Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JLOKmF6ZzCl59tfFTWaDrBGiKS4.roa
File: JLOKmF6ZzCl59tfFTWaDrBGiKS4.roa (raw, json)
Hash identifier: qdyEubD0EFhJG9qZx+a6dIGTiqiUQcsoSSxMMUg7yN4=
Subject key identifier: 24:B3:8A:98:5E:99:CC:29:79:F6:D7:C5:4D:66:83:AC:11:A2:29:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E7DA7E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JLOKmF6ZzCl59tfFTWaDrBGiKS4.roa
Signing time: Mon 20 Jun 2022 20:09:44 +0000
ROA not before: Mon 20 Jun 2022 20:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390599653 (0x8e7da7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 20:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24b38a985e99cc2979f6d7c54d6683ac11a2292e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:e2:98:28:f8:ea:17:c5:5b:55:28:e5:a4:
f3:fe:7b:24:0b:ad:65:b9:f3:bc:01:dc:17:3e:43:
c6:f6:a5:de:b1:82:7e:36:a5:a0:09:6a:6c:5e:9b:
6e:54:4e:d9:8f:1f:b6:49:00:e0:02:55:ac:46:36:
4c:03:1f:cc:8a:ba:9d:9d:cd:40:08:3f:26:dd:9e:
73:46:5e:23:91:cb:ce:12:63:fc:3d:13:9b:d5:8a:
9d:e1:cd:92:92:3c:7f:6e:37:09:02:c3:7d:20:81:
f6:97:e6:17:c4:d4:1c:21:2c:cd:67:ed:59:55:42:
95:a7:9c:b9:7a:47:11:8c:88:da:ac:7d:e3:b7:29:
3d:c2:b1:9d:cf:6d:73:fb:f6:b1:ae:95:ef:e4:72:
9a:28:df:78:e3:7b:d2:07:c4:0d:0d:d7:27:d7:26:
5a:c4:0d:6b:f8:11:89:ac:24:c3:24:30:f1:63:e2:
a4:da:ab:e2:04:da:99:fe:f0:19:98:39:95:f7:8a:
da:d2:b9:84:65:74:8e:d9:ee:e7:33:c2:da:b7:b1:
b9:6e:49:16:5d:f0:02:c0:46:c0:52:9d:77:3d:d5:
41:6b:4a:51:87:2e:3c:43:7d:ef:1b:fd:03:c5:ef:
25:21:0b:ed:95:d2:cf:1d:4c:6d:86:26:fd:a5:0f:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:8A:98:5E:99:CC:29:79:F6:D7:C5:4D:66:83:AC:11:A2:29:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JLOKmF6ZzCl59tfFTWaDrBGiKS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:6e:76:00:bb:1b:c1:14:5e:c4:33:27:f4:b4:1f:f7:59:88:
b5:4c:bf:13:05:22:6d:56:1b:63:46:72:f4:1f:65:24:ac:66:
af:47:66:22:f7:95:2c:3b:cf:e2:81:76:92:d2:48:0c:2f:48:
b7:11:9b:fc:79:db:95:4b:8f:10:9c:9f:9d:37:76:ef:e1:36:
cf:c7:81:c3:a5:b1:b4:ee:8a:8f:3d:a8:1e:2e:ec:a0:48:41:
64:25:24:41:87:32:ba:03:d7:de:4a:c0:d3:73:32:64:94:61:
df:94:9c:83:79:35:a1:16:99:43:0b:92:43:ed:79:1c:ae:64:
2b:0d:1a:28:f9:f0:e4:d2:f8:59:9b:c5:95:c1:2a:6f:df:0a:
ce:6d:74:eb:8a:42:47:1c:dc:d8:0d:c9:44:02:1b:bd:e2:f4:
5d:de:d3:5d:b9:57:5e:46:b2:c5:22:80:df:94:5a:96:45:07:
97:a4:10:da:a9:2e:d7:b3:e2:c4:a4:4b:fd:78:a7:2f:6f:c5:
b0:83:51:25:3e:15:9c:f6:27:89:d7:6e:35:2c:3d:9e:85:00:
3c:47:b5:57:9b:57:0f:f8:73:fc:09:ca:e1:19:6d:94:c1:c3:
a6:94:63:a2:83:c3:82:14:f2:2c:0c:26:20:ec:2b:df:e3:8e:
fd:17:47:9b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI59p+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjAyMDA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI0YjM4YTk4NWU5
OWNjMjk3OWY2ZDdjNTRkNjY4M2FjMTFhMjI5MmUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZRuKYKPjqF8VbVSjlpPP+eyQLrWW587wB3Bc+Q8b2pd6x
gn42paAJamxem25UTtmPH7ZJAOACVaxGNkwDH8yKup2dzUAIPybdnnNGXiORy84S
Y/w9E5vVip3hzZKSPH9uNwkCw30ggfaX5hfE1BwhLM1n7VlVQpWnnLl6RxGMiNqs
feO3KT3CsZ3PbXP79rGule/kcpoo33jje9IHxA0N1yfXJlrEDWv4EYmsJMMkMPFj
4qTaq+IE2pn+8BmYOZX3itrSuYRldI7Z7uczwtq3sbluSRZd8ALARsBSnXc91UFr
SlGHLjxDfe8b/QPF7yUhC+2V0s8dTG2GJv2lD59FAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUJLOKmF6ZzCl59tfFTWaDrBGiKS4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9KTE9LbUY2WnpDbDU5dGZGVFdhRHJCR2lLUzQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAAm52ALsbwRRexDMn9LQf91mItUy/EwUibVYb
Y0Zy9B9lJKxmr0dmIveVLDvP4oF2ktJIDC9ItxGb/HnblUuPEJyfnTd27+E2z8eB
w6WxtO6Kjz2oHi7soEhBZCUkQYcyugPX3krA03MyZJRh35Scg3k1oRaZQwuSQ+15
HK5kKw0aKPnw5NL4WZvFlcEqb98Kzm1064pCRxzc2A3JRAIbveL0Xd7TXblXXkay
xSKA35RalkUHl6QQ2qku17PixKRL/XinL2/FsINRJT4VnPYnidduNSw9noUAPEe1
V5tXD/hz/AnK4RltlMHDppRjooPDghTyLAwmIOwr3+OO/RdHmw==
-----END CERTIFICATE-----
Generated at Fri May 2 05:37:16 2025 by rpki-client