Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JlTEdV9r4ej580mKXwVn1XBAzwo.roa
File: JlTEdV9r4ej580mKXwVn1XBAzwo.roa (raw, json)
Hash identifier: xEE2FP+nZfv9RG9vP5rZDbe2+QZF6OzKVQffo4Mj6r0=
Subject key identifier: 26:54:C4:75:5F:6B:E1:E8:F9:F3:49:8A:5F:05:67:D5:70:40:CF:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 925DD20D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JlTEdV9r4ej580mKXwVn1XBAzwo.roa
Signing time: Mon 04 Jul 2022 18:10:25 +0000
ROA not before: Mon 04 Jul 2022 18:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455622157 (0x925dd20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 18:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2654c4755f6be1e8f9f3498a5f0567d57040cf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:4e:2d:06:bc:9b:be:fb:9d:42:27:b3:81:
a3:91:39:33:a1:42:76:13:b6:d8:ae:7a:1b:2f:dd:
0a:dc:1e:16:a5:3e:cc:f5:79:b2:a2:52:30:60:82:
3f:0e:97:1d:f6:35:dd:56:2e:b6:d2:dd:66:6b:77:
24:e6:dd:13:a7:3d:07:61:d8:5b:90:ab:d5:85:80:
ab:04:56:f4:71:9b:2f:a9:4b:77:36:21:b9:ec:65:
86:b6:1e:9c:91:fd:c0:93:a6:a7:72:9f:44:3d:fa:
cf:2d:93:ab:49:ed:9b:31:ac:5b:8c:1c:70:a7:df:
de:f5:a8:41:b5:f7:fa:b2:ea:69:a5:83:7e:5a:c5:
42:42:ad:3e:ea:ee:00:46:31:69:69:f0:5c:f9:2e:
ad:46:63:6f:b5:1a:2f:77:d0:7b:6b:57:8e:fe:47:
c2:ad:d4:78:c8:8b:60:79:8f:e1:c5:07:db:c4:6f:
7f:13:d2:bb:b9:85:64:ca:60:22:9e:13:34:1e:9a:
b8:0d:9d:72:c1:38:0e:c1:16:2c:02:0a:7c:bf:32:
85:38:0a:2f:bd:60:75:0c:a5:84:59:a7:83:72:77:
c6:a9:e9:e7:44:24:21:49:cd:fc:a4:f1:8e:46:8f:
1f:ea:30:1d:a4:b2:e8:db:07:d2:42:eb:61:c4:69:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:C4:75:5F:6B:E1:E8:F9:F3:49:8A:5F:05:67:D5:70:40:CF:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JlTEdV9r4ej580mKXwVn1XBAzwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:4c:7d:be:74:22:b9:ed:7d:6d:df:fe:6a:9f:cb:83:d7:8e:
04:11:03:5b:a4:1d:f3:64:ad:ae:56:1c:a7:89:a6:16:08:9f:
d1:e8:b7:bc:51:b8:21:f1:61:a0:cc:50:a8:26:64:6c:ae:aa:
93:6e:23:83:f1:ff:86:fc:8a:0d:93:94:e4:38:3d:11:5b:64:
c0:2d:11:70:f0:ee:6a:64:da:a3:49:99:af:ee:af:91:9e:b6:
eb:2d:e4:76:45:fc:cf:11:5b:6c:1b:ec:38:ed:09:39:ad:86:
18:c7:7b:0d:ce:4c:02:8e:d8:5f:56:af:98:ba:37:ac:16:fe:
33:c1:63:81:68:94:b6:1a:e8:ff:1b:76:43:07:2f:a9:db:0b:
bb:00:fc:c7:9b:e8:68:a5:a1:c4:2c:e6:6a:ce:68:32:b6:5a:
ec:84:9e:1e:f4:6e:70:c2:70:b1:b4:7d:8f:6b:28:a9:de:3a:
32:b5:87:1c:cc:f3:9f:58:b6:04:74:52:4d:c2:18:a1:90:59:
b3:43:b9:bd:db:20:7b:48:42:31:91:79:3a:a3:81:d7:22:fc:
c1:1a:8e:47:57:f3:0e:45:83:96:2c:3a:76:01:10:f3:62:49:
45:68:8a:71:eb:a3:1a:a1:37:20:b0:23:d1:e7:55:a7:16:c2:
2c:a4:4a:66
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJJd0g0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDQxODEwMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI2NTRjNDc1NWY2
YmUxZThmOWYzNDk4YTVmMDU2N2Q1NzA0MGNmMGEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFOU4tBrybvvudQiezgaOROTOhQnYTttiuehsv3QrcHhal
Psz1ebKiUjBggj8Olx32Nd1WLrbS3WZrdyTm3ROnPQdh2FuQq9WFgKsEVvRxmy+p
S3c2IbnsZYa2HpyR/cCTpqdyn0Q9+s8tk6tJ7ZsxrFuMHHCn3971qEG19/qy6mml
g35axUJCrT7q7gBGMWlp8Fz5Lq1GY2+1Gi930HtrV47+R8Kt1HjIi2B5j+HFB9vE
b38T0ru5hWTKYCKeEzQemrgNnXLBOA7BFiwCCny/MoU4Ci+9YHUMpYRZp4Nyd8ap
6edEJCFJzfyk8Y5Gjx/qMB2ksujbB9JC62HEaauLAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUJlTEdV9r4ej580mKXwVn1XBAzwowHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9KbFRFZFY5cjRlajU4MG1LWHdWbjFYQkF6d28ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEACUx9vnQiue19bd/+ap/Lg9eOBBEDW6Qd82St
rlYcp4mmFgif0ei3vFG4IfFhoMxQqCZkbK6qk24jg/H/hvyKDZOU5Dg9EVtkwC0R
cPDuamTao0mZr+6vkZ626y3kdkX8zxFbbBvsOO0JOa2GGMd7Dc5MAo7YX1avmLo3
rBb+M8FjgWiUthro/xt2QwcvqdsLuwD8x5voaKWhxCzmas5oMrZa7ISeHvRucMJw
sbR9j2soqd46MrWHHMzzn1i2BHRSTcIYoZBZs0O5vdsge0hCMZF5OqOB1yL8wRqO
R1fzDkWDliw6dgEQ82JJRWiKceujGqE3ILAj0edVpxbCLKRKZg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:52 2025 by rpki-client