Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JNsoVKHEIFo8T1zqMGqJZo10elA.roa
File: JNsoVKHEIFo8T1zqMGqJZo10elA.roa (raw, json)
Hash identifier: Yn/TFw8XhXoBoRTJAGnanB8vX2ZNrfXY31bXrGKeUB8=
Subject key identifier: 24:DB:28:54:A1:C4:20:5A:3C:4F:5C:EA:30:6A:89:66:8D:74:7A:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828A00C2B76E59C9A1522B90C70A39EC5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JNsoVKHEIFo8T1zqMGqJZo10elA.roa
Signing time: Wed 10 Aug 2022 23:04:41 +0000
ROA not before: Wed 10 Aug 2022 23:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:8a00:8572/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8a:00:c2:b7:6e:59:c9:a1:52:2b:90:c7:0a:39:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 23:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24db2854a1c4205a3c4f5cea306a89668d747a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:74:29:59:e1:8e:27:ae:c3:3a:42:8e:9f:
49:7b:32:94:c3:1b:26:ea:b9:c6:83:4c:b9:8c:d7:
c5:7a:02:6e:3c:9a:3c:9b:d5:54:8c:36:d5:98:8c:
b2:6d:df:bd:ed:e7:19:61:7d:e9:56:cf:63:16:22:
d0:5c:3d:43:a8:6c:0b:e4:95:73:d2:63:3e:89:e8:
3c:97:77:cc:cf:5c:15:a0:ad:b5:42:27:db:4c:4a:
03:1e:90:1e:1e:92:49:fd:6c:ae:24:00:2e:dc:14:
d6:9e:c2:a7:2e:6c:2e:90:0d:dc:cd:47:25:31:bf:
d4:85:61:12:e6:22:04:55:c9:b5:03:ec:b0:c2:92:
03:cf:93:61:c5:4a:dc:c8:33:80:68:d3:5d:27:7e:
45:60:60:ef:6f:f7:f9:c3:84:66:2a:60:3f:62:a0:
2c:b5:68:8f:52:9c:41:ff:c0:cf:39:09:ab:b4:c8:
60:de:24:46:6d:c4:0f:9e:fc:f0:eb:8a:53:ca:44:
16:38:c7:24:e4:fa:7d:c9:fc:68:3c:2a:8e:0e:ba:
54:3c:2a:4d:f6:ae:2d:69:5b:82:a6:b3:2e:d4:ae:
d4:ae:eb:e0:07:3b:e1:5f:70:da:9c:15:65:0a:eb:
fa:f0:1e:8d:9e:e9:ab:0d:ff:52:5d:f6:13:ff:23:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:28:54:A1:C4:20:5A:3C:4F:5C:EA:30:6A:89:66:8D:74:7A:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JNsoVKHEIFo8T1zqMGqJZo10elA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:56:ab:7c:17:cb:94:5f:d6:8a:6b:2d:ec:2a:c5:7e:68:fe:
0e:d3:50:8f:13:05:98:ec:39:1f:80:40:cc:35:a6:18:49:d7:
a4:c4:b7:de:3e:71:54:29:f4:44:6d:e6:4f:91:3a:6b:df:5a:
20:ba:61:2b:78:a0:a4:0d:9e:ca:42:9d:ed:a2:49:1b:a2:39:
5a:b8:9a:1d:3e:5e:d9:5e:33:e6:45:2a:71:38:bb:0d:c0:ec:
d1:25:18:0f:82:6f:93:af:a7:8c:f7:19:b1:10:62:f4:4f:a2:
a0:d1:cb:f6:83:1b:ed:12:6c:b3:a6:17:97:21:36:58:c8:76:
4e:a3:35:16:28:cd:df:08:5c:53:58:99:70:3d:e0:2f:a2:0b:
2c:01:66:3c:92:a3:2d:9d:31:ee:89:26:0a:38:8a:28:a2:3a:
a9:c9:5e:ad:c5:37:a0:25:d6:3c:58:e7:44:f9:5a:fc:40:2e:
ab:b8:b0:89:3d:86:06:6f:a3:9b:48:dd:37:ee:77:b8:84:86:
22:87:89:1f:83:eb:71:06:d5:8a:af:45:c1:8a:88:07:1a:88:
36:55:fe:c4:ca:22:c1:52:5f:d6:a5:f1:b8:04:df:38:17:d2:
42:b9:97:33:50:53:af:50:99:f0:d8:1e:3c:c4:fc:e1:ff:cc:
c4:9d:7a:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKKAMK3blnJoVIrkMcKOexdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEwMjMwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGRiMjg1NGExYzQyMDVhM2M0ZjVjZWEzMDZhODk2NjhkNzQ3YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqR0KVnhjieuwzpCjp9JezKUwxsm
6rnGg0y5jNfFegJuPJo8m9VUjDbVmIyybd+97ecZYX3pVs9jFiLQXD1DqGwL5JVz
0mM+ieg8l3fMz1wVoK21QifbTEoDHpAeHpJJ/WyuJAAu3BTWnsKnLmwukA3czUcl
Mb/UhWES5iIEVcm1A+ywwpIDz5NhxUrcyDOAaNNdJ35FYGDvb/f5w4RmKmA/YqAs
tWiPUpxB/8DPOQmrtMhg3iRGbcQPnvzw64pTykQWOMck5Pp9yfxoPCqODrpUPCpN
9q4taVuCprMu1K7UruvgBzvhX3DanBVlCuv68B6NnumrDf9SXfYT/yNtXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCTbKFShxCBaPE9c6jBqiWaNdHpQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSk5zb1ZLSEVJRm84VDF6cU1HcUpabzEwZWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACJWq3wXy5Rf1oprLewq
xX5o/g7TUI8TBZjsOR+AQMw1phhJ16TEt94+cVQp9ERt5k+ROmvfWiC6YSt4oKQN
nspCne2iSRuiOVq4mh0+XtleM+ZFKnE4uw3A7NElGA+Cb5Ovp4z3GbEQYvRPoqDR
y/aDG+0SbLOmF5chNljIdk6jNRYozd8IXFNYmXA94C+iCywBZjySoy2dMe6JJgo4
iiiiOqnJXq3FN6Al1jxY50T5WvxALqu4sIk9hgZvo5tI3Tfud7iEhiKHiR+D63EG
1YqvRcGKiAcaiDZV/sTKIsFSX9al8bgE3zgX0kK5lzNQU69QmfDYHjzE/OH/zMSd
eqw=
-----END CERTIFICATE-----
Generated at Mon May 5 13:29:15 2025 by rpki-client