Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOa_lS-DHHpDJ_38fc2McH1qZVc.roa
File: JOa_lS-DHHpDJ_38fc2McH1qZVc.roa (raw, json)
Hash identifier: 8tiA5IT3ZcF4J/j0VPuYBjsg9JzWZB8VemLpYga/IOs=
Subject key identifier: 24:E6:BF:95:2F:83:1C:7A:43:27:FD:FC:7D:CD:8C:70:7D:6A:65:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F451A92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOa_lS-DHHpDJ_38fc2McH1qZVc.roa
Signing time: Thu 03 Mar 2022 09:08:38 +0000
ROA not before: Thu 03 Mar 2022 09:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866799762 (0x6f451a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 09:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e6bf952f831c7a4327fdfc7dcd8c707d6a6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:a4:29:f9:61:48:d8:d9:9b:2a:fd:ec:69:
c0:98:a2:a9:14:e6:7e:f2:0e:83:15:1c:04:45:9e:
b1:1a:8a:53:7d:35:25:68:fe:c7:ff:75:84:8a:1e:
27:57:a4:a6:04:0d:78:a1:4f:a1:9b:02:54:cf:60:
b0:ba:85:ff:28:f2:a3:e1:1e:36:83:cf:2a:b3:92:
32:15:b0:51:a8:c4:42:ac:d3:e2:f5:e3:a5:df:9f:
78:bb:7d:23:6e:dd:d7:10:5b:d8:a8:71:e9:19:00:
5f:45:79:1a:b9:e7:38:99:97:b6:a9:83:ab:86:8f:
a4:94:66:ab:33:ba:e2:9a:fd:8f:dc:fe:f0:f1:a4:
2c:df:e7:fd:be:58:b4:04:9a:5d:37:7e:84:3d:d5:
e7:00:41:d8:77:7b:ab:fe:40:da:0f:05:5a:98:c9:
5e:26:c1:b5:9a:4a:76:3a:ba:e7:91:bc:a9:0c:56:
bd:00:96:ce:d4:90:3b:bf:55:1b:95:52:cb:6d:e2:
33:31:d7:3d:23:c5:49:74:13:bc:b8:3c:46:ba:37:
c7:27:72:33:68:31:b4:82:10:30:dd:48:42:78:4b:
7e:1f:05:15:6d:12:ae:12:a0:a3:63:88:2b:4e:1f:
7e:4d:17:3d:0a:94:be:c3:55:28:2c:3c:b1:b4:c5:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:BF:95:2F:83:1C:7A:43:27:FD:FC:7D:CD:8C:70:7D:6A:65:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JOa_lS-DHHpDJ_38fc2McH1qZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:43:ab:a4:0c:9d:1d:ab:0d:4c:f6:58:69:f7:b6:64:49:d0:
05:ed:ec:62:dc:45:b2:c2:de:7f:91:00:73:19:94:43:9d:2b:
e5:34:84:67:f3:74:15:ca:a5:c7:43:6d:74:72:65:5b:f1:4d:
05:e6:e3:89:32:c0:c4:cb:4a:e6:29:c1:8d:51:65:6f:0f:83:
df:6d:99:46:77:2f:4e:53:0b:bd:b8:54:43:7c:d4:59:55:28:
7e:65:7c:bd:78:ad:d7:ca:89:10:5c:4d:6f:58:67:7e:21:1e:
31:cf:0e:35:16:ae:8c:b9:f3:ee:a2:70:98:fb:ad:78:7b:8b:
6e:a5:34:2f:17:90:36:b0:fc:5d:e0:c7:49:8e:af:62:27:aa:
fd:7b:29:21:76:91:1e:d0:83:5b:39:07:ea:fc:97:73:e9:6c:
d2:9b:b4:40:bb:c5:ae:fa:8c:72:7b:b3:c3:de:02:53:7f:1c:
fd:4f:88:99:1d:a2:f6:eb:46:b9:b3:ce:82:30:7e:ec:e5:79:
38:7e:5e:84:aa:62:a8:b9:db:a3:95:ad:e7:f4:31:82:1a:cd:
80:29:e0:fa:60:7f:e6:00:82:48:f7:5c:3e:9c:f7:1d:68:8c:
ff:7a:3c:da:87:9e:e0:6e:5a:72:db:70:5a:35:eb:9c:cb:c1:
28:a9:e2:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb0UakjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
MzA5MDgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRlNmJmOTUyZjgz
MWM3YTQzMjdmZGZjN2RjZDhjNzA3ZDZhNjU1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAOpCn5YUjY2Zsq/expwJiiqRTmfvIOgxUcBEWesRqKU301
JWj+x/91hIoeJ1ekpgQNeKFPoZsCVM9gsLqF/yjyo+EeNoPPKrOSMhWwUajEQqzT
4vXjpd+feLt9I27d1xBb2Khx6RkAX0V5GrnnOJmXtqmDq4aPpJRmqzO64pr9j9z+
8PGkLN/n/b5YtASaXTd+hD3V5wBB2Hd7q/5A2g8FWpjJXibBtZpKdjq655G8qQxW
vQCWztSQO79VG5VSy23iMzHXPSPFSXQTvLg8Rro3xydyM2gxtIIQMN1IQnhLfh8F
FW0SrhKgo2OIK04ffk0XPQqUvsNVKCw8sbTF+AMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQk5r+VL4McekMn/fx9zYxwfWplVzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0pPYV9sUy1ESEhwREpfMzhmYzJNY0gxcVpWYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA+Q6ukDJ0dqw1M9lhp97ZkSdAF7exi3EWywt5/
kQBzGZRDnSvlNIRn83QVyqXHQ210cmVb8U0F5uOJMsDEy0rmKcGNUWVvD4PfbZlG
dy9OUwu9uFRDfNRZVSh+ZXy9eK3XyokQXE1vWGd+IR4xzw41Fq6MufPuonCY+614
e4tupTQvF5A2sPxd4MdJjq9iJ6r9eykhdpEe0INbOQfq/Jdz6WzSm7RAu8Wu+oxy
e7PD3gJTfxz9T4iZHaL260a5s86CMH7s5Xk4fl6EqmKoudujla3n9DGCGs2AKeD6
YH/mAIJI91w+nPcdaIz/ejzah57gblpy23BaNeucy8EoqeLx
-----END CERTIFICATE-----
Generated at Fri May 2 18:35:57 2025 by rpki-client