Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j8cZUAtOdBA4MXfAqUKEn_3jdJw.roa
File: j8cZUAtOdBA4MXfAqUKEn_3jdJw.roa (raw, json)
Hash identifier: SMY3OGfP8LRELwj2fPrfP+wXY61+5k6CyKFrBTEp624=
Subject key identifier: 8F:C7:19:50:0B:4E:74:10:38:31:77:C0:A9:42:84:9F:FD:E3:74:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183617C4775EA1555D3802E8E5715FC2771
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j8cZUAtOdBA4MXfAqUKEn_3jdJw.roa
Signing time: Wed 21 Sep 2022 19:17:58 +0000
ROA not before: Wed 21 Sep 2022 19:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:61:7c:47:75:ea:15:55:d3:80:2e:8e:57:15:fc:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 19:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fc719500b4e7410383177c0a942849ffde3749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:61:ec:24:90:36:8c:af:34:e4:bd:34:d3:
3f:0e:40:af:6d:39:25:13:b8:56:bd:2e:d7:42:e2:
32:bf:a4:d7:39:3a:b4:e0:cb:c4:e4:45:04:e4:9d:
47:2b:3d:0d:33:bf:4d:6f:eb:80:df:b5:a7:e0:bd:
bd:ea:ec:2a:01:7a:34:f5:f1:a1:e3:79:73:9a:ae:
cf:1a:d9:f3:4b:c7:22:9b:8f:80:44:f4:09:a0:f5:
79:09:08:12:6c:11:6a:24:44:04:2e:97:03:7c:cd:
1c:f4:12:ff:02:29:af:64:79:8b:9d:29:fa:19:26:
42:89:03:75:9d:6c:6c:0d:11:b7:ec:87:71:56:98:
62:65:ab:a6:38:83:21:02:6c:83:fb:81:ab:0e:b4:
d4:b1:12:1f:98:99:bf:15:c3:5f:af:b4:0c:86:15:
60:7e:70:be:77:0d:48:a4:cc:9f:a5:3e:48:be:40:
e4:fe:24:65:6c:bb:a1:99:f4:a0:48:8d:d1:bb:9f:
0e:fa:70:bf:83:f0:d4:6a:34:0b:e4:cd:ad:a5:7d:
77:fb:59:07:de:a7:83:cc:e1:ef:5d:57:e6:34:d3:
00:50:01:71:ec:a7:48:23:59:dc:b2:5c:14:df:de:
ec:91:6e:01:80:72:ef:87:79:ec:b5:e9:1c:e5:93:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:19:50:0B:4E:74:10:38:31:77:C0:A9:42:84:9F:FD:E3:74:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j8cZUAtOdBA4MXfAqUKEn_3jdJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:56:0c:8a:c2:f8:b6:66:f1:5e:79:22:12:ba:7b:2c:28:18:
ed:ec:21:2a:55:e7:ed:2b:a3:c5:34:29:46:52:bb:b2:8a:b2:
f3:08:7e:ac:7a:ae:3a:60:e1:f8:d0:a3:d6:4c:63:6b:cd:c5:
3c:0d:54:dd:6f:40:49:97:c4:e9:b5:42:46:15:3e:21:b3:81:
5a:88:75:10:7a:53:cd:98:08:17:b2:a6:2e:69:3d:6c:b2:44:
16:6f:9e:f6:02:8e:3b:f9:7d:0e:e7:9a:1e:f1:ee:76:03:73:
68:ad:23:9b:0b:6c:42:e0:6e:66:18:17:d4:42:47:05:4c:91:
4a:a6:39:ce:19:03:0c:2d:a5:7c:0a:78:d5:dc:9d:84:71:3c:
b5:10:d2:fb:17:96:e1:e3:ef:23:3b:6c:62:8c:91:5b:80:e5:
17:90:b4:02:ed:94:0e:31:18:05:5d:c5:68:38:69:89:99:97:
1f:95:9c:0b:d7:74:44:ad:ad:6a:22:cc:3a:c3:16:bc:52:4d:
17:e8:f5:5a:76:1d:cc:66:da:31:2d:b6:76:f4:bd:9d:fe:1d:
1c:60:48:c9:c2:ec:1b:f5:18:45:96:27:be:05:64:53:17:9c:
b4:d3:67:15:27:04:c4:34:40:06:cf:c5:dd:2c:bd:51:b5:f0:
56:71:5a:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNhfEd16hVV04AujlcV/CdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTIxMTkxNzU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM3MTk1MDBiNGU3NDEwMzgzMTc3YzBhOTQyODQ5ZmZkZTM3NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vBh7CSQNoyvNOS9NNM/DkCvbTkl
E7hWvS7XQuIyv6TXOTq04MvE5EUE5J1HKz0NM79Nb+uA37Wn4L296uwqAXo09fGh
43lzmq7PGtnzS8cim4+ARPQJoPV5CQgSbBFqJEQELpcDfM0c9BL/AimvZHmLnSn6
GSZCiQN1nWxsDRG37IdxVphiZaumOIMhAmyD+4GrDrTUsRIfmJm/FcNfr7QMhhVg
fnC+dw1IpMyfpT5IvkDk/iRlbLuhmfSgSI3Ru58O+nC/g/DUajQL5M2tpX13+1kH
3qeDzOHvXVfmNNMAUAFx7KdII1ncslwU397skW4BgHLvh3nstekc5ZMvzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI/HGVALTnQQODF3wKlChJ/943ScMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvajhjWlVBdE9kQkE0TVhmQXFVS0VuXzNqZEp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB1WDIrC+LZm8V55IhK6
eywoGO3sISpV5+0ro8U0KUZSu7KKsvMIfqx6rjpg4fjQo9ZMY2vNxTwNVN1vQEmX
xOm1QkYVPiGzgVqIdRB6U82YCBeypi5pPWyyRBZvnvYCjjv5fQ7nmh7x7nYDc2it
I5sLbELgbmYYF9RCRwVMkUqmOc4ZAwwtpXwKeNXcnYRxPLUQ0vsXluHj7yM7bGKM
kVuA5ReQtALtlA4xGAVdxWg4aYmZlx+VnAvXdEStrWoizDrDFrxSTRfo9Vp2Hcxm
2jEttnb0vZ3+HRxgSMnC7Bv1GEWWJ74FZFMXnLTTZxUnBMQ0QAbPxd0svVG18FZx
WnE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:59:15 2025 by rpki-client