Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfSywD_EPeEgWoXpE91T2cwNjT8.roa
File: jfSywD_EPeEgWoXpE91T2cwNjT8.roa (raw, json)
Hash identifier: vW7GBX9QPj77LxJBeOtfmBnMy5yxtC4NY5QU/3zcR3A=
Subject key identifier: 8D:F4:B2:C0:3F:C4:3D:E1:20:5A:85:E9:13:DD:53:D9:CC:0D:8D:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B8CE29219C80634710A6225145BE23CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfSywD_EPeEgWoXpE91T2cwNjT8.roa
Signing time: Sat 08 Oct 2022 18:14:22 +0000
ROA not before: Sat 08 Oct 2022 18:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:ce:29:21:9c:80:63:47:10:a6:22:51:45:be:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 18:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8df4b2c03fc43de1205a85e913dd53d9cc0d8d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:99:4a:07:7c:74:03:0f:cb:66:65:93:33:
42:24:5e:74:a0:b5:24:ef:bf:26:fc:ab:3d:de:97:
98:c6:80:06:09:7e:05:32:23:c3:62:e4:d4:0e:06:
e7:d9:fc:09:73:2c:0b:ce:1b:b3:49:cf:ec:a9:43:
33:d4:70:8f:b9:a5:5a:8a:71:54:e1:60:82:c7:2c:
fd:01:7d:95:35:82:cc:e1:82:f5:b5:b3:62:a1:e9:
97:a8:e1:4f:27:44:ec:42:cc:65:8f:52:55:69:3c:
29:07:7e:1d:c1:c2:14:5a:ce:2a:fa:36:e4:6e:9c:
f7:39:2b:83:26:6d:63:c2:6e:67:80:73:6d:b4:af:
09:05:61:2f:f9:25:e2:9d:5a:d7:24:f8:04:84:0f:
66:6c:95:aa:3a:8c:e8:9d:81:e4:7e:16:b1:e5:b7:
18:f3:5f:4e:7c:d9:db:3d:b5:ac:e2:ed:46:cc:30:
1f:a5:b3:7c:7b:7c:98:44:dc:3b:d4:3c:e5:7f:b2:
40:29:94:34:6f:ef:c6:ab:76:06:38:56:b8:16:8b:
10:a4:f7:21:80:1e:b8:1f:42:d1:b2:16:03:c9:0b:
47:45:72:e0:a2:3c:49:a1:fd:86:24:90:1d:11:24:
98:c6:31:f3:de:77:4c:f9:e3:95:5a:a7:44:31:cd:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:B2:C0:3F:C4:3D:E1:20:5A:85:E9:13:DD:53:D9:CC:0D:8D:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfSywD_EPeEgWoXpE91T2cwNjT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:33:0b:91:d2:a9:42:d5:42:5b:ac:81:e0:c8:bf:cd:f4:96:
63:e4:36:ec:ad:da:3d:76:87:8c:ed:85:b7:19:44:49:f9:c9:
b3:03:fa:9c:d9:6b:c9:e4:99:5d:37:47:61:3a:d4:dd:1e:63:
cb:af:fe:f4:2f:16:3d:b6:f1:3a:61:56:fa:b8:92:07:e4:b1:
db:c7:bd:b0:6a:73:61:dc:c8:b6:b1:60:46:cd:e6:6f:4c:19:
77:57:68:1c:0f:8a:0d:16:45:dd:73:59:86:89:71:0b:17:b0:
db:55:96:ac:0f:73:e9:d5:c2:56:3e:13:23:bc:21:08:5e:83:
bb:01:c4:b2:09:a8:1d:81:9f:e1:84:90:a0:5a:5c:7a:d6:a3:
a5:0f:19:27:0c:f3:6e:13:63:b1:b8:7c:14:ce:81:dd:bc:79:
ac:8e:e1:71:77:91:14:31:0c:40:34:0e:fb:a1:4d:3a:63:c7:
70:67:cf:0f:56:99:cf:fa:47:28:1b:c0:1c:5b:2c:b2:08:17:
13:e6:97:6f:a2:62:ac:8d:6a:c3:14:e6:6f:f3:7f:21:41:b4:
16:29:8c:2d:5f:7e:9d:22:36:bf:e9:d3:4d:3c:91:e0:09:ce:
81:cc:77:17:4b:27:d2:a3:4d:d0:ff:0f:98:66:7a:ba:04:33:
d3:21:1d:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO4zikhnIBjRxCmIlFFviPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA4MTgxNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGY0YjJjMDNmYzQzZGUxMjA1YTg1ZTkxM2RkNTNkOWNjMGQ4ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmyZSgd8dAMPy2ZlkzNCJF50oLUk
778m/Ks93peYxoAGCX4FMiPDYuTUDgbn2fwJcywLzhuzSc/sqUMz1HCPuaVainFU
4WCCxyz9AX2VNYLM4YL1tbNioemXqOFPJ0TsQsxlj1JVaTwpB34dwcIUWs4q+jbk
bpz3OSuDJm1jwm5ngHNttK8JBWEv+SXinVrXJPgEhA9mbJWqOozonYHkfhax5bcY
819OfNnbPbWs4u1GzDAfpbN8e3yYRNw71Dzlf7JAKZQ0b+/Gq3YGOFa4FosQpPch
gB64H0LRshYDyQtHRXLgojxJof2GJJAdESSYxjHz3ndM+eOVWqdEMc1iOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI30ssA/xD3hIFqF6RPdU9nMDY0/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvamZTeXdEX0VQZUVnV29YcEU5MVQyY3dOalQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACQzC5HSqULVQlusgeDI
v830lmPkNuyt2j12h4zthbcZREn5ybMD+pzZa8nkmV03R2E61N0eY8uv/vQvFj22
8TphVvq4kgfksdvHvbBqc2HcyLaxYEbN5m9MGXdXaBwPig0WRd1zWYaJcQsXsNtV
lqwPc+nVwlY+EyO8IQheg7sBxLIJqB2Bn+GEkKBaXHrWo6UPGScM824TY7G4fBTO
gd28eayO4XF3kRQxDEA0DvuhTTpjx3Bnzw9Wmc/6RygbwBxbLLIIFxPml2+iYqyN
asMU5m/zfyFBtBYpjC1ffp0iNr/p0008keAJzoHMdxdLJ9KjTdD/D5hmeroEM9Mh
HRI=
-----END CERTIFICATE-----
Generated at Thu May 1 17:32:22 2025 by rpki-client