Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jObAb_I1FdQqKEplJuLLDQoao_4.roa
File: jObAb_I1FdQqKEplJuLLDQoao_4.roa (raw, json)
Hash identifier: GL6oa4X5+Mx4ub7YqchncUe0SFFbQiF1kZ/5DBaOadU=
Subject key identifier: 8C:E6:C0:6F:F2:35:15:D4:2A:28:4A:65:26:E2:CB:0D:0A:1A:A3:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884EBD8AC88FE85AE1A0B4BEE45A5578EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jObAb_I1FdQqKEplJuLLDQoao_4.roa
Signing time: Wed 24 May 2023 17:10:24 +0000
ROA not before: Wed 24 May 2023 17:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:bd:8a:c8:8f:e8:5a:e1:a0:b4:be:e4:5a:55:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 17:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ce6c06ff23515d42a284a6526e2cb0d0a1aa3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0c:a9:ef:38:09:5a:6e:67:64:6a:3a:14:c7:
65:d9:c0:16:18:07:36:0b:62:4a:54:57:63:65:48:
8b:dd:39:39:ae:95:65:3f:57:54:0f:68:90:60:30:
9a:25:8e:e8:c0:46:60:18:8c:e4:d8:46:64:0c:dd:
3b:74:a3:03:87:66:92:35:9e:52:a0:49:13:6c:f6:
ed:d8:a1:ea:9b:06:c5:bc:6d:93:bd:33:98:68:ab:
78:d1:fc:04:80:38:47:5e:11:a5:a2:58:69:00:19:
97:31:f7:27:b8:16:38:28:d3:7c:48:eb:94:4e:3b:
c6:84:fc:29:6d:11:e1:bf:2b:2f:31:72:d4:cf:0a:
f1:8b:72:ba:4f:88:68:82:4a:ff:90:b1:26:8c:e6:
9e:0c:88:c9:09:ba:06:66:2d:fd:51:dd:7b:8b:b5:
15:d8:68:9a:86:50:c6:50:27:c5:70:a7:d9:b0:11:
e2:c8:a3:c6:c2:6f:2a:05:d3:a3:7c:e0:06:72:06:
e7:36:e3:d6:6e:f2:00:d8:1f:a8:9b:be:99:db:2a:
d8:31:3d:04:d1:20:53:c7:f2:22:ac:f1:44:12:2e:
e9:e7:53:d3:ff:10:ed:48:1e:6c:b2:c5:11:c9:d5:
32:c3:b5:a4:59:c5:7f:08:9a:79:29:8c:cb:0a:05:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:C0:6F:F2:35:15:D4:2A:28:4A:65:26:E2:CB:0D:0A:1A:A3:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jObAb_I1FdQqKEplJuLLDQoao_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d8:8b:62:4c:8f:88:20:2d:6a:5b:21:82:7d:46:86:1e:92:
ce:9d:9e:19:e8:9e:8d:06:0b:c0:34:f5:f8:2f:53:80:bf:73:
0c:e0:5c:59:e7:da:4f:ce:c3:d8:3d:de:dc:71:1f:bf:95:d4:
63:e3:8b:09:43:08:b8:21:84:d6:70:32:dd:66:42:ee:47:7a:
a0:25:85:aa:3d:6a:8a:12:49:c3:81:cc:1f:37:87:4f:18:1b:
57:20:24:10:73:d6:3e:eb:4f:88:68:f2:f2:3d:6e:84:0c:fb:
53:4c:ca:35:b4:12:73:4e:1b:ea:8f:86:81:ac:43:19:51:fb:
84:96:00:07:22:a8:96:d0:f1:b2:7f:b9:da:40:8c:a9:29:45:
0b:36:85:98:2a:20:f7:06:78:10:22:89:63:1a:f5:05:02:dd:
50:9e:3c:8d:f7:1b:14:9e:0c:1f:c9:42:6b:8b:51:0c:70:f5:
89:bd:19:97:0b:84:8c:01:5e:71:ed:43:f4:83:69:5d:48:ab:
5a:7a:85:cd:40:67:f3:bc:5e:8c:fc:20:eb:11:08:e5:db:b8:
20:f7:f7:39:12:67:8f:cd:f7:62:59:64:03:33:1b:5a:0b:17:
b1:47:67:6c:2d:68:0d:f7:d3:2d:bb:f7:32:47:4e:a6:9d:7a:
a2:49:e9:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhOvYrIj+ha4aC0vuRaVXjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MTcxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2U2YzA2ZmYyMzUxNWQ0MmEyODRhNjUyNmUyY2IwZDBhMWFhM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gyp7zgJWm5nZGo6FMdl2cAWGAc2
C2JKVFdjZUiL3Tk5rpVlP1dUD2iQYDCaJY7owEZgGIzk2EZkDN07dKMDh2aSNZ5S
oEkTbPbt2KHqmwbFvG2TvTOYaKt40fwEgDhHXhGlolhpABmXMfcnuBY4KNN8SOuU
TjvGhPwpbRHhvysvMXLUzwrxi3K6T4hogkr/kLEmjOaeDIjJCboGZi39Ud17i7UV
2GiahlDGUCfFcKfZsBHiyKPGwm8qBdOjfOAGcgbnNuPWbvIA2B+om76Z2yrYMT0E
0SBTx/IirPFEEi7p51PT/xDtSB5sssURydUyw7WkWcV/CJp5KYzLCgWcywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIzmwG/yNRXUKihKZSbiyw0KGqP+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvak9iQWJfSTFGZFFxS0VwbEp1TExEUW9hb180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHrYi2JMj4ggLWpbIYJ9
RoYeks6dnhnono0GC8A09fgvU4C/cwzgXFnn2k/Ow9g93txxH7+V1GPjiwlDCLgh
hNZwMt1mQu5HeqAlhao9aooSScOBzB83h08YG1cgJBBz1j7rT4ho8vI9boQM+1NM
yjW0EnNOG+qPhoGsQxlR+4SWAAciqJbQ8bJ/udpAjKkpRQs2hZgqIPcGeBAiiWMa
9QUC3VCePI33GxSeDB/JQmuLUQxw9Ym9GZcLhIwBXnHtQ/SDaV1Iq1p6hc1AZ/O8
Xoz8IOsRCOXbuCD39zkSZ4/N92JZZAMzG1oLF7FHZ2wtaA330y279zJHTqadeqJJ
6c4=
-----END CERTIFICATE-----
Generated at Thu May 1 03:17:32 2025 by rpki-client