Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6QAUEcM1JDjVGlBqQQHJ1mGDiI.roa
File: j6QAUEcM1JDjVGlBqQQHJ1mGDiI.roa (raw, json)
Hash identifier: 8zIHd1aS9Lem2mJ3YUVHurgStmhLkbNtBLuPZ9Ia29s=
Subject key identifier: 8F:A4:00:50:47:0C:D4:90:E3:54:69:41:A9:04:07:27:59:86:0E:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847CE483E8A01589F8C6172CC4D9E888B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6QAUEcM1JDjVGlBqQQHJ1mGDiI.roa
Signing time: Tue 15 Nov 2022 20:04:21 +0000
ROA not before: Tue 15 Nov 2022 20:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64:ffff:0:184:7ce4:50a9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:e4:83:e8:a0:15:89:f8:c6:17:2c:c4:d9:e8:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 20:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fa40050470cd490e3546941a904072759860e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:ca:3e:cf:bb:20:ab:0d:32:e0:f1:a5:39:
67:3f:ac:f4:d3:3c:f9:cd:4f:0a:51:48:4e:6d:1d:
82:0c:04:24:8f:17:39:17:c9:26:61:8b:ff:03:96:
cb:ef:ca:44:b4:8a:c1:3b:a8:61:36:04:fb:87:ca:
19:69:43:7d:f6:dd:6a:a3:99:fa:b0:74:38:46:5f:
bd:4d:d4:dc:22:3b:47:82:c4:62:3c:4f:af:82:a9:
3f:e5:ad:83:76:b6:6e:f2:51:5c:69:80:04:36:dd:
2e:89:95:d0:b1:05:73:ff:ca:38:8e:83:99:4e:24:
5f:56:7c:51:06:2e:57:6b:77:d9:78:9c:9d:a8:a0:
eb:69:00:42:01:6e:dd:41:bd:0f:1c:da:b2:bc:c4:
5c:fa:9f:18:4a:64:73:c1:64:4e:f3:c4:e8:73:39:
80:61:9b:32:79:c5:7e:48:cb:a8:0d:ba:dc:bc:a4:
a4:ea:0c:41:e8:4b:34:0c:70:8c:cb:40:d5:47:6a:
0d:b0:ec:ba:ba:3c:a0:10:af:50:49:f7:9d:e2:d9:
20:18:71:76:4f:82:7c:e5:61:99:04:ff:4c:21:3c:
6b:43:87:ce:fb:9c:63:1d:f5:f8:30:20:d9:d4:32:
c6:09:1c:88:70:05:46:03:1e:fb:83:ac:3b:59:a4:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:00:50:47:0C:D4:90:E3:54:69:41:A9:04:07:27:59:86:0E:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j6QAUEcM1JDjVGlBqQQHJ1mGDiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:9a:31:9c:d1:6c:23:1e:db:0a:3e:6e:51:4b:01:56:ac:7b:
e8:db:0d:80:3a:fb:6c:ed:f3:a7:30:a1:10:d9:3b:ad:54:61:
77:7a:0d:45:0d:70:3b:fa:d4:ea:14:09:74:82:ed:7d:3d:4f:
80:b9:78:9a:99:33:d4:cc:41:c6:60:d0:01:f5:65:f2:bf:fe:
b1:a2:9a:7e:75:a7:2f:ee:e1:f4:c8:37:39:ae:2a:8f:4c:34:
36:fb:76:e5:50:36:7e:ea:21:72:1b:80:9d:64:d3:3f:18:49:
b8:1d:2f:4d:c6:59:d0:69:06:44:e3:ce:ce:f4:37:fc:09:64:
b3:e2:dc:b9:32:cb:64:9b:63:0b:1e:a0:fb:ee:6a:e3:93:c9:
25:ea:1c:38:7b:0c:35:96:d3:26:02:f7:3c:c6:12:60:47:a3:
db:8e:3b:c3:52:cd:31:1a:76:a8:ee:50:ea:06:18:5d:88:fb:
e8:a6:b8:33:58:6c:c1:dc:be:b6:5f:89:71:23:7e:6e:ea:4d:
be:fd:60:cb:c4:e2:2d:61:79:2e:6f:4e:76:52:83:bc:8a:c3:
7b:d4:c4:6c:6d:17:32:b4:ad:e2:33:e7:df:51:2c:0a:95:99:
d9:c6:32:99:53:6b:d0:19:2c:fe:ba:1f:09:6a:79:da:f8:73:
3d:86:0e:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYR85IPooBWJ+MYXLMTZ6Ii1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTE1MjAwNDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmE0MDA1MDQ3MGNkNDkwZTM1NDY5NDFhOTA0MDcyNzU5ODYwZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmbKPs+7IKsNMuDxpTlnP6z00zz5
zU8KUUhObR2CDAQkjxc5F8kmYYv/A5bL78pEtIrBO6hhNgT7h8oZaUN99t1qo5n6
sHQ4Rl+9TdTcIjtHgsRiPE+vgqk/5a2DdrZu8lFcaYAENt0uiZXQsQVz/8o4joOZ
TiRfVnxRBi5Xa3fZeJydqKDraQBCAW7dQb0PHNqyvMRc+p8YSmRzwWRO88ToczmA
YZsyecV+SMuoDbrcvKSk6gxB6Es0DHCMy0DVR2oNsOy6ujygEK9QSfed4tkgGHF2
T4J85WGZBP9MITxrQ4fO+5xjHfX4MCDZ1DLGCRyIcAVGAx77g6w7WaSNcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI+kAFBHDNSQ41RpQakEBydZhg4iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvajZRQVVFY00xSkRqVkdsQnFRUUhKMW1HRGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJmaMZzRbCMe2wo+blFL
AVase+jbDYA6+2zt86cwoRDZO61UYXd6DUUNcDv61OoUCXSC7X09T4C5eJqZM9TM
QcZg0AH1ZfK//rGimn51py/u4fTINzmuKo9MNDb7duVQNn7qIXIbgJ1k0z8YSbgd
L03GWdBpBkTjzs70N/wJZLPi3Lkyy2SbYwseoPvuauOTySXqHDh7DDWW0yYC9zzG
EmBHo9uOO8NSzTEadqjuUOoGGF2I++imuDNYbMHcvrZfiXEjfm7qTb79YMvE4i1h
eS5vTnZSg7yKw3vUxGxtFzK0reIz599RLAqVmdnGMplTa9AZLP66Hwlqedr4cz2G
Dvo=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:49 2025 by rpki-client