:b5:fb:41:e3:3e:a0:41:17:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 15:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=245c28cc2e4fea4ac1068b77c6533b5e195c9de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:07:be:9f:ea:d8:8a:59:f9:be:34:05:97:
de:25:5f:51:2b:36:84:59:26:57:09:d4:38:3d:a9:
69:9a:f6:8c:07:4e:4c:bb:15:91:9f:4d:0a:f5:76:
14:a2:07:f7:a4:fe:e7:ca:9f:4e:34:a8:3c:ec:77:
29:74:87:d3:33:d1:54:2c:01:81:a8:a5:34:2e:6c:
70:19:ce:87:2a:24:2e:94:af:06:99:ab:0b:a3:db:
46:35:8f:35:31:74:a5:b7:b0:b0:85:29:8f:e3:11:
74:d2:37:10:95:72:56:ca:ae:65:7c:93:76:16:88:
1f:5e:8a:a6:b3:d8:71:6a:85:03:ee:fe:13:fd:03:
fd:3f:53:ca:f6:18:42:0c:a7:a7:1a:e4:07:b1:13:
d3:92:a2:f8:a7:71:51:df:62:89:00:b2:f7:39:62:
ec:39:8b:46:fd:50:a4:23:fc:9e:8e:e4:f3:d4:19:
48:ad:03:59:05:e7:3f:34:69:43:5d:af:4c:1d:b2:
f6:ca:a3:1b:32:2e:28:a8:54:ce:55:03:a2:09:1a:
9a:35:e8:fe:67:62:ce:53:68:62:88:49:08:85:f4:
9c:16:7d:27:4f:79:48:5a:95:57:3f:3c:1e:9c:05:
41:20:2c:e5:f7:2e:2c:16:c1:d2:f6:51:9e:51:57:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:28:CC:2E:4F:EA:4A:C1:06:8B:77:C6:53:3B:5E:19:5C:9D:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JFwozC5P6krBBot3xlM7Xhlcnek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:5e:c0:d9:a9:fb:02:ae:d3:b0:ce:4a:20:65:b6:de:05:71:
f2:63:b9:20:fd:93:97:19:95:77:b2:3b:60:16:47:09:d3:7d:
7d:84:84:bb:93:e4:4e:c9:33:0b:e0:dd:85:d3:dc:5c:4e:6d:
4e:52:f8:bd:3b:e4:8f:ba:f4:fa:9d:a6:b5:c2:d0:d8:a2:8e:
7a:0d:66:9a:4e:c9:f1:ba:36:7a:60:d6:5b:bd:1a:5a:0a:d5:
1b:83:81:66:10:1c:5d:f5:55:05:bc:db:b2:9a:15:f9:dd:1e:
ed:4a:ae:bb:e2:22:22:0f:d9:b5:3b:ec:ad:d3:e9:6a:81:6a:
20:2d:d8:f4:b3:d1:bd:2d:ab:4f:ab:63:9d:7b:67:e7:32:4c:
56:30:34:68:27:32:0c:31:58:3a:9b:15:11:9d:7f:e9:bf:d9:
8b:e8:31:88:73:81:37:42:92:29:60:9d:47:ef:fa:e2:be:a9:
ca:f3:87:76:74:9f:bb:e5:6f:1d:5a:0a:a4:71:ac:b5:67:0d:
78:ef:a4:f5:8c:e9:c8:66:40:67:0c:bc:f0:2b:f7:58:3f:bd:
c4:b9:fc:ff:9f:f9:a2:15:67:9a:48:4e:e8:56:aa:5b:2d:29:
23:ca:a3:36:0e:d5:8b:8d:22:27:4b:ea:d8:db:8a:6b:d1:57:
4e:59:aa:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlph/xOKnS1+0HjPqBBF0PSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE4MTUwNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDVjMjhjYzJlNGZlYTRhYzEwNjhiNzdjNjUzM2I1ZTE5NWM5ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3AHvp/q2IpZ+b40BZfeJV9RKzaE
WSZXCdQ4PalpmvaMB05MuxWRn00K9XYUogf3pP7nyp9ONKg87HcpdIfTM9FULAGB
qKU0LmxwGc6HKiQulK8GmasLo9tGNY81MXSlt7CwhSmP4xF00jcQlXJWyq5lfJN2
FogfXoqms9hxaoUD7v4T/QP9P1PK9hhCDKenGuQHsRPTkqL4p3FR32KJALL3OWLs
OYtG/VCkI/yejuTz1BlIrQNZBec/NGlDXa9MHbL2yqMbMi4oqFTOVQOiCRqaNej+
Z2LOU2hiiEkIhfScFn0nT3lIWpVXPzwenAVBICzl9y4sFsHS9lGeUVeqbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCRcKMwuT+pKwQaLd8ZTO14ZXJ3pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSkZ3b3pDNVA2a3JCQm90M3hsTTdYaGxjbmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD5ewNmp+wKu07DOSiBl
tt4FcfJjuSD9k5cZlXeyO2AWRwnTfX2EhLuT5E7JMwvg3YXT3FxObU5S+L075I+6
9PqdprXC0NiijnoNZppOyfG6Nnpg1lu9GloK1RuDgWYQHF31VQW827KaFfndHu1K
rrviIiIP2bU77K3T6WqBaiAt2PSz0b0tq0+rY517Z+cyTFYwNGgnMgwxWDqbFRGd
f+m/2YvoMYhzgTdCkilgnUfv+uK+qcrzh3Z0n7vlbx1aCqRxrLVnDXjvpPWM6chm
QGcMvPAr91g/vcS5/P+f+aIVZ5pITuhWqlstKSPKozYO1YuNIidL6tjbimvRV05Z
qrA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:25:58 2025 by rpki-client