Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwj4OURbtoVWJ0DA5sBOsLO2Z2Q.roa
File: jwj4OURbtoVWJ0DA5sBOsLO2Z2Q.roa (raw, json)
Hash identifier: p367XV5I9laQmmjmqpLaga+LKkFatjjFPMSRfdv1aNU=
Subject key identifier: 8F:08:F8:39:44:5B:B6:85:56:27:40:C0:E6:C0:4E:B0:B3:B6:67:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186635B10C540B4C8F56D62EA65C5A30298
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwj4OURbtoVWJ0DA5sBOsLO2Z2Q.roa
Signing time: Sat 18 Feb 2023 07:09:17 +0000
ROA not before: Sat 18 Feb 2023 07:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:5b:10:c5:40:b4:c8:f5:6d:62:ea:65:c5:a3:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 07:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f08f839445bb685562740c0e6c04eb0b3b66764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:59:3c:6a:a9:3e:c8:76:a6:d0:e4:7e:ba:
ab:50:58:59:66:e7:ac:6e:38:7d:67:24:ef:87:4c:
4c:20:e6:63:4f:1b:8c:12:70:ad:28:14:9d:f9:90:
06:87:8d:12:6b:e8:69:38:29:9e:b1:64:8a:4d:88:
bc:e3:68:18:54:62:b3:1a:0d:a8:e5:2c:e6:20:cc:
42:0f:e5:17:9b:73:92:85:b8:e1:da:37:63:fd:33:
f2:3a:01:76:b9:fc:f2:1f:e0:49:27:49:d8:dd:13:
56:40:ea:2c:a2:f1:9b:3c:45:8d:68:21:7d:51:63:
f2:6c:54:66:fe:c4:2a:34:f8:b0:2b:c3:a8:7d:e7:
2e:a3:38:f6:62:ee:fd:d6:0e:3f:a0:32:62:d2:39:
74:e8:9a:0c:84:87:61:c2:24:20:b5:ae:ad:de:8b:
38:2c:ac:6d:94:e8:84:51:cc:c5:76:77:77:6a:e9:
f8:03:62:73:a8:5e:ed:b6:8c:06:19:f8:5f:e2:b6:
19:df:3c:d8:eb:33:86:dd:a3:a8:03:53:f1:fd:33:
07:73:48:97:d4:a2:86:c8:cc:90:76:87:90:b1:1b:
bc:4e:84:f5:c3:9b:1a:45:d9:e0:0c:9a:ce:6a:b6:
72:42:a3:4f:8f:40:cd:2f:c0:44:78:95:9c:cb:89:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:08:F8:39:44:5B:B6:85:56:27:40:C0:E6:C0:4E:B0:B3:B6:67:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jwj4OURbtoVWJ0DA5sBOsLO2Z2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:4e:60:bd:c5:36:0f:88:50:05:3f:81:7c:53:7f:0e:13:ec:
73:85:66:ba:2d:20:2b:05:fc:d5:b4:69:e8:75:bf:76:5c:85:
14:e9:bf:50:66:bc:87:ad:aa:2d:13:3c:ad:e7:5d:b5:d6:66:
fd:7a:ba:fc:b3:e4:47:b3:f2:b6:0d:3c:9c:f2:fd:cc:17:bc:
27:e9:f5:3c:45:2c:fc:09:dd:64:14:8f:0e:08:d8:35:1f:ec:
a6:78:7a:f2:3f:ee:e5:7e:a7:d2:b9:4d:fc:42:35:28:7c:50:
c2:43:73:18:58:e9:76:82:61:5b:85:b2:93:be:c9:a1:97:c3:
0a:e3:cf:70:d8:3c:43:ce:43:6c:00:f7:ec:e0:6b:59:b0:13:
52:58:17:96:d0:22:5c:5f:de:0d:05:71:4f:c4:b7:3d:fc:16:
79:97:41:4f:e8:e6:2c:7d:e9:10:74:61:3b:d3:d7:dc:18:de:
50:18:1f:a2:0d:ff:94:e0:20:e7:ee:2f:72:92:1e:43:5f:f0:
a2:b6:14:e9:20:93:f4:ae:5f:16:16:ad:c3:52:dc:64:f6:dd:
a6:98:33:e7:83:fd:5e:7d:95:58:87:7a:99:bd:26:e7:d7:ae:
df:9a:61:27:5a:9d:1e:9c:69:c0:27:c2:54:87:9a:cc:15:81:
2e:4c:e6:6b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZjWxDFQLTI9W1i6mXFowKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE4MDcwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA4ZjgzOTQ0NWJiNjg1NTYyNzQwYzBlNmMwNGViMGIzYjY2NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBtZPGqpPsh2ptDkfrqrUFhZZues
bjh9ZyTvh0xMIOZjTxuMEnCtKBSd+ZAGh40Sa+hpOCmesWSKTYi842gYVGKzGg2o
5SzmIMxCD+UXm3OShbjh2jdj/TPyOgF2ufzyH+BJJ0nY3RNWQOosovGbPEWNaCF9
UWPybFRm/sQqNPiwK8Oofecuozj2Yu791g4/oDJi0jl06JoMhIdhwiQgta6t3os4
LKxtlOiEUczFdnd3aun4A2JzqF7ttowGGfhf4rYZ3zzY6zOG3aOoA1Px/TMHc0iX
1KKGyMyQdoeQsRu8ToT1w5saRdngDJrOarZyQqNPj0DNL8BEeJWcy4lFmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI8I+DlEW7aFVidAwObATrCztmdkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvandqNE9VUmJ0b1ZXSjBEQTVzQk9zTE8yWjJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAExOYL3FNg+IUAU/gXxT
fw4T7HOFZrotICsF/NW0aeh1v3ZchRTpv1BmvIetqi0TPK3nXbXWZv16uvyz5Eez
8rYNPJzy/cwXvCfp9TxFLPwJ3WQUjw4I2DUf7KZ4evI/7uV+p9K5TfxCNSh8UMJD
cxhY6XaCYVuFspO+yaGXwwrjz3DYPEPOQ2wA9+zga1mwE1JYF5bQIlxf3g0FcU/E
tz38FnmXQU/o5ix96RB0YTvT19wY3lAYH6IN/5TgIOfuL3KSHkNf8KK2FOkgk/Su
XxYWrcNS3GT23aaYM+eD/V59lViHepm9JufXrt+aYSdanR6cacAnwlSHmswVgS5M
5ms=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:00 2025 by rpki-client