
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jNa6ntV7B1mZhT_tz5TVg4T6O2k.roa
File: jNa6ntV7B1mZhT_tz5TVg4T6O2k.roa (raw, json)
Hash identifier: humalwj1gZ1V+GEdF1Y/Yf/RQJqGiwjNHEpV3C6SUaw=
Subject key identifier: 8C:D6:BA:9E:D5:7B:07:59:99:85:3F:ED:CF:94:D5:83:84:FA:3B:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8717738E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jNa6ntV7B1mZhT_tz5TVg4T6O2k.roa
Signing time: Wed 25 May 2022 13:09:13 +0000
ROA not before: Wed 25 May 2022 13:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:fa72:463c/128 maxlen: 128
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:f73d:bab5/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266461070 (0x8717738e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 13:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cd6ba9ed57b075999853fedcf94d58384fa3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:54:f4:53:c4:1c:9f:a9:da:ae:8d:61:92:
c7:4b:e2:ce:db:5e:47:06:8f:66:35:69:14:fe:55:
8c:a3:d5:55:cb:cb:0e:e0:21:14:07:8c:66:16:29:
0e:98:19:39:cf:3b:85:8d:51:0a:fb:d8:ea:b4:82:
db:0e:c5:18:0f:01:54:52:ca:75:3e:c1:04:aa:a5:
d8:d1:5d:8f:bf:e0:8c:da:c1:30:26:e9:0d:65:84:
62:46:24:36:17:4f:dd:65:c0:c3:b8:09:b0:91:f2:
c9:3c:16:55:e5:81:63:e5:87:f3:df:81:cc:fd:fe:
0f:fd:09:88:98:ad:ab:29:4e:e9:5b:18:79:cd:55:
4b:2b:36:5d:b9:17:41:7c:80:1d:f6:02:39:2a:3c:
4f:93:d9:ae:af:e8:2e:c0:dc:ab:8f:bc:dc:7e:61:
71:a0:7a:d3:10:ab:91:95:b6:e7:93:b4:c8:95:c6:
85:eb:87:29:b5:81:f7:52:f7:35:31:d1:b5:1e:8b:
3e:d7:83:0a:2e:dd:0e:c0:9d:f1:5f:c2:a0:7d:0f:
87:1a:71:27:bf:21:be:9a:4d:a9:b7:0f:c7:f3:d0:
1c:5b:ca:6a:bf:ae:af:53:10:f0:59:3b:dd:97:ec:
97:7d:59:3c:c9:95:5e:b4:69:a5:53:b8:7c:f4:7f:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:BA:9E:D5:7B:07:59:99:85:3F:ED:CF:94:D5:83:84:FA:3B:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jNa6ntV7B1mZhT_tz5TVg4T6O2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:16:56:52:49:26:2c:de:a5:e4:80:07:ee:30:7b:27:3b:0c:
ba:dd:f6:f2:c8:9e:07:95:78:05:a1:b3:ae:da:c8:7e:a8:ae:
fc:43:a4:04:7d:a5:6a:df:c5:c8:63:7d:1b:0b:75:68:6e:73:
a3:7e:5d:0d:0e:dd:20:a1:e2:bb:7e:d9:a5:ce:cb:5c:86:7b:
57:a3:e8:a7:23:cc:5c:96:c1:0c:16:d9:da:0f:90:b3:82:bd:
38:78:3d:98:5b:e6:d8:1b:b5:fe:e6:62:ef:9e:df:2b:18:41:
3b:d5:c9:76:60:56:22:b2:ff:77:ee:cd:55:a5:f2:33:f6:a2:
23:5e:69:5f:64:7b:e6:bd:e6:a2:f0:1b:08:93:a7:c4:21:39:
0d:44:c1:1c:1c:60:b4:57:53:48:c1:91:e6:1f:05:f8:60:46:
02:93:2a:07:ee:ec:c2:b8:63:94:c0:7c:42:ed:7e:bf:6c:2c:
e8:ff:51:57:b5:9e:bf:41:d1:d6:07:a2:0a:80:70:48:fc:52:
f1:8c:58:b6:c0:4c:6d:12:ff:f1:bc:76:cf:53:5a:45:46:89:
b3:a7:38:20:d8:e6:08:4b:61:ce:ea:a3:05:77:c0:89:70:a8:
d7:5d:d0:73:4b:4a:da:51:5d:89:1d:5f:1f:ee:fc:f3:0d:46:
a9:a9:c2:47
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIcXc44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjUxMzA5MTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDhjZDZiYTllZDU3
YjA3NTk5OTg1M2ZlZGNmOTRkNTgzODRmYTNiNjkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyKlT0U8Qcn6naro1hksdL4s7bXkcGj2Y1aRT+VYyj1VXL
yw7gIRQHjGYWKQ6YGTnPO4WNUQr72Oq0gtsOxRgPAVRSynU+wQSqpdjRXY+/4Iza
wTAm6Q1lhGJGJDYXT91lwMO4CbCR8sk8FlXlgWPlh/Pfgcz9/g/9CYiYraspTulb
GHnNVUsrNl25F0F8gB32AjkqPE+T2a6v6C7A3KuPvNx+YXGgetMQq5GVtueTtMiV
xoXrhym1gfdS9zUx0bUeiz7Xgwou3Q7AnfFfwqB9D4cacSe/Ib6aTam3D8fz0Bxb
ymq/rq9TEPBZO92X7Jd9WTzJlV60aaVTuHz0f6MxAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUjNa6ntV7B1mZhT/tz5TVg4T6O2kwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9qTmE2bnRWN0IxbVpoVF90ejVUVmc0VDZPMmsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAXhZWUkkmLN6l5IAH7jB7JzsMut328sieB5V4
BaGzrtrIfqiu/EOkBH2lat/FyGN9Gwt1aG5zo35dDQ7dIKHiu37Zpc7LXIZ7V6Po
pyPMXJbBDBbZ2g+Qs4K9OHg9mFvm2Bu1/uZi757fKxhBO9XJdmBWIrL/d+7NVaXy
M/aiI15pX2R75r3movAbCJOnxCE5DUTBHBxgtFdTSMGR5h8F+GBGApMqB+7swrhj
lMB8Qu1+v2ws6P9RV7Wev0HR1geiCoBwSPxS8YxYtsBMbRL/8bx2z1NaRUaJs6c4
INjmCEthzuqjBXfAiXCo113Qc0tK2lFdiR1fH+788w1GqanCRw==
-----END CERTIFICATE-----
Generated at Thu May 1 00:57:43 2025 by rpki-client