Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm0SKqxIK2Cl2wiE_rJk6J7hI4o.roa
File: Jm0SKqxIK2Cl2wiE_rJk6J7hI4o.roa (raw, json)
Hash identifier: KOS94AXZ0ajCajMkSXJrtD9ghd6b3PMIicT6Xt32PN4=
Subject key identifier: 26:6D:12:2A:AC:48:2B:60:A5:DB:08:84:FE:B2:64:E8:9E:E1:23:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C30D7E7F249AE3537B53247D29C0648E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm0SKqxIK2Cl2wiE_rJk6J7hI4o.roa
Signing time: Wed 18 Jan 2023 04:05:19 +0000
ROA not before: Wed 18 Jan 2023 04:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:c30d:3b2/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:0d:7e:7f:24:9a:e3:53:7b:53:24:7d:29:c0:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 04:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=266d122aac482b60a5db0884feb264e89ee1238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:c5:f2:30:a5:32:d6:e8:a5:4f:b1:8b:73:
8a:6e:9c:9e:aa:28:87:46:62:09:da:3d:bb:93:2a:
74:ce:2d:93:b5:88:c0:5d:be:e8:65:1f:23:8c:f0:
d7:c1:77:76:44:8b:44:14:80:44:60:18:fd:80:c5:
df:27:41:0d:d9:77:40:d3:d3:ca:53:60:8a:90:16:
d1:ed:2c:1c:43:39:45:58:78:ea:70:35:f5:da:8f:
11:af:ff:6b:1c:79:a1:a4:c7:d9:d4:45:9a:ad:c8:
41:30:d0:b5:c7:a6:32:53:c0:9e:19:45:42:2e:b2:
a6:86:d5:60:d4:13:73:35:ba:f3:5e:27:51:d2:55:
14:62:ac:cb:df:2a:68:5d:3d:5f:28:82:39:69:23:
ee:13:6f:81:c6:79:9a:1a:99:cf:40:3e:52:36:0b:
45:d3:d5:3f:c6:6d:14:60:82:63:2b:c5:21:49:8e:
8a:fb:35:c1:b3:dd:87:c0:d4:b1:a3:d7:c1:4e:9a:
77:37:c2:53:5e:4d:77:25:ed:13:bd:e7:64:1c:7d:
05:5e:44:2c:08:e6:e9:28:3c:fe:7e:b9:17:bf:78:
16:3a:7a:be:8a:24:b7:e7:ba:d7:ca:e7:30:4e:23:
46:cf:a9:52:41:6e:e2:34:e6:cf:30:e7:20:23:f1:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:12:2A:AC:48:2B:60:A5:DB:08:84:FE:B2:64:E8:9E:E1:23:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jm0SKqxIK2Cl2wiE_rJk6J7hI4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4c:ec:75:42:d2:f7:29:e6:d1:ff:40:ff:dd:29:ea:8c:e9:
0b:a5:9b:1c:5e:fe:c9:9f:d9:88:d9:16:57:ca:e1:ca:f7:ec:
43:c5:64:fd:98:47:f2:8d:4a:cb:d6:f6:15:49:86:62:19:21:
0d:31:b6:ed:bd:03:6a:c1:12:fb:1d:a7:1c:17:48:97:4a:1a:
33:cb:ca:7e:25:fb:98:98:40:4f:5a:40:e5:41:41:06:8a:03:
24:40:70:56:04:15:0a:a2:a3:2e:80:41:91:28:3c:2f:3f:12:
98:05:3f:06:08:6e:bb:76:9c:b7:20:dd:7d:39:36:ef:b6:96:
94:93:74:f8:64:0f:82:56:f3:0b:cf:97:10:7a:85:c3:06:8d:
fb:df:75:a4:df:3e:93:0d:54:82:6e:1d:9c:dc:fb:0d:3b:6e:
60:e1:6e:7e:ed:19:7e:fd:f6:af:e0:12:61:1e:39:57:7b:c0:
80:f8:c5:dd:0a:85:44:c1:61:bb:1d:b1:a6:95:db:e5:df:fe:
7a:f3:ac:ee:df:f8:b0:2d:41:e2:fe:ca:f7:ab:a2:2d:cc:48:
25:de:d9:dc:e8:65:31:97:7f:b7:f7:77:2c:d3:0f:60:42:82:
1f:65:e5:77:7d:59:35:4c:cc:54:49:b5:89:6e:c0:98:61:2a:
58:3f:3a:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXDDX5/JJrjU3tTJH0pwGSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE4MDQwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjZkMTIyYWFjNDgyYjYwYTVkYjA4ODRmZWIyNjRlODllZTEyMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojHF8jClMtbopU+xi3OKbpyeqiiH
RmIJ2j27kyp0zi2TtYjAXb7oZR8jjPDXwXd2RItEFIBEYBj9gMXfJ0EN2XdA09PK
U2CKkBbR7SwcQzlFWHjqcDX12o8Rr/9rHHmhpMfZ1EWarchBMNC1x6YyU8CeGUVC
LrKmhtVg1BNzNbrzXidR0lUUYqzL3ypoXT1fKII5aSPuE2+BxnmaGpnPQD5SNgtF
09U/xm0UYIJjK8UhSY6K+zXBs92HwNSxo9fBTpp3N8JTXk13Je0TvedkHH0FXkQs
CObpKDz+frkXv3gWOnq+iiS357rXyucwTiNGz6lSQW7iNObPMOcgI/GrMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCZtEiqsSCtgpdsIhP6yZOie4SOKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSm0wU0txeElLMkNsMndpRV9ySms2SjdoSTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKJM7HVC0vcp5tH/QP/d
KeqM6Qulmxxe/smf2YjZFlfK4cr37EPFZP2YR/KNSsvW9hVJhmIZIQ0xtu29A2rB
EvsdpxwXSJdKGjPLyn4l+5iYQE9aQOVBQQaKAyRAcFYEFQqioy6AQZEoPC8/EpgF
PwYIbrt2nLcg3X05Nu+2lpSTdPhkD4JW8wvPlxB6hcMGjfvfdaTfPpMNVIJuHZzc
+w07bmDhbn7tGX799q/gEmEeOVd7wID4xd0KhUTBYbsdsaaV2+Xf/nrzrO7f+LAt
QeL+yveroi3MSCXe2dzoZTGXf7f3dyzTD2BCgh9l5Xd9WTVMzFRJtYluwJhhKlg/
Op4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:19 2025 by rpki-client