Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JwN5Msb-iwQy5hXazvZvvukK_k4.roa
File: JwN5Msb-iwQy5hXazvZvvukK_k4.roa (raw, json)
Hash identifier: pLZFkpGP6PQwuRPkXkKdegGr8cN2KM8Jm541AZi2B+Y=
Subject key identifier: 27:03:79:32:C6:FE:8B:04:32:E6:15:DA:CE:F6:6F:BE:E9:0A:FE:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E362B52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JwN5Msb-iwQy5hXazvZvvukK_k4.roa
Signing time: Sun 19 Jun 2022 21:09:44 +0000
ROA not before: Sun 19 Jun 2022 21:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385914706 (0x8e362b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 21:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27037932c6fe8b0432e615dacef66fbee90afe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:9f:90:b3:bc:89:9d:43:4d:e8:41:1f:e2:
00:c9:37:af:b2:e3:90:d3:ab:fa:a2:9e:6a:09:01:
86:ff:ae:73:51:8c:9c:64:1b:c6:09:8f:d8:6b:99:
fb:54:cf:8d:73:cf:ee:7c:e2:62:48:fd:ac:2b:ff:
47:83:b3:01:1b:24:06:c5:60:ae:9c:77:12:f8:d0:
4a:21:71:e3:e6:34:47:3f:39:b0:1c:00:c4:2f:9f:
a3:0f:75:fb:f4:18:bc:cc:a0:cb:ac:52:10:d6:00:
f5:e4:c6:ff:43:ad:23:e4:27:8d:57:ed:40:f7:25:
c7:dc:2f:1e:39:ec:a0:3e:21:37:e9:00:1a:6c:61:
71:8c:5c:3d:0a:a9:68:ff:2c:d5:5b:84:a9:09:6c:
9d:9f:e0:36:a4:df:05:f3:e0:a3:12:27:15:9a:f3:
9a:ff:1c:5e:26:d5:d8:26:0d:ae:5d:97:82:e7:0a:
be:7d:be:c4:38:6e:c8:a3:65:a7:d6:d8:74:56:4f:
fd:1c:db:a3:a8:22:62:5a:e2:bd:a7:04:3f:84:66:
89:76:a9:a3:79:d1:5c:7a:8e:33:e9:0a:c4:ab:5a:
0b:b9:30:db:9d:65:02:5b:b6:c7:34:02:30:1a:4d:
a5:95:3a:b0:56:ad:ca:8c:6a:2c:29:a8:08:58:a4:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:79:32:C6:FE:8B:04:32:E6:15:DA:CE:F6:6F:BE:E9:0A:FE:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JwN5Msb-iwQy5hXazvZvvukK_k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:0c:21:9b:4d:83:10:4d:e5:f0:73:34:79:30:9b:fb:3e:aa:
cb:19:6f:cf:63:db:d3:e3:c8:83:dd:68:7d:d7:f9:e5:9d:2f:
88:59:59:b3:83:3e:68:ba:bd:79:d5:1b:31:62:af:6e:83:be:
98:20:99:a5:86:65:32:71:ad:bf:fb:27:3d:df:a7:a2:1a:9b:
dc:ec:36:1f:64:cc:f3:85:00:06:65:9b:85:f5:e9:44:d0:8d:
75:43:0a:0b:ea:af:8a:88:f0:ca:fd:d6:82:ba:2a:74:c6:74:
07:8f:88:77:47:91:b7:19:cf:79:89:38:b7:26:a0:30:18:5b:
fa:a8:05:0c:36:46:b8:07:d7:af:cb:b4:20:61:13:5b:6e:44:
8f:38:10:c5:0b:80:b0:2c:89:2a:07:bf:f6:ae:6a:f2:94:6b:
6e:a6:bd:45:aa:3e:24:91:d2:59:ee:cc:53:db:d1:a2:0b:26:
34:ef:7c:80:97:a3:26:49:54:55:f8:02:ae:15:06:7b:ae:46:
d6:dd:05:92:e9:96:33:3e:be:cf:1f:76:c8:be:43:fd:69:c3:
a2:a4:13:9c:ea:bc:72:d3:33:a2:5b:a9:ab:91:1d:d5:06:42:
0d:c3:f4:c0:29:3c:17:94:c3:7e:72:c0:7b:69:f5:5c:79:d0:
b8:ea:4b:69
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI42K1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTkyMTA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI3MDM3OTMyYzZm
ZThiMDQzMmU2MTVkYWNlZjY2ZmJlZTkwYWZlNGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0GZ+Qs7yJnUNN6EEf4gDJN6+y45DTq/qinmoJAYb/rnNR
jJxkG8YJj9hrmftUz41zz+584mJI/awr/0eDswEbJAbFYK6cdxL40EohcePmNEc/
ObAcAMQvn6MPdfv0GLzMoMusUhDWAPXkxv9DrSPkJ41X7UD3JcfcLx457KA+ITfp
ABpsYXGMXD0KqWj/LNVbhKkJbJ2f4Dak3wXz4KMSJxWa85r/HF4m1dgmDa5dl4Ln
Cr59vsQ4bsijZafW2HRWT/0c26OoImJa4r2nBD+EZol2qaN50Vx6jjPpCsSrWgu5
MNudZQJbtsc0AjAaTaWVOrBWrcqMaiwpqAhYpGFtAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUJwN5Msb+iwQy5hXazvZvvukK/k4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9Kd041TXNiLWl3UXk1aFhhenZadnZ1a0tfazQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAHAwhm02DEE3l8HM0eTCb+z6qyxlvz2Pb0+PI
g91ofdf55Z0viFlZs4M+aLq9edUbMWKvboO+mCCZpYZlMnGtv/snPd+nohqb3Ow2
H2TM84UABmWbhfXpRNCNdUMKC+qviojwyv3WgroqdMZ0B4+Id0eRtxnPeYk4tyag
MBhb+qgFDDZGuAfXr8u0IGETW25EjzgQxQuAsCyJKge/9q5q8pRrbqa9Rao+JJHS
We7MU9vRogsmNO98gJejJklUVfgCrhUGe65G1t0FkumWMz6+zx92yL5D/WnDoqQT
nOq8ctMzolupq5Ed1QZCDcP0wCk8F5TDfnLAe2n1XHnQuOpLaQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:39 2025 by rpki-client