Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jw60TMcGMMS4zEM4khB4Ny9kj3s.roa
File: Jw60TMcGMMS4zEM4khB4Ny9kj3s.roa (raw, json)
Hash identifier: L6kjlFoBQANwX+8TP2MVW7uO2Qy4UjaxECPgXmOfDtM=
Subject key identifier: 27:0E:B4:4C:C7:06:30:C4:B8:CC:43:38:92:10:78:37:2F:64:8F:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018704F350040026CDE473F69E360EFE319A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jw60TMcGMMS4zEM4khB4Ny9kj3s.roa
Signing time: Tue 21 Mar 2023 16:14:27 +0000
ROA not before: Tue 21 Mar 2023 16:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:f3:50:04:00:26:cd:e4:73:f6:9e:36:0e:fe:31:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 16:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=270eb44cc70630c4b8cc4338921078372f648f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:40:34:a0:e2:0c:19:01:98:a4:54:d4:b1:
ea:7f:0b:59:6b:b4:e6:04:86:50:06:d4:be:2e:26:
b3:cb:99:a4:65:7e:b5:1c:54:01:66:b5:8f:58:66:
69:93:21:ee:f4:43:de:70:66:bd:fc:34:b0:fe:15:
ac:2c:c9:e6:64:d6:0d:7c:9b:20:f7:8f:5d:d3:4b:
5c:d9:e5:54:9a:d8:da:ba:93:4f:c8:d0:3f:b6:e5:
1a:d3:9a:03:11:f1:f4:54:f8:26:e7:b8:8c:99:a5:
d1:3b:42:f8:97:19:e9:ca:9e:ad:49:10:27:d8:6b:
f4:54:35:2a:99:1d:b2:38:84:58:35:b0:e3:16:0c:
5d:a7:24:0a:d0:24:0c:e1:95:46:30:7f:da:9d:3b:
46:84:69:73:af:c3:d5:88:92:aa:cf:00:5a:16:b8:
b1:cb:49:6a:2e:00:cd:64:d0:af:5e:cd:dc:ee:69:
3a:0a:b0:d3:0b:c8:25:0a:69:90:54:78:56:ef:40:
73:7a:28:e0:74:8c:ab:3c:ce:1f:75:03:fb:59:49:
41:32:2c:de:b2:03:b7:f0:c6:3c:25:40:d1:2f:5f:
1e:c9:07:d9:64:34:5c:c0:f3:36:38:9c:68:47:84:
71:b8:8b:4e:28:b4:bc:c5:68:36:6e:54:ea:de:af:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:B4:4C:C7:06:30:C4:B8:CC:43:38:92:10:78:37:2F:64:8F:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jw60TMcGMMS4zEM4khB4Ny9kj3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:52:2d:22:6c:86:5b:ae:9b:d1:e3:d7:64:79:53:26:30:76:
5f:bc:d7:f8:7b:19:d7:0c:fe:1b:8c:16:68:71:f6:84:92:c3:
d4:f9:9b:77:bf:52:af:d7:1b:1d:bf:a3:57:9c:f9:46:15:8d:
9d:4f:0d:d7:56:76:ca:84:3b:c2:71:fb:f6:5d:14:ea:a8:93:
f4:4a:44:5e:c1:52:b9:3b:a1:b6:6d:c2:9f:f7:26:74:8f:ef:
29:96:4f:b0:cd:00:d1:b7:db:3b:2e:60:28:fa:08:a3:02:da:
6a:7b:d7:7e:ff:18:64:59:5a:34:14:56:5d:52:3d:59:c2:3e:
7c:0d:be:9c:c2:98:b3:09:93:6d:db:1b:d6:b1:9f:4f:b0:af:
96:0b:b5:07:d0:02:51:ba:31:55:8b:69:fb:75:24:f9:90:12:
4f:65:df:c0:4d:72:57:e3:6d:4a:eb:75:09:ef:24:1e:d4:9e:
6a:c9:99:15:d4:02:53:08:15:f4:69:ff:d4:25:6d:8b:38:1f:
41:73:35:03:41:98:e3:52:0f:30:dd:e2:04:a8:40:4e:76:bc:
9b:a0:fa:22:72:2b:a1:be:7a:df:a0:f3:2a:d8:04:e6:e7:86:
c2:66:73:8d:05:1c:4b:74:50:ac:74:97:45:69:d1:82:9d:58:
8a:5e:2b:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcE81AEACbN5HP2njYO/jGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIxMTYxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzBlYjQ0Y2M3MDYzMGM0YjhjYzQzMzg5MjEwNzgzNzJmNjQ4ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1ANKDiDBkBmKRU1LHqfwtZa7Tm
BIZQBtS+Liazy5mkZX61HFQBZrWPWGZpkyHu9EPecGa9/DSw/hWsLMnmZNYNfJsg
949d00tc2eVUmtjaupNPyNA/tuUa05oDEfH0VPgm57iMmaXRO0L4lxnpyp6tSRAn
2Gv0VDUqmR2yOIRYNbDjFgxdpyQK0CQM4ZVGMH/anTtGhGlzr8PViJKqzwBaFrix
y0lqLgDNZNCvXs3c7mk6CrDTC8glCmmQVHhW70BzeijgdIyrPM4fdQP7WUlBMize
sgO38MY8JUDRL18eyQfZZDRcwPM2OJxoR4RxuItOKLS8xWg2blTq3q8ktQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCcOtEzHBjDEuMxDOJIQeDcvZI97MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSnc2MFRNY0dNTVM0ekVNNGtoQjROeTlrajNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAABSLSJshluum9Hj12R5
UyYwdl+81/h7GdcM/huMFmhx9oSSw9T5m3e/Uq/XGx2/o1ec+UYVjZ1PDddWdsqE
O8Jx+/ZdFOqok/RKRF7BUrk7obZtwp/3JnSP7ymWT7DNANG32zsuYCj6CKMC2mp7
137/GGRZWjQUVl1SPVnCPnwNvpzCmLMJk23bG9axn0+wr5YLtQfQAlG6MVWLaft1
JPmQEk9l38BNclfjbUrrdQnvJB7UnmrJmRXUAlMIFfRp/9QlbYs4H0FzNQNBmONS
DzDd4gSoQE52vJug+iJyK6G+et+g8yrYBObnhsJmc40FHEt0UKx0l0Vp0YKdWIpe
KxM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:33 2025 by rpki-client