Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jy7OZhWjuG8NeLJbONfA98fw4uM.roa
File: Jy7OZhWjuG8NeLJbONfA98fw4uM.roa (raw, json)
Hash identifier: +irVuE1gKsNJPnHbt/ndMXNKL+exBhJyi8xqP5d/9lY=
Subject key identifier: 27:2E:CE:66:15:A3:B8:6F:0D:78:B2:5B:38:D7:C0:F7:C7:F0:E2:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018322235515D690A432EC1D1A8DC7741BAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jy7OZhWjuG8NeLJbONfA98fw4uM.roa
Signing time: Fri 09 Sep 2022 12:04:44 +0000
ROA not before: Fri 09 Sep 2022 12:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:2222:e372/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:23:55:15:d6:90:a4:32:ec:1d:1a:8d:c7:74:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 12:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272ece6615a3b86f0d78b25b38d7c0f7c7f0e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:13:07:82:72:e1:e9:cb:ad:00:fb:87:2e:
43:62:13:71:72:15:37:aa:88:5d:32:37:3d:77:2f:
fd:cf:e0:9a:10:59:fd:39:37:dd:7b:08:bf:65:c7:
ff:d0:f4:17:88:4f:4e:23:9b:0b:f9:d0:ff:b1:ea:
7f:47:3d:af:ff:a7:a0:dd:e4:81:eb:a6:71:e2:45:
00:5d:33:20:a8:66:b9:be:75:e8:3b:71:a1:f4:61:
11:d3:b6:3b:ba:35:d7:e0:98:11:ac:1b:dd:10:98:
85:f7:d1:f3:4e:64:99:b4:52:7d:13:c1:cf:70:c7:
a0:0f:e4:79:7d:ff:5a:d8:2b:ca:77:e9:68:af:86:
51:a0:71:07:28:d8:cc:30:d4:62:70:de:88:54:ff:
3a:68:0a:0c:75:62:97:a9:b4:fd:9b:96:6c:0d:cd:
0f:aa:7e:61:9d:81:12:f3:a6:96:28:2c:98:68:65:
05:3d:fa:cf:5a:35:a0:46:66:f9:15:34:b0:ca:a9:
cf:b1:d9:3c:db:2e:93:c4:14:03:d0:54:67:83:53:
6c:7e:b3:94:a9:57:c3:6c:7e:d0:90:dd:23:1b:d6:
a1:cc:1b:27:59:9d:63:11:4d:49:37:ff:1f:69:51:
84:76:96:f8:e2:b0:fb:73:62:25:3b:68:da:a8:db:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:CE:66:15:A3:B8:6F:0D:78:B2:5B:38:D7:C0:F7:C7:F0:E2:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jy7OZhWjuG8NeLJbONfA98fw4uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ac:03:59:38:3c:c7:0d:dd:4b:91:5f:8f:11:a6:bd:90:6f:
91:3f:c8:5f:e3:6e:73:13:27:4d:65:75:46:be:61:d4:4f:e1:
ab:25:f3:05:32:b1:02:52:9e:30:ff:3c:ae:8e:ec:56:8b:7e:
3e:40:2f:b3:ec:63:15:51:ff:14:c3:a7:e3:eb:85:37:6a:da:
ba:bf:62:5f:0b:6c:60:bf:bd:c3:66:49:d3:13:ca:42:bb:84:
ab:af:5f:68:a5:d8:2d:00:2d:9d:32:fd:ed:31:98:10:7f:ff:
80:60:38:4c:b7:da:67:a3:02:fe:f0:c7:90:3f:57:bc:13:a5:
82:d5:6c:cd:63:34:3d:b1:2d:ba:17:ff:99:68:9b:25:bd:45:
f1:83:46:66:71:32:62:86:ea:1f:fe:b6:20:3b:f0:28:70:53:
d8:23:29:57:3b:77:3a:d3:c9:94:9f:48:7c:2c:72:3c:f1:14:
28:1f:23:01:27:f2:9c:a2:57:e4:1f:7e:79:ef:de:d2:60:55:
f9:44:20:7d:fb:f4:8c:91:ad:2c:fb:2f:d2:99:67:47:30:b5:
cb:6c:b6:ae:ea:6b:05:5c:33:82:f4:c3:a8:b7:bd:42:e6:39:
00:10:c7:02:5f:1d:47:86:13:6d:a9:86:bc:02:5f:aa:41:4a:
9c:f6:98:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMiI1UV1pCkMuwdGo3HdBuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA5MTIwNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzJlY2U2NjE1YTNiODZmMGQ3OGIyNWIzOGQ3YzBmN2M3ZjBlMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/8TB4Jy4enLrQD7hy5DYhNxchU3
qohdMjc9dy/9z+CaEFn9OTfdewi/Zcf/0PQXiE9OI5sL+dD/sep/Rz2v/6eg3eSB
66Zx4kUAXTMgqGa5vnXoO3Gh9GER07Y7ujXX4JgRrBvdEJiF99HzTmSZtFJ9E8HP
cMegD+R5ff9a2CvKd+lor4ZRoHEHKNjMMNRicN6IVP86aAoMdWKXqbT9m5ZsDc0P
qn5hnYES86aWKCyYaGUFPfrPWjWgRmb5FTSwyqnPsdk82y6TxBQD0FRng1NsfrOU
qVfDbH7QkN0jG9ahzBsnWZ1jEU1JN/8faVGEdpb44rD7c2IlO2jaqNu+XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCcuzmYVo7hvDXiyWzjXwPfH8OLjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSnk3T1poV2p1RzhOZUxKYk9OZkE5OGZ3NHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFusA1k4PMcN3UuRX48R
pr2Qb5E/yF/jbnMTJ01ldUa+YdRP4asl8wUysQJSnjD/PK6O7FaLfj5AL7PsYxVR
/xTDp+PrhTdq2rq/Yl8LbGC/vcNmSdMTykK7hKuvX2il2C0ALZ0y/e0xmBB//4Bg
OEy32mejAv7wx5A/V7wTpYLVbM1jND2xLboX/5lomyW9RfGDRmZxMmKG6h/+tiA7
8ChwU9gjKVc7dzrTyZSfSHwscjzxFCgfIwEn8pyiV+Qffnnv3tJgVflEIH379IyR
rSz7L9KZZ0cwtctstq7qawVcM4L0w6i3vULmOQAQxwJfHUeGE22phrwCX6pBSpz2
mNU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:40 2025 by rpki-client