Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjDUusd7q5UGValr6MRT2zDWIq8.roa
File: sjDUusd7q5UGValr6MRT2zDWIq8.roa (raw, json)
Hash identifier: i8gLPLatx3Rclx2PAlh2LsPIkjMNATD1KF/oJm7mIaU=
Subject key identifier: B2:30:D4:BA:C7:7B:AB:95:06:55:A9:6B:E8:C4:53:DB:30:D6:22:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B5F4737
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjDUusd7q5UGValr6MRT2zDWIq8.roa
Signing time: Thu 09 Jun 2022 20:11:02 +0000
ROA not before: Thu 09 Jun 2022 20:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338277175 (0x8b5f4737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 20:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b230d4bac77bab950655a96be8c453db30d622af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:49:2a:6b:d6:10:a1:94:ed:54:65:86:b8:
a3:bd:4d:c4:01:54:08:63:1a:7c:31:3b:f6:c3:a1:
2b:3e:9d:3e:3a:f9:9e:d0:ec:cc:36:d5:de:94:eb:
c7:70:be:5e:48:20:ce:1c:c5:bd:53:ff:0b:0d:fe:
b1:c8:d2:da:25:bd:58:1d:3d:61:52:22:85:57:01:
d8:e9:cb:06:4c:66:49:be:2c:82:0d:ee:5b:1b:4d:
24:84:a5:b6:3a:4d:89:fb:a5:7d:24:4f:be:e1:99:
95:52:13:2f:98:b4:68:75:41:69:4c:b3:98:fd:77:
14:f2:4e:81:40:a0:19:77:29:6a:60:21:60:ce:2a:
b5:00:c2:40:d2:ae:b2:6e:a1:7d:cd:f3:31:61:4b:
ec:f5:51:ec:94:8d:c4:aa:5a:74:2c:26:99:bb:1b:
9c:c6:6f:6d:f0:c5:8f:e1:f0:bc:b3:e1:66:94:67:
9d:52:18:8f:0a:b4:cf:87:dd:e6:b5:29:f9:88:31:
d1:dc:aa:07:e3:28:8d:23:5c:20:74:ca:b0:87:78:
f9:c8:22:e2:ed:e8:49:5b:73:25:f7:48:1b:cc:27:
cf:c7:32:de:58:59:a9:55:50:99:09:f8:2d:4e:66:
b5:b9:8e:2f:33:50:bf:44:33:72:0f:04:c7:c1:e6:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:D4:BA:C7:7B:AB:95:06:55:A9:6B:E8:C4:53:DB:30:D6:22:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sjDUusd7q5UGValr6MRT2zDWIq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:e5:ef:14:ea:89:ea:b2:36:bc:04:7b:4b:00:4d:0e:9e:23:
04:42:71:2a:6b:0b:e6:f7:12:57:41:20:cb:cd:49:41:12:10:
77:50:ec:ad:2a:d1:b8:28:cc:89:f1:90:cd:18:40:cf:50:df:
4e:f9:4a:9e:1b:c4:54:7d:aa:65:01:bc:2f:15:d2:07:a9:45:
b4:45:c2:03:fc:1d:16:4d:44:0c:eb:4a:fc:cf:22:23:84:8d:
6c:c2:e5:c8:bd:59:1e:11:98:52:3f:ef:ae:71:c1:65:4f:10:
2c:0b:3f:33:9a:7e:06:d6:5f:8c:3f:49:d9:97:68:89:6d:69:
b9:d5:34:86:44:ed:d1:aa:dc:12:bd:74:ac:b0:9f:64:ba:23:
ac:5f:92:53:09:f0:70:c7:c1:75:e1:86:66:29:07:a0:02:a1:
b1:dc:74:be:fb:1a:8a:eb:b3:10:68:8d:cd:94:62:7a:c4:fe:
2d:20:9b:5c:58:64:89:31:57:5f:c1:c3:0f:e6:35:76:8c:56:
78:9d:9a:05:bc:fe:d4:1c:12:90:76:8d:a0:a8:50:79:d0:82:
ad:68:0b:76:9b:8f:e4:dd:cc:0f:6c:ec:a6:bd:94:ad:9d:0c:
b0:2f:be:f1:19:86:c5:65:79:4d:74:92:62:fe:e6:26:16:f7:
e6:8e:dc:f3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAItfRzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDkyMDExMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGIyMzBkNGJhYzc3
YmFiOTUwNjU1YTk2YmU4YzQ1M2RiMzBkNjIyYWYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6e0kqa9YQoZTtVGWGuKO9TcQBVAhjGnwxO/bDoSs+nT46
+Z7Q7Mw21d6U68dwvl5IIM4cxb1T/wsN/rHI0tolvVgdPWFSIoVXAdjpywZMZkm+
LIIN7lsbTSSEpbY6TYn7pX0kT77hmZVSEy+YtGh1QWlMs5j9dxTyToFAoBl3KWpg
IWDOKrUAwkDSrrJuoX3N8zFhS+z1UeyUjcSqWnQsJpm7G5zGb23wxY/h8Lyz4WaU
Z51SGI8KtM+H3ea1KfmIMdHcqgfjKI0jXCB0yrCHePnIIuLt6ElbcyX3SBvMJ8/H
Mt5YWalVUJkJ+C1OZrW5ji8zUL9EM3IPBMfB5kppAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUsjDUusd7q5UGValr6MRT2zDWIq8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9zakRVdXNkN3E1VUdWYWxyNk1SVDJ6RFdJcTgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAVuXvFOqJ6rI2vAR7SwBNDp4jBEJxKmsL5vcS
V0Egy81JQRIQd1DsrSrRuCjMifGQzRhAz1DfTvlKnhvEVH2qZQG8LxXSB6lFtEXC
A/wdFk1EDOtK/M8iI4SNbMLlyL1ZHhGYUj/vrnHBZU8QLAs/M5p+BtZfjD9J2Zdo
iW1pudU0hkTt0arcEr10rLCfZLojrF+SUwnwcMfBdeGGZikHoAKhsdx0vvsaiuuz
EGiNzZRiesT+LSCbXFhkiTFXX8HDD+Y1doxWeJ2aBbz+1BwSkHaNoKhQedCCrWgL
dpuP5N3MD2zspr2UrZ0MsC++8RmGxWV5TXSSYv7mJhb35o7c8w==
-----END CERTIFICATE-----
Generated at Thu May 1 12:00:25 2025 by rpki-client