Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpj1IcF4C36CgaFi9KhfjK2pY-Y.roa
File: jpj1IcF4C36CgaFi9KhfjK2pY-Y.roa (raw, json)
Hash identifier: x+Yh2ccLjr31bTpnRFjxJxEeYEjNS0auSxYL0IFScQ4=
Subject key identifier: 8E:98:F5:21:C1:78:0B:7E:82:81:A1:62:F4:A8:5F:8C:AD:A9:63:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832335FDA8CA247146B348D00DF593B1EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpj1IcF4C36CgaFi9KhfjK2pY-Y.roa
Signing time: Fri 09 Sep 2022 17:04:44 +0000
ROA not before: Fri 09 Sep 2022 17:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:2335:cdb0/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:35:fd:a8:ca:24:71:46:b3:48:d0:0d:f5:93:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 17:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e98f521c1780b7e8281a162f4a85f8cada963e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:28:1f:aa:3d:26:c0:7a:59:19:c0:6d:38:
c0:dd:10:f6:b8:99:50:84:29:bc:3a:27:88:4c:bc:
16:68:e9:b4:76:10:d4:e9:fd:4b:c8:16:24:2a:3b:
25:7f:70:f8:25:9c:bc:34:1c:d9:c5:3b:4e:1d:4c:
87:d6:82:b3:0c:86:64:4a:0f:95:17:58:0a:41:df:
04:b8:ac:c4:bd:90:4a:17:cd:82:a3:3d:3b:18:24:
08:a2:de:2b:fc:40:fe:85:b3:69:ac:de:2c:3e:5b:
e6:26:aa:0b:52:21:1b:59:fa:27:d5:ea:d7:d2:00:
9a:61:a3:fa:28:dd:02:72:9c:ae:67:c6:c2:fa:0c:
8d:f6:47:cb:d0:1b:cf:8b:81:03:19:75:93:66:7b:
e6:8e:46:b8:fa:ad:6e:58:5f:87:eb:c6:a8:3c:6d:
55:9a:15:53:20:84:af:d5:ec:7f:35:a2:cf:d4:ac:
66:91:98:cc:69:01:f0:42:f0:af:3d:fb:d4:8a:7b:
c2:fc:fa:22:b9:42:f3:73:20:5b:d6:ef:88:d2:9d:
e5:58:d2:7c:1b:b5:32:e8:fd:f0:0a:a6:60:67:b0:
7e:7e:97:c7:34:a5:17:bc:18:f8:30:96:17:52:72:
61:26:1b:41:37:a3:de:e9:f5:56:c2:3e:22:12:c1:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:F5:21:C1:78:0B:7E:82:81:A1:62:F4:A8:5F:8C:AD:A9:63:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jpj1IcF4C36CgaFi9KhfjK2pY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:c8:d5:0b:04:b0:1b:c7:31:df:dc:e1:63:de:88:6d:1b:eb:
b6:27:c6:f3:3a:0d:3d:fc:b1:a0:43:d0:f5:8b:e9:5a:f1:82:
73:0d:40:25:91:d8:18:cf:a2:cc:ed:01:15:35:0f:05:fe:72:
47:26:bf:57:38:8e:5c:92:ee:c0:65:ad:b0:f9:26:d3:95:67:
0c:de:b9:62:44:28:b7:45:a7:78:38:67:42:5b:ac:44:eb:ac:
ae:b8:22:c0:ca:4c:97:57:c1:2c:60:96:22:7d:a3:cd:a0:d0:
fe:7c:be:fe:9e:00:7b:bd:14:7b:c9:d8:6a:1c:05:52:f1:5f:
d3:e8:7e:74:a2:af:cd:73:f5:5f:1e:86:59:d1:50:88:1d:6c:
62:aa:75:b3:09:38:23:c0:4f:03:3c:42:a6:e0:8f:78:db:bd:
0e:b2:a8:6a:90:1d:e4:d7:fe:d3:e8:86:22:ca:94:96:d2:19:
4e:58:61:14:bd:c7:c5:b8:1b:ff:9d:4e:79:5a:6c:b7:0c:83:
84:ba:de:8d:21:75:ca:e6:89:a0:23:72:3c:33:95:2c:ed:4c:
8f:05:f2:d3:27:fa:65:d4:d0:31:ad:aa:e5:21:0a:26:85:78:
e6:d5:70:d8:9c:d4:b6:e0:a8:75:5e:5d:fa:80:9d:0c:6b:36:
82:11:a0:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMjNf2oyiRxRrNI0A31k7HuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA5MTcwNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTk4ZjUyMWMxNzgwYjdlODI4MWExNjJmNGE4NWY4Y2FkYTk2M2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcooH6o9JsB6WRnAbTjA3RD2uJlQ
hCm8OieITLwWaOm0dhDU6f1LyBYkKjslf3D4JZy8NBzZxTtOHUyH1oKzDIZkSg+V
F1gKQd8EuKzEvZBKF82Coz07GCQIot4r/ED+hbNprN4sPlvmJqoLUiEbWfon1erX
0gCaYaP6KN0CcpyuZ8bC+gyN9kfL0BvPi4EDGXWTZnvmjka4+q1uWF+H68aoPG1V
mhVTIISv1ex/NaLP1KxmkZjMaQHwQvCvPfvUinvC/PoiuULzcyBb1u+I0p3lWNJ8
G7Uy6P3wCqZgZ7B+fpfHNKUXvBj4MJYXUnJhJhtBN6Pe6fVWwj4iEsGM1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI6Y9SHBeAt+goGhYvSoX4ytqWPmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvanBqMUljRjRDMzZDZ2FGaTlLaGZqSzJwWS1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALXI1QsEsBvHMd/c4WPe
iG0b67YnxvM6DT38saBD0PWL6VrxgnMNQCWR2BjPosztARU1DwX+ckcmv1c4jlyS
7sBlrbD5JtOVZwzeuWJEKLdFp3g4Z0JbrETrrK64IsDKTJdXwSxgliJ9o82g0P58
vv6eAHu9FHvJ2GocBVLxX9PofnSir81z9V8ehlnRUIgdbGKqdbMJOCPATwM8Qqbg
j3jbvQ6yqGqQHeTX/tPohiLKlJbSGU5YYRS9x8W4G/+dTnlabLcMg4S63o0hdcrm
iaAjcjwzlSztTI8F8tMn+mXU0DGtquUhCiaFeObVcNic1LbgqHVeXfqAnQxrNoIR
oNA=
-----END CERTIFICATE-----
Generated at Tue May 6 10:59:14 2025 by rpki-client