Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTiNZLTGPua2BzIiWaOr0rl-kZE.roa
File: JTiNZLTGPua2BzIiWaOr0rl-kZE.roa (raw, json)
Hash identifier: IAv+SUQKXSGrlziXNNZTxDTJIkg/g0LNbvMaAKzh6/E=
Subject key identifier: 25:38:8D:64:B4:C6:3E:E6:B6:07:32:22:59:A3:AB:D2:B9:7E:91:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842C0625369AA70740DD582763D8AD30E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTiNZLTGPua2BzIiWaOr0rl-kZE.roa
Signing time: Mon 31 Oct 2022 03:11:51 +0000
ROA not before: Mon 31 Oct 2022 03:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:06:25:36:9a:a7:07:40:dd:58:27:63:d8:ad:30:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 03:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25388d64b4c63ee6b607322259a3abd2b97e9191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:42:33:6c:8a:68:19:67:9b:0d:68:56:b0:
86:44:60:5c:a1:86:40:53:b8:70:32:fd:e6:cf:6c:
5d:5b:d2:b1:34:46:36:09:13:0f:10:d7:56:65:e8:
73:ba:cf:ab:ef:df:c3:54:93:c4:47:57:c7:74:6d:
fd:2e:cf:2b:dd:b2:d4:bb:9e:3d:53:34:38:8b:68:
bf:87:88:13:86:bd:40:f1:df:d0:b9:a4:3c:8e:1e:
09:37:7b:de:30:5f:c1:f2:99:05:0b:6a:56:9a:81:
4a:3a:55:46:c0:03:75:f4:be:fc:7e:b0:d5:07:c4:
46:ce:07:c4:74:85:f0:e7:ca:72:4c:9e:15:a6:65:
1b:56:4c:91:77:83:73:99:e6:83:69:cd:b9:b3:e7:
d8:bb:f3:80:73:09:05:fe:19:a9:a6:1f:2b:61:67:
8b:fc:d2:4c:2a:33:bd:3b:36:ce:f6:4b:13:5d:03:
87:05:6a:36:4e:d5:ef:06:df:14:78:9c:6f:db:87:
e7:a2:78:6b:16:f5:89:b9:95:20:f4:1d:30:f1:4a:
32:23:aa:6f:34:0b:0c:1b:1d:32:e6:1d:5e:ec:4c:
e0:3f:87:58:e4:9c:bf:de:d5:c3:11:d0:c5:aa:e8:
f1:c5:3b:a5:ec:ea:50:e0:14:f1:18:94:e8:92:60:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:8D:64:B4:C6:3E:E6:B6:07:32:22:59:A3:AB:D2:B9:7E:91:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JTiNZLTGPua2BzIiWaOr0rl-kZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:10:6d:e2:f4:d0:68:16:77:ab:62:b5:65:cf:71:62:c5:5c:
b3:d7:f5:6c:ea:ab:ae:0d:d2:4b:83:7b:67:1a:85:d7:a7:73:
6e:57:8b:fd:6f:d0:4a:ba:15:f8:db:45:67:29:61:46:91:52:
05:76:8c:8b:9c:99:df:29:23:20:c3:18:bc:f4:a4:2a:bc:8e:
0b:7b:69:9e:74:bf:af:ce:32:b1:46:dd:03:40:4a:4a:5c:a0:
b3:4f:1b:b4:e8:12:46:ad:34:1f:b5:a2:81:0d:85:dd:91:c4:
86:a5:88:d0:fa:09:35:15:b6:8f:cb:7a:bf:49:26:a5:d6:df:
84:af:07:21:bd:4a:22:73:bc:07:01:7d:12:ed:0c:dc:ae:17:
a0:e1:38:b6:7c:a7:e1:45:f9:78:83:e2:45:1a:3e:f8:b0:e3:
7f:db:12:21:d8:5b:a4:cf:b0:42:0e:d7:51:8c:2e:7d:34:f1:
2e:17:67:5d:6a:fd:f1:3f:f6:c3:60:80:ad:74:e2:77:df:b8:
e1:3f:1c:54:c9:97:1e:50:a5:9c:df:c2:2f:ea:1d:13:25:17:
fa:34:67:e0:f4:f0:66:df:b3:a4:f9:cd:65:fe:8f:88:63:d9:
9f:11:60:98:1a:ad:4f:26:fc:13:62:d2:58:ca:25:36:78:8d:
84:9a:39:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQsBiU2mqcHQN1YJ2PYrTDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMxMDMxMTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTM4OGQ2NGI0YzYzZWU2YjYwNzMyMjI1OWEzYWJkMmI5N2U5MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJlCM2yKaBlnmw1oVrCGRGBcoYZA
U7hwMv3mz2xdW9KxNEY2CRMPENdWZehzus+r79/DVJPER1fHdG39Ls8r3bLUu549
UzQ4i2i/h4gThr1A8d/QuaQ8jh4JN3veMF/B8pkFC2pWmoFKOlVGwAN19L78frDV
B8RGzgfEdIXw58pyTJ4VpmUbVkyRd4NzmeaDac25s+fYu/OAcwkF/hmpph8rYWeL
/NJMKjO9OzbO9ksTXQOHBWo2TtXvBt8UeJxv24fnonhrFvWJuZUg9B0w8UoyI6pv
NAsMGx0y5h1e7EzgP4dY5Jy/3tXDEdDFqujxxTul7OpQ4BTxGJTokmCNCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCU4jWS0xj7mtgcyIlmjq9K5fpGRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSlRpTlpMVEdQdWEyQnpJaVdhT3Iwcmwta1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG0QbeL00GgWd6titWXP
cWLFXLPX9Wzqq64N0kuDe2cahdenc25Xi/1v0Eq6FfjbRWcpYUaRUgV2jIucmd8p
IyDDGLz0pCq8jgt7aZ50v6/OMrFG3QNASkpcoLNPG7ToEkatNB+1ooENhd2RxIal
iND6CTUVto/Ler9JJqXW34SvByG9SiJzvAcBfRLtDNyuF6DhOLZ8p+FF+XiD4kUa
Pviw43/bEiHYW6TPsEIO11GMLn008S4XZ11q/fE/9sNggK104nffuOE/HFTJlx5Q
pZzfwi/qHRMlF/o0Z+D08Gbfs6T5zWX+j4hj2Z8RYJgarU8m/BNi0ljKJTZ4jYSa
OXc=
-----END CERTIFICATE-----
Generated at Thu May 1 16:05:16 2025 by rpki-client