Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQ4EzzW8YWejvfJyL5_DnHmt8JA.roa
File: JQ4EzzW8YWejvfJyL5_DnHmt8JA.roa (raw, json)
Hash identifier: TzmNS5ReMNSsydkkQcX5FoAOcO+wjCP1TlAd14c5GdU=
Subject key identifier: 25:0E:04:CF:35:BC:61:67:A3:BD:F2:72:2F:9F:C3:9C:79:AD:F0:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A006BFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQ4EzzW8YWejvfJyL5_DnHmt8JA.roa
Signing time: Sat 12 Feb 2022 15:09:27 +0000
ROA not before: Sat 12 Feb 2022 15:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778412543 (0x6a006bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 15:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=250e04cf35bc6167a3bdf2722f9fc39c79adf090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:da:78:95:1b:23:06:f0:da:1a:d1:64:00:
31:96:d0:9a:23:08:74:a4:60:eb:74:26:e6:8e:43:
c8:e2:d4:10:1b:b9:f6:5f:b8:08:62:a9:63:4b:c9:
b5:3e:bb:4e:da:bc:00:66:30:c9:4b:a3:3d:27:28:
0a:16:ca:80:5e:6d:a9:ac:eb:f4:07:54:02:bf:32:
65:d3:5d:3c:0a:a2:b5:7b:99:77:b4:04:44:da:45:
14:f7:9e:de:e2:21:a1:93:a8:ff:67:c6:f4:1f:8f:
3d:1b:c5:d2:0b:1f:b0:ec:e7:25:b9:dd:2a:d0:43:
a7:f7:27:88:84:79:7c:78:b9:b4:01:a2:be:1d:4b:
11:fe:47:78:8a:e4:c2:65:05:11:23:e7:ca:a8:04:
1c:50:78:10:30:6f:38:17:f5:3e:a2:c5:41:df:0b:
8a:12:78:48:06:0b:47:dd:7f:7d:c0:1f:b7:50:01:
26:53:90:ab:c4:92:27:1f:5c:85:57:23:3b:a3:2c:
e6:77:07:a6:b3:85:a3:7a:ff:92:6e:06:8d:83:6e:
80:a4:86:6a:08:a7:09:7e:b4:45:df:19:e3:6e:c2:
18:06:11:44:14:d3:c9:08:d7:d1:e4:ae:86:9e:36:
89:ae:82:29:7c:a4:44:0e:32:d9:76:b8:02:e7:b7:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:04:CF:35:BC:61:67:A3:BD:F2:72:2F:9F:C3:9C:79:AD:F0:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JQ4EzzW8YWejvfJyL5_DnHmt8JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:f0:c5:7a:ca:74:be:6a:e5:02:83:bb:78:95:c6:10:c8:1e:
0b:31:89:f6:53:be:b2:e3:e8:59:13:f6:85:91:04:5d:d1:e1:
df:03:67:ee:9c:5d:27:d6:10:76:d0:26:00:e2:ca:45:80:83:
5e:5c:47:a8:80:71:22:fd:41:04:cb:72:d4:2d:cb:da:0e:92:
5d:76:5f:77:0b:3a:51:0d:14:43:ff:d3:74:a5:c3:94:43:10:
c4:7c:e7:34:00:d9:24:a4:ef:81:cc:e1:d2:8a:24:85:9b:d7:
9a:5e:b3:e1:36:eb:56:ef:4d:2e:09:0e:89:81:e5:85:38:ce:
c7:a4:58:fd:af:e4:90:30:e6:1a:b7:c6:a7:44:33:1c:d7:23:
7b:b0:38:89:ff:8a:be:1f:12:c5:2e:2c:6b:5f:79:39:eb:83:
aa:de:99:28:8c:d1:23:a7:aa:67:4a:e1:fe:b7:3e:21:e2:26:
3b:ac:09:1a:e2:5f:65:57:02:38:62:2b:38:cf:99:a6:5a:87:
68:50:f9:7c:84:75:12:be:d9:81:45:85:41:13:d2:76:70:c9:
04:5f:b8:ba:2f:63:c5:4d:71:c4:9b:c9:a8:1a:5d:d5:be:a2:
0c:70:89:af:9d:b0:f6:c3:7f:cd:09:41:9d:27:53:b8:82:bf:
2a:a7:59:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEagBr/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MjE1MDkyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjUwZTA0Y2YzNWJj
NjE2N2EzYmRmMjcyMmY5ZmMzOWM3OWFkZjA5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANG+2niVGyMG8Noa0WQAMZbQmiMIdKRg63Qm5o5DyOLUEBu5
9l+4CGKpY0vJtT67Ttq8AGYwyUujPScoChbKgF5tqazr9AdUAr8yZdNdPAqitXuZ
d7QERNpFFPee3uIhoZOo/2fG9B+PPRvF0gsfsOznJbndKtBDp/cniIR5fHi5tAGi
vh1LEf5HeIrkwmUFESPnyqgEHFB4EDBvOBf1PqLFQd8LihJ4SAYLR91/fcAft1AB
JlOQq8SSJx9chVcjO6Ms5ncHprOFo3r/km4GjYNugKSGaginCX60Rd8Z427CGAYR
RBTTyQjX0eSuhp42ia6CKXykRA4y2Xa4Aue31o8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQlDgTPNbxhZ6O98nIvn8Ocea3wkDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0pRNEV6elc4WVdlanZmSnlMNV9EbkhtdDhKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAz8MV6ynS+auUCg7t4lcYQyB4LMYn2U76y4+hZ
E/aFkQRd0eHfA2funF0n1hB20CYA4spFgINeXEeogHEi/UEEy3LULcvaDpJddl93
CzpRDRRD/9N0pcOUQxDEfOc0ANkkpO+BzOHSiiSFm9eaXrPhNutW700uCQ6JgeWF
OM7HpFj9r+SQMOYat8anRDMc1yN7sDiJ/4q+HxLFLixrX3k564Oq3pkojNEjp6pn
SuH+tz4h4iY7rAka4l9lVwI4Yis4z5mmWodoUPl8hHUSvtmBRYVBE9J2cMkEX7i6
L2PFTXHEm8moGl3VvqIMcImvnbD2w3/NCUGdJ1O4gr8qp1nw
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:01 2025 by rpki-client