Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwBmziLARfci__fNooXGAQKPjB0.roa
File: jwBmziLARfci__fNooXGAQKPjB0.roa (raw, json)
Hash identifier: yZ88pCBOHim5G9pHoXBsATHGl7ZqBeyCIu6UVppOB7w=
Subject key identifier: 8F:00:66:CE:22:C0:45:F7:22:FF:F7:CD:A2:85:C6:01:02:8F:8C:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D4077257466FE5860F1A598E11681261
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwBmziLARfci__fNooXGAQKPjB0.roa
Signing time: Fri 02 Dec 2022 18:09:28 +0000
ROA not before: Fri 02 Dec 2022 18:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:07:72:57:46:6f:e5:86:0f:1a:59:8e:11:68:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 18:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f0066ce22c045f722fff7cda285c601028f8c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:df:54:11:99:93:5c:a7:37:e1:05:1f:0a:
22:0b:31:ca:e1:e2:43:25:dd:d1:a2:6f:44:c7:56:
6c:47:22:05:54:d4:03:81:ab:2e:ab:9f:4f:ea:bd:
2f:b4:e7:e5:e6:65:a9:63:56:7a:31:ec:85:17:65:
8b:b2:29:b3:ad:a9:7c:d8:7d:b0:97:4c:53:ed:72:
c9:60:99:be:ce:c8:bd:99:81:cb:95:64:e2:07:55:
c5:1d:75:12:af:c0:db:48:f6:e3:4f:13:8d:32:b9:
ea:0f:17:3c:97:c1:0b:51:20:57:fa:07:4e:cd:16:
0f:74:16:43:e0:70:49:59:75:62:7d:e1:ad:59:7b:
65:5b:a7:df:6c:81:37:78:78:e2:c7:55:3d:07:1a:
4f:f9:b7:cc:64:57:57:e0:c5:db:40:66:ef:39:9c:
e1:a0:23:dd:9f:72:59:e8:ab:36:49:d3:b2:e3:77:
5c:3d:2c:7e:5c:33:e5:ab:45:d4:4a:7f:0f:e6:f0:
88:62:4f:77:ef:20:3e:bf:a7:19:69:f1:89:07:1d:
67:8b:08:88:9d:8a:5c:53:cc:16:7e:e1:6a:57:a5:
fa:0b:93:35:fe:44:ca:b3:83:cb:d5:e9:78:21:bb:
48:9f:34:82:a3:ea:4d:4a:11:e7:54:78:0e:eb:e4:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:66:CE:22:C0:45:F7:22:FF:F7:CD:A2:85:C6:01:02:8F:8C:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwBmziLARfci__fNooXGAQKPjB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:b0:11:48:1d:2b:e0:63:6d:4e:7e:9f:ff:f4:85:7d:28:63:
fe:fa:29:6b:f2:4f:6f:f7:78:8a:a1:e4:2c:fb:d5:87:89:eb:
9d:5b:fa:19:c4:53:69:18:94:9a:85:f3:00:7c:2c:6d:9b:76:
8c:0b:7b:61:7d:44:b3:13:03:09:5b:53:78:8c:c0:b1:8f:76:
70:a2:2c:61:ec:82:2f:ac:13:d8:56:9d:cb:b5:d6:ad:f3:80:
5b:8c:44:99:56:df:33:0c:84:f3:7c:9a:72:ab:c5:7a:86:3b:
17:89:a5:2c:89:5a:1c:d5:bb:28:08:21:cf:a9:0d:79:d3:9b:
36:52:03:1b:db:c5:80:75:4f:2c:f2:db:48:5a:65:25:ae:c3:
20:f6:01:41:bb:f6:52:b4:fa:7f:96:fe:64:ef:13:49:e6:cf:
27:0b:1f:55:01:6e:d3:96:c9:77:cb:37:23:6b:13:62:49:4e:
ed:6f:db:35:0c:5b:9c:07:b1:92:29:0c:d4:23:95:ee:15:04:
0c:78:91:bd:97:4a:34:12:05:e8:8e:de:6a:d6:5f:89:43:9f:
1c:3a:5e:53:fa:93:54:ff:42:b3:15:50:80:b2:3a:b5:52:c3:
34:a2:d3:e3:ca:1d:d8:8e:fa:eb:5c:65:e7:86:99:ee:24:f7:
e0:b0:d0:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTUB3JXRm/lhg8aWY4RaBJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjAyMTgwOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjAwNjZjZTIyYzA0NWY3MjJmZmY3Y2RhMjg1YzYwMTAyOGY4YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzHfVBGZk1ynN+EFHwoiCzHK4eJD
Jd3Rom9Ex1ZsRyIFVNQDgasuq59P6r0vtOfl5mWpY1Z6MeyFF2WLsimzral82H2w
l0xT7XLJYJm+zsi9mYHLlWTiB1XFHXUSr8DbSPbjTxONMrnqDxc8l8ELUSBX+gdO
zRYPdBZD4HBJWXVifeGtWXtlW6ffbIE3eHjix1U9BxpP+bfMZFdX4MXbQGbvOZzh
oCPdn3JZ6Ks2SdOy43dcPSx+XDPlq0XUSn8P5vCIYk937yA+v6cZafGJBx1niwiI
nYpcU8wWfuFqV6X6C5M1/kTKs4PL1el4IbtInzSCo+pNShHnVHgO6+TtXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI8AZs4iwEX3Iv/3zaKFxgECj4wdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvandCbXppTEFSZmNpX19mTm9vWEdBUUtQakIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACiwEUgdK+BjbU5+n//0
hX0oY/76KWvyT2/3eIqh5Cz71YeJ651b+hnEU2kYlJqF8wB8LG2bdowLe2F9RLMT
AwlbU3iMwLGPdnCiLGHsgi+sE9hWncu11q3zgFuMRJlW3zMMhPN8mnKrxXqGOxeJ
pSyJWhzVuygIIc+pDXnTmzZSAxvbxYB1Tyzy20haZSWuwyD2AUG79lK0+n+W/mTv
E0nmzycLH1UBbtOWyXfLNyNrE2JJTu1v2zUMW5wHsZIpDNQjle4VBAx4kb2XSjQS
BeiO3mrWX4lDnxw6XlP6k1T/QrMVUICyOrVSwzSi0+PKHdiO+utcZeeGme4k9+Cw
0GM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client