Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsSNw1XWGqA-xKQhMKe51ty4EQQ.roa
File: JsSNw1XWGqA-xKQhMKe51ty4EQQ.roa (raw, json)
Hash identifier: KICp/1KWtr/4sTRW7HUS/wdtqkmE6K713zr0X9sfJ7o=
Subject key identifier: 26:C4:8D:C3:55:D6:1A:A0:3E:C4:A4:21:30:A7:B9:D6:DC:B8:11:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182229C95A3D37E38FE71C8CC917FEACEDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsSNw1XWGqA-xKQhMKe51ty4EQQ.roa
Signing time: Thu 21 Jul 2022 21:14:23 +0000
ROA not before: Thu 21 Jul 2022 21:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:22:9c:95:a3:d3:7e:38:fe:71:c8:cc:91:7f:ea:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 21:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c48dc355d61aa03ec4a42130a7b9d6dcb81104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:e8:5b:4e:85:64:94:0b:ed:5d:50:cd:5e:
68:09:4e:b6:1a:f1:bc:fb:90:d0:f0:d6:43:54:53:
fc:8e:fd:81:84:40:da:7c:2b:cc:ef:ed:8d:49:aa:
b5:a0:37:59:ae:f1:de:ad:45:8c:5d:7e:33:a1:ee:
6f:fe:1e:8a:9b:4e:f2:31:cb:16:ce:5f:19:45:9d:
3e:78:e7:0a:a5:f9:2e:a7:5d:ec:f6:1e:8e:22:02:
34:65:f8:6a:b0:62:6c:a9:f8:dd:b0:36:a6:ea:a0:
b6:d3:42:c1:4f:46:ed:6e:52:a4:02:b9:fd:5e:4d:
26:23:0a:63:ec:4b:f9:1e:e2:7c:3d:f6:b6:4e:71:
4f:54:b1:87:f6:18:6d:d6:1d:62:c4:6d:9e:69:51:
e0:16:01:59:10:17:68:75:f3:16:90:15:f6:c0:61:
86:be:b4:59:0e:3d:a9:de:64:60:ca:96:95:06:34:
79:ec:86:56:98:92:91:6c:79:5e:a4:48:15:21:d4:
98:5d:21:34:d2:33:1f:75:1c:c7:ac:9b:b7:33:2d:
35:63:b4:63:f0:ee:0e:d2:72:c8:6e:54:95:f0:55:
7e:67:2d:3a:ec:59:fd:51:ee:c5:9e:cb:96:a0:a1:
25:e1:60:9c:af:27:f5:44:88:2d:67:f6:53:d4:9a:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:8D:C3:55:D6:1A:A0:3E:C4:A4:21:30:A7:B9:D6:DC:B8:11:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JsSNw1XWGqA-xKQhMKe51ty4EQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:76:af:05:91:92:0f:8f:66:90:26:9a:02:2b:f5:a9:61:76:
13:06:21:2d:34:db:80:1a:15:d3:bc:80:66:73:ee:46:1a:42:
f7:9d:32:21:1a:89:64:1b:54:d3:76:c3:02:f9:30:12:7e:59:
48:5d:b5:f9:71:7d:f7:8d:b4:d8:bd:ce:c9:c0:6f:d5:7c:31:
43:12:ba:bb:ec:49:01:c5:ea:ca:26:7e:d0:5c:22:19:84:3a:
46:5b:d3:96:45:5c:74:11:a4:c7:4f:a6:cb:3a:37:25:e1:d1:
ac:81:84:16:6f:e8:a3:24:ad:bc:a2:5b:45:45:05:a5:ad:f3:
cc:11:07:d6:a8:6d:bb:91:f4:d1:4b:a3:d2:67:25:da:f0:00:
49:b4:3f:43:d0:d5:55:87:f8:c8:7e:e5:e0:51:9b:d9:0b:6f:
24:9d:29:de:57:43:aa:ae:10:13:5d:81:8b:ab:a5:e4:74:a0:
1e:bb:82:cb:f5:47:48:ae:fc:62:3b:1e:ee:83:59:b2:a4:e7:
e3:90:ca:1c:37:27:e5:6e:27:e9:7a:5b:18:89:3e:c5:75:42:
8c:5f:c2:b1:68:c6:d2:c1:61:be:e2:cb:0f:02:00:85:c6:34:
68:24:22:89:a1:66:04:eb:43:11:22:b3:96:3e:ec:cc:4b:11:
20:89:78:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIinJWj0344/nHIzJF/6s7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIxMjExNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmM0OGRjMzU1ZDYxYWEwM2VjNGE0MjEzMGE3YjlkNmRjYjgxMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1PoW06FZJQL7V1QzV5oCU62GvG8
+5DQ8NZDVFP8jv2BhEDafCvM7+2NSaq1oDdZrvHerUWMXX4zoe5v/h6Km07yMcsW
zl8ZRZ0+eOcKpfkup13s9h6OIgI0ZfhqsGJsqfjdsDam6qC200LBT0btblKkArn9
Xk0mIwpj7Ev5HuJ8Pfa2TnFPVLGH9hht1h1ixG2eaVHgFgFZEBdodfMWkBX2wGGG
vrRZDj2p3mRgypaVBjR57IZWmJKRbHlepEgVIdSYXSE00jMfdRzHrJu3My01Y7Rj
8O4O0nLIblSV8FV+Zy067Fn9Ue7FnsuWoKEl4WCcryf1RIgtZ/ZT1JoC0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCbEjcNV1hqgPsSkITCnudbcuBEEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSnNTTncxWFdHcUEteEtRaE1LZTUxdHk0RVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHt2rwWRkg+PZpAmmgIr
9alhdhMGIS0024AaFdO8gGZz7kYaQvedMiEaiWQbVNN2wwL5MBJ+WUhdtflxffeN
tNi9zsnAb9V8MUMSurvsSQHF6somftBcIhmEOkZb05ZFXHQRpMdPpss6NyXh0ayB
hBZv6KMkrbyiW0VFBaWt88wRB9aobbuR9NFLo9JnJdrwAEm0P0PQ1VWH+Mh+5eBR
m9kLbySdKd5XQ6quEBNdgYurpeR0oB67gsv1R0iu/GI7Hu6DWbKk5+OQyhw3J+Vu
J+l6WxiJPsV1QoxfwrFoxtLBYb7iyw8CAIXGNGgkIomhZgTrQxEis5Y+7MxLESCJ
eK0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:56 2025 by rpki-client