Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXpgabUisgP4NEoDDvS7dyxNwx8.roa
File: JXpgabUisgP4NEoDDvS7dyxNwx8.roa (raw, json)
Hash identifier: Zmfr/gs7qs9tDanbz8QBZE4y1u9TJ4ksvg4AeUf1Xc4=
Subject key identifier: 25:7A:60:69:B5:22:B2:03:F8:34:4A:03:0E:F4:BB:77:2C:4D:C3:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CFFE2D4DD203B94C238FF1DD9A0FC373
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXpgabUisgP4NEoDDvS7dyxNwx8.roa
Signing time: Wed 24 Aug 2022 13:15:17 +0000
ROA not before: Wed 24 Aug 2022 13:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:fe:2d:4d:d2:03:b9:4c:23:8f:f1:dd:9a:0f:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 13:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257a6069b522b203f8344a030ef4bb772c4dc31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:21:f0:40:53:40:41:c0:13:ed:96:32:d8:
2c:0b:ce:d0:ed:70:da:ee:db:22:13:85:07:84:57:
d3:bc:c6:fb:22:1e:4b:36:11:84:6f:b3:48:60:30:
3f:1a:f9:2f:c5:c4:b5:2d:09:9b:da:ce:e3:63:42:
01:01:78:7e:56:8b:55:5e:7b:f6:7c:14:b4:2d:f6:
d8:56:3c:fd:d3:87:f9:46:d4:6c:9c:b3:7c:0f:2b:
04:18:55:27:b5:ee:79:9a:65:7a:72:fe:da:20:e1:
bb:9b:6f:c7:e2:ec:f4:c6:a1:8c:7f:6e:00:3c:f7:
0b:ad:f4:57:b2:eb:ea:ef:8c:f3:e4:00:d5:94:6e:
b5:16:61:fb:a1:f3:62:54:2f:b1:bc:25:dc:97:98:
b8:3b:7b:3e:aa:62:60:f3:ff:2c:78:30:94:ca:c1:
11:1d:bb:cc:c4:75:80:96:58:9f:12:64:c7:83:79:
e7:cd:c0:1b:d6:3e:ce:9e:24:a0:f5:5a:df:0c:8a:
4a:53:a8:87:38:8f:18:db:da:d0:c8:48:9b:d4:2e:
16:8a:b1:70:64:9d:c7:77:09:28:1c:b3:91:c5:bd:
a1:5e:4c:ec:bc:65:9f:cc:c6:b3:c5:3d:72:4b:41:
e2:b1:1e:2f:a4:10:1d:6a:d4:45:6e:1e:76:e4:86:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:60:69:B5:22:B2:03:F8:34:4A:03:0E:F4:BB:77:2C:4D:C3:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JXpgabUisgP4NEoDDvS7dyxNwx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:a0:75:a8:8e:21:41:ff:0d:f7:b8:a8:41:97:90:b5:1e:99:
9c:24:01:f9:6c:cb:b1:c5:25:81:cd:fc:21:c1:5e:2d:a4:f7:
65:11:0c:39:47:3b:5d:46:92:79:8a:b7:71:9d:aa:3d:4c:87:
bb:bc:e0:76:43:3d:be:a1:c8:76:c9:51:15:01:b6:3f:80:fc:
2d:2c:f7:a3:ef:3c:77:2f:10:03:7e:56:89:b0:4f:04:62:d0:
08:42:af:88:e6:a3:70:3f:9a:2e:36:a2:ee:5f:2a:08:f6:11:
9b:80:27:71:d8:83:8e:18:7c:ac:58:b9:bb:9a:59:34:a3:da:
fc:db:d5:bd:13:9d:3d:ae:e5:c9:ea:0b:b0:a5:b2:30:4d:19:
3e:a5:1e:de:9a:02:e2:f6:1e:98:1e:ef:51:f7:5c:2c:db:85:
e0:bf:3c:5b:f6:18:16:46:77:a8:fd:68:33:16:af:33:fa:43:
a3:7b:13:70:5b:80:99:9f:a8:95:33:a4:7f:87:22:3e:20:93:
a1:08:11:1e:d9:f4:3e:91:97:79:e2:f0:b2:bd:fc:45:41:be:
ee:06:4a:53:c7:a6:26:14:75:5d:b2:11:25:ef:e1:63:2d:55:
10:ff:9b:5c:ea:ea:e6:8c:36:ba:57:90:f1:70:32:2f:bb:56:
6d:d8:1b:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLP/i1N0gO5TCOP8d2aD8NzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODI0MTMxNTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTdhNjA2OWI1MjJiMjAzZjgzNDRhMDMwZWY0YmI3NzJjNGRjMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMh8EBTQEHAE+2WMtgsC87Q7XDa
7tsiE4UHhFfTvMb7Ih5LNhGEb7NIYDA/GvkvxcS1LQmb2s7jY0IBAXh+VotVXnv2
fBS0LfbYVjz904f5RtRsnLN8DysEGFUnte55mmV6cv7aIOG7m2/H4uz0xqGMf24A
PPcLrfRXsuvq74zz5ADVlG61FmH7ofNiVC+xvCXcl5i4O3s+qmJg8/8seDCUysER
HbvMxHWAllifEmTHg3nnzcAb1j7OniSg9VrfDIpKU6iHOI8Y29rQyEib1C4WirFw
ZJ3HdwkoHLORxb2hXkzsvGWfzMazxT1yS0HisR4vpBAdatRFbh525IZRhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCV6YGm1IrID+DRKAw70u3csTcMfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSlhwZ2FiVWlzZ1A0TkVvRER2UzdkeXhOd3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJagdaiOIUH/Dfe4qEGX
kLUemZwkAflsy7HFJYHN/CHBXi2k92URDDlHO11GknmKt3Gdqj1Mh7u84HZDPb6h
yHbJURUBtj+A/C0s96PvPHcvEAN+VomwTwRi0AhCr4jmo3A/mi42ou5fKgj2EZuA
J3HYg44YfKxYubuaWTSj2vzb1b0TnT2u5cnqC7ClsjBNGT6lHt6aAuL2Hpge71H3
XCzbheC/PFv2GBZGd6j9aDMWrzP6Q6N7E3BbgJmfqJUzpH+HIj4gk6EIER7Z9D6R
l3ni8LK9/EVBvu4GSlPHpiYUdV2yESXv4WMtVRD/m1zq6uaMNrpXkPFwMi+7Vm3Y
G9Q=
-----END CERTIFICATE-----
Generated at Fri May 2 10:13:42 2025 by rpki-client