Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JmpESsKwZdPAi-zgvoTeiYOyJnQ.roa
File: JmpESsKwZdPAi-zgvoTeiYOyJnQ.roa (raw, json)
Hash identifier: 5QEIi6Kh+CVAfcalJJbUBF61CEIX/Z4LiE9QWKKeAiA=
Subject key identifier: 26:6A:44:4A:C2:B0:65:D3:C0:8B:EC:E0:BE:84:DE:89:83:B2:26:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 873BB1C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JmpESsKwZdPAi-zgvoTeiYOyJnQ.roa
Signing time: Thu 26 May 2022 02:10:13 +0000
ROA not before: Thu 26 May 2022 02:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268836291 (0x873bb1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 02:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=266a444ac2b065d3c08bece0be84de8983b22674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:f5:70:1b:54:f3:a0:1d:bd:20:a9:33:dd:
00:fc:33:69:0b:a4:99:6a:3e:44:9e:a8:b8:04:f1:
ec:2f:6a:a8:19:5e:db:6b:3d:1e:4a:55:e2:f1:90:
f5:53:c6:b0:55:fc:fe:c2:b0:39:c4:b5:c2:1a:af:
49:ab:14:2a:c3:a4:cd:1d:52:ad:b3:86:3f:f0:ce:
e9:75:d2:75:d7:6a:41:06:f2:22:52:2a:62:71:bc:
01:59:eb:a7:43:c7:59:65:0c:66:c5:62:1c:dd:75:
7f:94:80:f4:ef:a1:66:3d:a9:b4:ab:8a:15:ba:dd:
0a:50:c1:2c:20:f2:13:c9:79:61:69:c0:35:3d:b4:
96:7c:46:68:74:86:bd:56:64:05:f3:de:71:1a:09:
91:f3:97:e4:d9:77:28:dd:02:b8:d2:66:ad:ca:c9:
02:ea:1e:fa:38:28:f5:61:37:b1:8b:c1:7a:2b:76:
03:c1:bf:36:cb:77:ae:8d:46:c7:f1:33:e0:5a:62:
38:91:ef:84:94:f2:b1:da:44:40:16:0f:ea:1a:02:
b0:79:cd:f4:9e:d8:fa:bc:29:e4:18:8d:d7:ab:e3:
9f:09:3c:c4:a8:c3:7d:86:e0:19:ba:a0:10:1d:3c:
31:8c:e5:29:f7:2e:ff:20:11:dc:d9:94:df:d3:1e:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:44:4A:C2:B0:65:D3:C0:8B:EC:E0:BE:84:DE:89:83:B2:26:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JmpESsKwZdPAi-zgvoTeiYOyJnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ba:1b:85:eb:ed:e7:ac:63:7e:f3:57:bb:f7:28:08:7a:60:
74:63:a4:27:b6:cd:7f:cd:73:2e:60:27:cf:f1:a3:0f:2e:ce:
60:2e:37:a4:e7:68:6f:56:09:db:27:65:c9:03:c8:74:16:78:
b0:fd:49:47:ed:60:d3:12:83:20:f0:0a:dd:98:a3:fe:9d:48:
5c:0e:da:4c:13:8a:66:47:a1:4b:03:9b:c9:c3:9b:aa:36:1a:
12:7e:eb:8b:ea:74:f6:aa:f0:21:19:9b:df:54:b6:df:f4:0e:
90:99:87:a5:d1:56:d0:03:7c:cb:88:f2:a2:9e:90:b7:9d:b7:
be:0c:d3:52:cb:c3:c3:28:16:1c:2e:c0:73:06:14:89:b7:59:
c3:f7:c4:0c:df:02:aa:12:75:27:8c:c2:58:a9:90:64:23:77:
04:03:69:35:f1:e4:6d:02:fb:e3:75:68:f2:2c:38:a6:d8:52:
af:57:c3:7c:dd:5e:be:14:84:a4:63:33:4e:b2:4c:0a:74:26:
6f:f6:ac:74:f2:85:68:0b:27:09:e8:38:70:37:de:41:a3:2d:
51:38:47:be:eb:e7:6b:4e:a5:f4:4a:21:aa:38:1b:17:7b:83:
18:9b:16:c9:77:e0:2a:eb:a1:1c:33:14:02:6f:e0:57:b5:6d:
2b:0e:53:4b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIc7scMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjYwMjEwMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI2NmE0NDRhYzJi
MDY1ZDNjMDhiZWNlMGJlODRkZTg5ODNiMjI2NzQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqb/VwG1TzoB29IKkz3QD8M2kLpJlqPkSeqLgE8ewvaqgZ
XttrPR5KVeLxkPVTxrBV/P7CsDnEtcIar0mrFCrDpM0dUq2zhj/wzul10nXXakEG
8iJSKmJxvAFZ66dDx1llDGbFYhzddX+UgPTvoWY9qbSrihW63QpQwSwg8hPJeWFp
wDU9tJZ8Rmh0hr1WZAXz3nEaCZHzl+TZdyjdArjSZq3KyQLqHvo4KPVhN7GLwXor
dgPBvzbLd66NRsfxM+BaYjiR74SU8rHaREAWD+oaArB5zfSe2Pq8KeQYjder458J
PMSow32G4Bm6oBAdPDGM5Sn3Lv8gEdzZlN/THlSlAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUJmpESsKwZdPAi+zgvoTeiYOyJnQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9KbXBFU3NLd1pkUEFpLXpndm9UZWlZT3lKblEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAhrobhevt56xjfvNXu/coCHpgdGOkJ7bNf81z
LmAnz/GjDy7OYC43pOdob1YJ2ydlyQPIdBZ4sP1JR+1g0xKDIPAK3Zij/p1IXA7a
TBOKZkehSwObycObqjYaEn7ri+p09qrwIRmb31S23/QOkJmHpdFW0AN8y4jyop6Q
t523vgzTUsvDwygWHC7AcwYUibdZw/fEDN8CqhJ1J4zCWKmQZCN3BANpNfHkbQL7
43Vo8iw4pthSr1fDfN1evhSEpGMzTrJMCnQmb/asdPKFaAsnCeg4cDfeQaMtUThH
vuvna06l9EohqjgbF3uDGJsWyXfgKuuhHDMUAm/gV7VtKw5TSw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:57:32 2025 by rpki-client