Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JrZb6BMDZjWykapyr71GfsNEtX0.roa
File: JrZb6BMDZjWykapyr71GfsNEtX0.roa (raw, json)
Hash identifier: noRaTgVYc8ISf660pP+BrJNbBwFjISmUDgcqRroQlH8=
Subject key identifier: 26:B6:5B:E8:13:03:66:35:B2:91:AA:72:AF:BD:46:7E:C3:44:B5:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183CE481F58D23432FCEC7AD75D7A6C495B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JrZb6BMDZjWykapyr71GfsNEtX0.roa
Signing time: Wed 12 Oct 2022 22:19:36 +0000
ROA not before: Wed 12 Oct 2022 22:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ce:48:1f:58:d2:34:32:fc:ec:7a:d7:5d:7a:6c:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 12 22:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b65be813036635b291aa72afbd467ec344b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:95:d6:69:c7:f2:54:b1:64:c4:2b:99:49:
46:9d:3e:0a:c1:34:35:2a:22:89:e8:6d:b3:ad:fc:
fb:b8:ec:9a:87:b6:2c:f2:d6:97:22:a8:e8:09:2a:
76:62:3a:95:1e:29:7e:76:35:f5:b6:23:c0:c5:0e:
7b:98:2d:0c:89:b3:cb:93:4f:a2:31:15:3f:79:f4:
10:1c:8e:d8:98:be:d3:12:27:45:26:ff:5b:fa:42:
8f:ee:92:fb:11:1d:2c:28:9f:b8:7e:22:9d:1e:d0:
37:0f:3e:98:6a:37:ae:62:1a:d2:b2:f2:18:d5:98:
bc:fe:dc:99:2b:da:c1:c8:7b:56:05:eb:2b:50:dc:
33:fc:96:7c:3e:2a:9d:95:f0:29:3b:ca:8f:85:d0:
53:cc:98:bf:2e:7d:b8:84:8f:0e:14:6d:d7:57:c6:
a4:9e:f2:e9:1a:f8:1b:d5:ee:65:65:7a:7a:78:b6:
54:51:2e:b1:9e:e2:19:c5:ac:32:2c:f7:ee:b4:4f:
6a:d9:97:f1:0c:3e:65:4e:16:4d:2a:4e:37:f9:72:
15:71:d9:5f:5c:0f:90:b3:06:26:87:97:d9:ba:ad:
3f:ec:a4:2a:e4:47:c1:b4:52:e6:6d:e2:de:7e:80:
56:d5:01:9f:d4:dd:8b:9a:95:b2:14:45:18:df:8f:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:5B:E8:13:03:66:35:B2:91:AA:72:AF:BD:46:7E:C3:44:B5:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JrZb6BMDZjWykapyr71GfsNEtX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d1:e9:3b:06:ea:76:b9:68:21:95:e4:50:8e:1f:c6:0e:56:
5f:3e:f7:c8:f7:57:11:e8:2d:57:5d:dc:39:00:9d:d7:69:8e:
ca:eb:8c:fe:04:b7:5f:f8:ce:d3:2c:04:77:8e:17:44:5b:f0:
59:2d:fb:cf:02:b1:60:7e:82:c9:9b:0a:e7:b7:90:c3:f3:b5:
82:67:a9:76:99:3a:0d:ba:6f:68:cd:eb:0e:6a:93:4b:8f:0c:
e5:e3:bd:19:16:d7:4a:a1:07:c5:c5:4b:d9:63:69:a5:48:f4:
c3:be:69:d8:ce:a3:d2:3e:bc:f5:27:3b:60:bc:b3:a3:16:22:
1b:3e:a6:02:05:9b:2b:27:ae:5e:4f:e8:b9:22:33:32:62:6c:
5c:bc:58:07:cc:5c:43:ea:b0:56:63:23:1e:9b:de:9d:4d:77:
4d:29:32:f9:03:20:65:e2:3c:5d:a6:20:85:fb:d1:78:be:6d:
43:8e:3e:7e:04:9e:d9:c7:19:05:d0:66:d1:e5:31:67:55:5a:
b6:0a:74:be:db:fe:57:aa:63:b8:4d:a6:db:3c:76:ef:36:2a:
40:41:3d:65:ae:61:af:56:c2:34:c6:6b:53:d3:33:cd:b3:29:
8f:13:a8:a5:f8:12:96:63:f5:0b:2d:44:f1:29:b0:f5:c5:fd:
05:5c:d1:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPOSB9Y0jQy/Ox61116bElbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEyMjIxOTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI2NWJlODEzMDM2NjM1YjI5MWFhNzJhZmJkNDY3ZWMzNDRiNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2V1mnH8lSxZMQrmUlGnT4KwTQ1
KiKJ6G2zrfz7uOyah7Ys8taXIqjoCSp2YjqVHil+djX1tiPAxQ57mC0MibPLk0+i
MRU/efQQHI7YmL7TEidFJv9b+kKP7pL7ER0sKJ+4fiKdHtA3Dz6YajeuYhrSsvIY
1Zi8/tyZK9rByHtWBesrUNwz/JZ8PiqdlfApO8qPhdBTzJi/Ln24hI8OFG3XV8ak
nvLpGvgb1e5lZXp6eLZUUS6xnuIZxawyLPfutE9q2ZfxDD5lThZNKk43+XIVcdlf
XA+QswYmh5fZuq0/7KQq5EfBtFLmbeLefoBW1QGf1N2LmpWyFEUY348xxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCa2W+gTA2Y1spGqcq+9Rn7DRLV9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSnJaYjZCTURaald5a2FweXI3MUdmc05FdFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF/R6TsG6na5aCGV5FCO
H8YOVl8+98j3VxHoLVdd3DkAnddpjsrrjP4Et1/4ztMsBHeOF0Rb8Fkt+88CsWB+
gsmbCue3kMPztYJnqXaZOg26b2jN6w5qk0uPDOXjvRkW10qhB8XFS9ljaaVI9MO+
adjOo9I+vPUnO2C8s6MWIhs+pgIFmysnrl5P6LkiMzJibFy8WAfMXEPqsFZjIx6b
3p1Nd00pMvkDIGXiPF2mIIX70Xi+bUOOPn4EntnHGQXQZtHlMWdVWrYKdL7b/leq
Y7hNpts8du82KkBBPWWuYa9WwjTGa1PTM82zKY8TqKX4EpZj9QstRPEpsPXF/QVc
0R4=
-----END CERTIFICATE-----
Generated at Thu May 1 05:02:11 2025 by rpki-client