Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpGhSMrSJKxhNAsYpojkHajtdS0.roa
File: jpGhSMrSJKxhNAsYpojkHajtdS0.roa (raw, json)
Hash identifier: dA41YC3+U3VcaMiTRuNBbW9e1P0EK5Ts5IqWMEG3fiM=
Subject key identifier: 8E:91:A1:48:CA:D2:24:AC:61:34:0B:18:A6:88:E4:1D:A8:ED:75:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188232E309C4EDD7B5B1E39F626CD6E0B1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpGhSMrSJKxhNAsYpojkHajtdS0.roa
Signing time: Tue 16 May 2023 06:10:09 +0000
ROA not before: Tue 16 May 2023 06:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:2e:30:9c:4e:dd:7b:5b:1e:39:f6:26:cd:6e:0b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 06:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e91a148cad224ac61340b18a688e41da8ed752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:00:0b:19:0c:f3:fa:65:0c:40:d2:0c:50:
dc:e6:12:f1:54:c4:a6:b9:d7:15:25:40:27:d7:81:
7e:56:55:e1:c0:0b:3a:5a:5c:a5:e3:e5:db:87:41:
82:0b:4c:51:00:6f:e0:32:f7:37:86:d8:3a:77:1f:
58:d6:1f:7f:c1:7c:3c:2f:27:a0:95:ea:73:90:f2:
a5:eb:75:5d:26:c1:2c:3b:bf:04:b6:b7:8a:7b:2f:
ca:99:de:80:13:28:fd:8b:18:59:b6:3c:b1:6c:9f:
74:88:b5:da:88:d1:44:96:66:b6:31:a7:81:f6:45:
26:d8:6f:78:29:4f:2a:31:a3:cf:87:07:db:e3:9f:
ae:d0:ad:87:a3:bb:4a:d1:c7:34:2b:b2:f5:d3:be:
73:b5:49:6e:b1:88:4f:09:e8:bc:bd:5f:7a:0b:ec:
60:fe:db:c6:70:59:81:e9:3b:2f:75:f1:18:c2:a0:
f0:c1:00:51:49:51:4c:ed:54:2b:56:7b:0d:f9:bd:
20:4a:e8:37:cf:8f:f9:58:3b:23:03:2e:aa:21:95:
a2:68:05:7b:ef:ed:6c:36:6d:e2:87:7e:48:a0:89:
42:d0:0b:12:7c:57:08:1d:8b:4d:fc:b1:2e:2f:3d:
55:e9:f1:20:32:e8:40:bc:b1:69:ed:67:51:7c:c9:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:A1:48:CA:D2:24:AC:61:34:0B:18:A6:88:E4:1D:A8:ED:75:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpGhSMrSJKxhNAsYpojkHajtdS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:1b:2f:79:79:82:e7:2d:bc:ae:07:ec:b6:65:fe:39:c6:89:
19:ea:6a:99:4c:61:07:b8:d7:e1:51:ea:50:b4:68:bb:f1:7d:
2f:44:17:4e:05:e4:56:1f:c6:d4:96:1e:25:d8:5c:27:1b:1d:
52:cf:26:45:23:6b:68:7f:af:58:f1:3c:17:67:bf:dc:a1:5b:
15:cd:9a:b8:02:84:eb:24:1f:0f:3e:27:5a:36:68:cc:6b:97:
74:00:45:62:ee:db:ef:b3:76:f8:2b:69:13:c4:31:99:23:00:
43:41:25:d7:e8:68:c3:f5:95:3b:f9:ce:0b:c7:0f:a3:16:1b:
7c:f5:0b:e2:29:7a:a6:2d:18:9e:19:6c:97:53:50:ad:f6:4c:
e6:09:b9:4c:3b:d8:45:ca:ae:0f:90:d4:98:8c:4d:c4:07:c4:
8f:74:eb:19:a7:df:b2:a6:00:e6:d8:2d:8e:ea:2b:e1:6f:27:
d1:93:91:a3:fd:38:27:46:02:bc:42:b1:e2:40:9e:2a:cc:06:
63:c9:0e:97:6d:c8:db:28:c0:d8:e3:7e:a3:e8:87:86:3f:c2:
4f:15:03:95:f0:f9:c6:50:01:05:44:b0:4a:c4:08:78:82:aa:
eb:9d:37:3d:bd:10:47:ff:a8:b5:c1:87:52:82:99:71:02:9d:
c3:df:57:9a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgjLjCcTt17Wx459ibNbgsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE2MDYxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTkxYTE0OGNhZDIyNGFjNjEzNDBiMThhNjg4ZTQxZGE4ZWQ3NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ0ACxkM8/plDEDSDFDc5hLxVMSm
udcVJUAn14F+VlXhwAs6Wlyl4+Xbh0GCC0xRAG/gMvc3htg6dx9Y1h9/wXw8Lyeg
lepzkPKl63VdJsEsO78EtreKey/Kmd6AEyj9ixhZtjyxbJ90iLXaiNFElma2MaeB
9kUm2G94KU8qMaPPhwfb45+u0K2Ho7tK0cc0K7L1075ztUlusYhPCei8vV96C+xg
/tvGcFmB6TsvdfEYwqDwwQBRSVFM7VQrVnsN+b0gSug3z4/5WDsjAy6qIZWiaAV7
7+1sNm3ih35IoIlC0AsSfFcIHYtN/LEuLz1V6fEgMuhAvLFp7WdRfMktGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI6RoUjK0iSsYTQLGKaI5B2o7XUtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvanBHaFNNclNKS3hoTkFzWXBvamtIYWp0ZFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFIbL3l5guctvK4H7LZl
/jnGiRnqaplMYQe41+FR6lC0aLvxfS9EF04F5FYfxtSWHiXYXCcbHVLPJkUja2h/
r1jxPBdnv9yhWxXNmrgChOskHw8+J1o2aMxrl3QARWLu2++zdvgraRPEMZkjAENB
JdfoaMP1lTv5zgvHD6MWG3z1C+IpeqYtGJ4ZbJdTUK32TOYJuUw72EXKrg+Q1JiM
TcQHxI906xmn37KmAObYLY7qK+FvJ9GTkaP9OCdGArxCseJAnirMBmPJDpdtyNso
wNjjfqPoh4Y/wk8VA5Xw+cZQAQVEsErECHiCquudNz29EEf/qLXBh1KCmXECncPf
V5o=
-----END CERTIFICATE-----
Generated at Thu May 1 02:58:54 2025 by rpki-client