Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlRg85aDEbZHQcEKn94X37zR00s.roa
File: jlRg85aDEbZHQcEKn94X37zR00s.roa (raw, json)
Hash identifier: ewyg8LWY3HZj+m2WKRlUatvfuLWRcCcg9tNkesl1AkA=
Subject key identifier: 8E:54:60:F3:96:83:11:B6:47:41:C1:0A:9F:DE:17:DF:BC:D1:D3:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189605776C6B7080DBAA8275B4B23399F2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlRg85aDEbZHQcEKn94X37zR00s.roa
Signing time: Sun 16 Jul 2023 20:14:52 +0000
ROA not before: Sun 16 Jul 2023 20:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:60:57:76:c6:b7:08:0d:ba:a8:27:5b:4b:23:39:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 20:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5460f3968311b64741c10a9fde17dfbcd1d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:a3:ab:68:84:9f:91:64:c8:a1:1b:38:1c:
13:d8:fe:df:3b:42:a4:7c:2f:60:55:0f:3d:be:01:
9b:eb:55:61:56:88:6f:6b:28:c9:49:9d:68:e4:c1:
98:7b:9d:f1:e2:6a:ba:1b:02:8d:46:11:bd:33:08:
fc:b6:75:e7:3d:b2:cc:b5:54:6c:bc:66:c1:0c:23:
61:d4:83:93:8e:f6:76:1f:32:68:47:d6:2a:28:24:
64:b2:35:92:04:de:05:c2:29:aa:4f:cc:e9:c8:b7:
9b:3d:c7:c5:5d:d7:fb:80:78:ec:6d:86:01:b4:b2:
6e:5c:14:fb:f5:bf:6e:98:8d:da:c9:7d:ab:c3:d6:
1c:4b:8c:54:c5:ee:6e:b6:54:39:93:95:8d:cb:31:
9f:67:f2:6d:df:e0:03:17:91:46:7c:40:7a:2a:02:
ab:ba:d6:dc:17:16:79:7f:f0:69:ce:6e:16:e5:89:
e8:0d:ba:50:bb:a3:f9:1a:d4:78:4d:1a:4e:eb:01:
22:e0:0e:ef:90:18:00:9c:a5:6b:63:f2:8e:91:e3:
01:4a:01:f5:be:5f:8f:11:ca:f2:2f:eb:75:82:58:
25:9c:42:6f:4c:42:bd:0e:8b:6f:5f:aa:7e:0f:64:
cd:14:9d:dd:92:b0:6e:f1:08:7c:f7:27:da:30:b2:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:60:F3:96:83:11:B6:47:41:C1:0A:9F:DE:17:DF:BC:D1:D3:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlRg85aDEbZHQcEKn94X37zR00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:18:49:97:b1:dd:64:18:23:44:fa:93:46:90:ea:d4:f9:d1:
a7:c9:35:58:3e:a5:df:0f:1f:f2:7e:a4:95:83:0b:e1:64:ed:
3c:4c:6c:0f:aa:2a:e9:d0:75:04:99:ff:a8:87:5c:a9:c9:13:
99:07:41:b5:99:2c:99:e4:06:79:d9:8f:77:60:ca:45:da:36:
bd:14:98:27:57:03:fc:9b:f1:10:27:62:5f:8c:8e:a5:ad:61:
42:9e:45:f5:55:3e:33:1f:be:46:2f:e4:6b:5c:5e:ad:d6:81:
04:0f:20:25:2b:9b:23:dc:a9:49:9b:35:0d:0d:02:0a:97:f3:
20:fd:fd:6d:82:45:d8:26:94:a8:3e:a1:69:3f:db:a2:38:7b:
be:61:ce:09:ef:a8:65:3b:00:a7:6f:95:13:ac:76:00:67:14:
08:f9:f6:23:38:f7:6d:1e:de:b5:7b:77:d5:fc:99:13:fb:42:
c6:40:25:44:65:7b:aa:ea:af:e4:fa:19:6f:c6:3a:fa:4e:da:
df:48:f4:ba:59:a2:00:94:e7:2a:4f:64:67:03:07:7a:57:94:
9c:77:dc:ee:eb:b8:ab:aa:54:44:d4:6a:01:75:20:fe:12:6f:
04:5a:3f:c0:de:0c:ab:cf:ba:a7:e1:51:5f:c1:13:ee:6c:2d:
7f:5c:5f:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlgV3bGtwgNuqgnW0sjOZ8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE2MjAxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU0NjBmMzk2ODMxMWI2NDc0MWMxMGE5ZmRlMTdkZmJjZDFkMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn2jq2iEn5FkyKEbOBwT2P7fO0Kk
fC9gVQ89vgGb61VhVohvayjJSZ1o5MGYe53x4mq6GwKNRhG9Mwj8tnXnPbLMtVRs
vGbBDCNh1IOTjvZ2HzJoR9YqKCRksjWSBN4FwimqT8zpyLebPcfFXdf7gHjsbYYB
tLJuXBT79b9umI3ayX2rw9YcS4xUxe5utlQ5k5WNyzGfZ/Jt3+ADF5FGfEB6KgKr
utbcFxZ5f/Bpzm4W5YnoDbpQu6P5GtR4TRpO6wEi4A7vkBgAnKVrY/KOkeMBSgH1
vl+PEcryL+t1glglnEJvTEK9DotvX6p+D2TNFJ3dkrBu8Qh89yfaMLLhoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI5UYPOWgxG2R0HBCp/eF9+80dNLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvamxSZzg1YURFYlpIUWNFS245NFgzN3pSMDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFQYSZex3WQYI0T6k0aQ
6tT50afJNVg+pd8PH/J+pJWDC+Fk7TxMbA+qKunQdQSZ/6iHXKnJE5kHQbWZLJnk
BnnZj3dgykXaNr0UmCdXA/yb8RAnYl+MjqWtYUKeRfVVPjMfvkYv5GtcXq3WgQQP
ICUrmyPcqUmbNQ0NAgqX8yD9/W2CRdgmlKg+oWk/26I4e75hzgnvqGU7AKdvlROs
dgBnFAj59iM4920e3rV7d9X8mRP7QsZAJURle6rqr+T6GW/GOvpO2t9I9LpZogCU
5ypPZGcDB3pXlJx33O7ruKuqVETUagF1IP4SbwRaP8DeDKvPuqfhUV/BE+5sLX9c
XyY=
-----END CERTIFICATE-----
Generated at Thu May 1 19:00:04 2025 by rpki-client