Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_jsGoZl0VSOg8yu5OsDMlv-DMs.roa
File: 0_jsGoZl0VSOg8yu5OsDMlv-DMs.roa (raw, json)
Hash identifier: bBl4mqtate8DzQ4lnJOta0Wq++S+eR8B4UGVWhahbWc=
Subject key identifier: D3:F8:EC:1A:86:65:D1:54:8E:83:CC:AE:E4:EB:03:32:5B:FE:0C:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1E6BDD4FF0AAD2882692E34D71C51823
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_jsGoZl0VSOg8yu5OsDMlv-DMs.roa
Signing time: Tue 22 Aug 2023 18:05:00 +0000
ROA not before: Tue 22 Aug 2023 18:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:1e6b:2171/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:6b:dd:4f:f0:aa:d2:88:26:92:e3:4d:71:c5:18:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 18:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f8ec1a8665d1548e83ccaee4eb03325bfe0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:90:98:82:8e:3d:cc:fe:0f:4f:35:5c:c9:
29:c6:69:75:6c:30:b5:45:7b:92:80:a0:78:99:bf:
e3:77:6a:65:f6:d6:e5:67:37:cf:58:32:64:fd:d4:
9f:29:cb:47:53:63:1c:d5:5c:26:c5:d6:5a:60:13:
82:57:76:63:50:20:51:2b:99:cd:90:eb:32:db:26:
3c:2f:96:47:93:22:18:1a:07:d9:12:2e:13:b3:af:
af:c9:c5:ea:ef:38:4b:d3:38:04:9f:5b:07:7e:c7:
4b:3c:67:11:d4:f9:67:0a:75:a7:7c:b7:3d:54:83:
6d:9f:93:b1:af:d4:88:0d:ef:92:6c:7c:03:06:44:
4f:49:17:c0:37:87:80:43:ed:1c:c8:7f:fc:07:92:
14:7b:62:70:ca:b1:d2:2f:cf:e1:73:7c:62:a4:ef:
ea:ff:0d:db:2e:e2:7d:db:5c:93:ea:80:c2:88:5a:
2a:1e:fe:66:b0:89:a3:19:92:27:fd:06:43:e4:7f:
f4:37:75:d0:ac:fc:e1:d8:23:bc:5a:c9:30:33:15:
91:50:bf:52:40:92:2a:e9:74:59:f5:83:3c:9d:ea:
a1:1c:bb:ba:e8:28:41:92:33:0c:06:18:2f:27:7f:
e5:ea:0f:5c:ee:56:ef:91:82:df:27:0f:61:1e:25:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:EC:1A:86:65:D1:54:8E:83:CC:AE:E4:EB:03:32:5B:FE:0C:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_jsGoZl0VSOg8yu5OsDMlv-DMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:5b:f0:65:49:1c:4f:2b:84:cf:91:32:b2:0e:e9:e8:c2:6b:
93:40:2f:7c:42:c4:a3:e5:6a:19:21:b7:9d:88:c5:e1:45:28:
ba:92:70:b2:fd:d9:d1:22:08:cf:a1:78:fc:15:26:39:33:e7:
76:13:ca:60:18:ad:ab:2f:09:78:3d:62:57:53:48:18:e1:7a:
86:b3:2a:5b:25:ed:4d:56:a1:8f:b2:7f:5a:c1:06:2a:47:ba:
6f:72:59:0f:64:bd:9e:6e:2c:f4:0e:f9:fe:68:30:c7:8c:94:
df:27:2f:0d:87:45:bc:1a:5b:17:99:b6:ca:37:3a:01:e4:77:
48:a2:d2:95:8e:f7:96:3b:75:f3:49:49:a1:55:36:65:c1:88:
b6:2e:a6:6d:f6:e4:30:2c:55:2c:39:de:b3:ad:ba:53:2d:92:
3b:ee:ff:bb:9f:66:fa:39:4a:f9:90:b4:bf:b4:2b:b3:87:24:
91:d3:57:8d:86:3b:cf:63:61:74:c6:a8:43:ab:58:1f:a1:d9:
a8:e1:03:66:c4:ac:e8:90:42:96:ee:1c:ea:5a:e8:d2:3c:31:
54:92:de:4e:4a:50:ce:f5:2f:42:8a:5f:87:32:13:6e:84:42:
d0:d0:4d:30:42:45:bb:67:36:98:ee:e1:e4:24:aa:55:01:67:
70:cc:71:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoea91P8KrSiCaS401xxRgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIyMTgwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2Y4ZWMxYTg2NjVkMTU0OGU4M2NjYWVlNGViMDMzMjViZmUwY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqeQmIKOPcz+D081XMkpxml1bDC1
RXuSgKB4mb/jd2pl9tblZzfPWDJk/dSfKctHU2Mc1VwmxdZaYBOCV3ZjUCBRK5nN
kOsy2yY8L5ZHkyIYGgfZEi4Ts6+vycXq7zhL0zgEn1sHfsdLPGcR1PlnCnWnfLc9
VINtn5Oxr9SIDe+SbHwDBkRPSRfAN4eAQ+0cyH/8B5IUe2JwyrHSL8/hc3xipO/q
/w3bLuJ921yT6oDCiFoqHv5msImjGZIn/QZD5H/0N3XQrPzh2CO8WskwMxWRUL9S
QJIq6XRZ9YM8neqhHLu66ChBkjMMBhgvJ3/l6g9c7lbvkYLfJw9hHiWjHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNP47BqGZdFUjoPMruTrAzJb/gzLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMF9qc0dvWmwwVlNPZzh5dTVPc0RNbHYtRE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJhb8GVJHE8rhM+RMrIO
6ejCa5NAL3xCxKPlahkht52IxeFFKLqScLL92dEiCM+hePwVJjkz53YTymAYrasv
CXg9YldTSBjheoazKlsl7U1WoY+yf1rBBipHum9yWQ9kvZ5uLPQO+f5oMMeMlN8n
Lw2HRbwaWxeZtso3OgHkd0ii0pWO95Y7dfNJSaFVNmXBiLYupm325DAsVSw53rOt
ulMtkjvu/7ufZvo5SvmQtL+0K7OHJJHTV42GO89jYXTGqEOrWB+h2ajhA2bErOiQ
QpbuHOpa6NI8MVSS3k5KUM71L0KKX4cyE26EQtDQTTBCRbtnNpju4eQkqlUBZ3DM
cZU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:05:20 2025 by rpki-client