Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSH2DoNA-5gDEFXOVTi4hhVn00w.roa
File: jSH2DoNA-5gDEFXOVTi4hhVn00w.roa (raw, json)
Hash identifier: ERgcF5/1aeRnOJzmYkWEIvAO8VfnpDurkSM+/gewf5c=
Subject key identifier: 8D:21:F6:0E:83:40:FB:98:03:10:55:CE:55:38:B8:86:15:67:D3:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A42D36AD9766C50FBED04396C678BA42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSH2DoNA-5gDEFXOVTi4hhVn00w.roa
Signing time: Thu 12 Jan 2023 04:11:44 +0000
ROA not before: Thu 12 Jan 2023 04:11:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:2d:36:ad:97:66:c5:0f:be:d0:43:96:c6:78:ba:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 04:11:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d21f60e8340fb98031055ce5538b8861567d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:81:60:8d:7c:75:e3:dc:11:57:02:31:49:
d5:26:7b:47:08:a9:40:25:51:b3:49:1e:7f:a6:2d:
cf:ef:29:5b:1b:ec:df:ca:87:89:55:6b:65:ea:63:
8a:eb:6a:af:9e:c8:a9:7e:f0:08:c3:c8:cd:8e:b1:
b0:a2:1c:61:46:ae:2a:ae:c0:5f:75:76:94:cc:cb:
50:12:8d:ab:9c:30:1d:5c:9e:e7:13:d9:87:d2:b7:
5d:7e:ea:05:09:d3:1e:50:58:00:19:7a:43:cb:d7:
47:88:56:87:53:eb:ef:69:01:c8:f6:35:9d:d1:b2:
e2:0d:01:98:f0:7f:67:a0:e2:3f:bd:37:67:94:fe:
94:98:2f:bb:dd:04:e9:70:8c:86:e2:be:38:7f:f2:
9b:e8:c6:24:75:9c:70:a2:98:09:ca:a4:7d:ec:a2:
7f:2d:7b:9c:11:75:02:06:43:a6:c2:a5:77:c3:34:
84:7f:2c:e7:41:b0:48:fa:7c:25:03:f7:32:04:45:
1d:a5:f0:1e:d3:93:62:38:ec:1f:1d:df:a8:f9:4a:
4f:18:76:a5:7d:ce:68:09:a1:40:28:1b:21:31:20:
01:39:88:e7:c0:36:83:a8:42:fe:33:e7:93:ea:d0:
31:1f:c9:60:2a:06:29:1a:2d:d7:39:77:85:5b:fe:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:F6:0E:83:40:FB:98:03:10:55:CE:55:38:B8:86:15:67:D3:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jSH2DoNA-5gDEFXOVTi4hhVn00w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:a6:67:8d:93:e9:46:35:78:f3:65:d0:08:ae:99:29:1f:7f:
77:62:c1:f2:18:dd:8b:2c:bc:c2:98:59:9f:e6:c9:c7:02:b3:
ab:cd:dc:25:d7:c9:d2:a9:75:51:6a:34:c6:1e:d2:e1:55:c0:
d6:1b:00:ad:db:73:df:8e:d2:90:b8:a6:ac:e0:59:db:9d:76:
6d:97:44:b1:ac:d7:ca:c0:98:bf:7e:c4:3f:eb:65:26:c1:0a:
d9:88:84:30:2d:53:21:be:47:a7:43:16:5a:1d:c1:c5:17:16:
5d:f4:b6:49:21:cb:5f:4f:93:81:18:8a:44:40:1f:29:77:bd:
4b:8b:80:41:74:e7:66:d0:f0:8b:3d:44:df:76:e6:cb:ec:94:
39:59:a9:c5:7b:67:f8:76:85:1e:c4:5a:e7:91:7e:5c:3c:af:
8b:6d:18:06:e6:be:c8:68:3a:ac:d5:2f:02:0f:42:8e:ca:2e:
79:4c:41:e7:c3:a2:0d:5f:2c:59:ad:89:e7:71:8a:e0:1f:ab:
5d:e5:69:63:2d:f8:07:43:e9:0b:7a:c6:60:4a:ce:bd:ba:9d:
7d:92:6f:7f:db:fa:56:89:a6:88:01:b3:09:82:29:25:36:d0:
7d:88:33:6d:c2:26:52:e2:e1:9b:f9:a5:49:b8:e4:ed:14:34:
1d:31:57:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWkLTatl2bFD77QQ5bGeLpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMDQxMTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDIxZjYwZTgzNDBmYjk4MDMxMDU1Y2U1NTM4Yjg4NjE1NjdkMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoKBYI18dePcEVcCMUnVJntHCKlA
JVGzSR5/pi3P7ylbG+zfyoeJVWtl6mOK62qvnsipfvAIw8jNjrGwohxhRq4qrsBf
dXaUzMtQEo2rnDAdXJ7nE9mH0rddfuoFCdMeUFgAGXpDy9dHiFaHU+vvaQHI9jWd
0bLiDQGY8H9noOI/vTdnlP6UmC+73QTpcIyG4r44f/Kb6MYkdZxwopgJyqR97KJ/
LXucEXUCBkOmwqV3wzSEfyznQbBI+nwlA/cyBEUdpfAe05NiOOwfHd+o+UpPGHal
fc5oCaFAKBshMSABOYjnwDaDqEL+M+eT6tAxH8lgKgYpGi3XOXeFW/6gkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI0h9g6DQPuYAxBVzlU4uIYVZ9NMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvalNIMkRvTkEtNWdERUZYT1ZUaTRoaFZuMDB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADWmZ42T6UY1ePNl0Aiu
mSkff3diwfIY3YssvMKYWZ/myccCs6vN3CXXydKpdVFqNMYe0uFVwNYbAK3bc9+O
0pC4pqzgWduddm2XRLGs18rAmL9+xD/rZSbBCtmIhDAtUyG+R6dDFlodwcUXFl30
tkkhy19Pk4EYikRAHyl3vUuLgEF052bQ8Is9RN925svslDlZqcV7Z/h2hR7EWueR
flw8r4ttGAbmvshoOqzVLwIPQo7KLnlMQefDog1fLFmtiedxiuAfq13laWMt+AdD
6Qt6xmBKzr26nX2Sb3/b+laJpogBswmCKSU20H2IM23CJlLi4Zv5pUm45O0UNB0x
V7U=
-----END CERTIFICATE-----
Generated at Thu May 1 18:44:48 2025 by rpki-client