Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jA6jheKp7I0dt5tJbUGbZ21cITA.roa
File: jA6jheKp7I0dt5tJbUGbZ21cITA.roa (raw, json)
Hash identifier: 8AQoawyLGdJs0FrHjp1/zJDEyebpFC5fcmWzEKavKf4=
Subject key identifier: 8C:0E:A3:85:E2:A9:EC:8D:1D:B7:9B:49:6D:41:9B:67:6D:5C:21:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854B87FD5360E7EAA0E3C63C5890DCE139
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jA6jheKp7I0dt5tJbUGbZ21cITA.roa
Signing time: Sun 25 Dec 2022 23:04:41 +0000
ROA not before: Sun 25 Dec 2022 23:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4b87:9fb7/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4b:87:fd:53:60:e7:ea:a0:e3:c6:3c:58:90:dc:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 23:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0ea385e2a9ec8d1db79b496d419b676d5c2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:2b:d4:69:a6:b3:1e:2b:67:28:c2:e2:da:
d2:d8:07:4b:c1:d7:51:f7:31:d8:84:69:29:03:22:
04:2d:98:a0:93:a7:ea:0e:68:da:a6:73:30:44:c3:
2b:eb:e2:2f:a6:a1:97:6a:c3:20:e7:f8:8a:9c:6d:
6c:a5:8d:af:e1:7f:71:00:8b:af:1c:65:9f:5f:cf:
42:03:2a:7c:e3:5c:b5:93:d2:2c:46:95:d6:f1:b3:
68:dd:ac:7e:3a:2a:29:3b:5a:c7:b5:e1:40:58:12:
66:9f:e7:f7:45:54:2d:65:e2:69:3a:be:86:4f:d1:
d5:89:73:b4:e8:e5:0a:0f:ec:47:96:be:25:c1:01:
de:34:40:d6:ce:b3:75:ea:01:b0:cf:96:b4:a5:13:
ef:17:be:76:70:35:f1:9a:13:e9:63:e9:5d:db:35:
ba:9b:d4:6d:f5:34:2f:7f:1f:40:a6:ac:22:fd:5a:
e3:09:b6:26:57:f1:2b:0c:5b:d6:de:b2:fc:94:0d:
ca:98:ea:51:e5:d9:76:00:ea:aa:aa:e4:3b:eb:da:
20:72:e8:74:9d:44:25:05:09:2b:8b:ba:81:a1:26:
0a:65:24:fc:04:bd:fe:85:6c:7c:17:4b:fd:ea:ff:
09:4f:78:32:91:16:e6:ee:90:d8:57:5d:e1:f0:a5:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:A3:85:E2:A9:EC:8D:1D:B7:9B:49:6D:41:9B:67:6D:5C:21:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jA6jheKp7I0dt5tJbUGbZ21cITA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:83:60:55:cf:a9:28:bf:f6:60:7a:0a:97:d1:10:60:6a:20:
55:73:a4:58:92:d7:5e:83:13:ca:be:01:ec:07:7f:a2:e3:38:
8d:a0:43:72:25:28:05:1f:03:3c:39:be:b5:7e:a1:bc:08:a0:
88:5e:be:13:04:8a:26:99:54:80:ee:c4:c7:92:36:35:37:90:
69:29:15:7c:db:fe:0c:d5:93:bf:69:fc:6f:39:65:37:ee:93:
12:82:3b:9b:3e:35:4e:c2:dd:52:b1:c6:9f:8e:59:b9:b1:3e:
04:0e:d5:4c:6d:c7:27:8b:93:83:59:13:43:30:29:27:e1:0d:
95:db:04:b5:20:8e:8b:f3:a2:03:4d:6e:38:e1:b1:3d:35:83:
93:1f:a1:1e:f5:c1:43:75:ec:d0:5f:e6:e1:84:46:e2:d3:53:
6f:a8:f3:9d:a1:1a:ec:dd:af:3b:c1:0d:34:2e:92:d4:e4:74:
a0:57:0d:2f:2e:6e:a8:a8:8a:34:db:07:af:3c:83:4e:4f:7c:
55:d5:c0:b3:32:22:60:ee:74:0a:d6:d8:51:18:0b:93:4e:33:
d7:42:78:96:fe:7a:8b:b7:a4:cc:9e:e9:84:70:fb:68:a9:1b:
3b:e7:f9:23:b2:9a:d1:83:91:b6:56:56:e6:8f:08:49:9c:0c:
a5:83:3e:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVLh/1TYOfqoOPGPFiQ3OE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI1MjMwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzBlYTM4NWUyYTllYzhkMWRiNzliNDk2ZDQxOWI2NzZkNWMyMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX4r1Gmmsx4rZyjC4trS2AdLwddR
9zHYhGkpAyIELZigk6fqDmjapnMwRMMr6+IvpqGXasMg5/iKnG1spY2v4X9xAIuv
HGWfX89CAyp841y1k9IsRpXW8bNo3ax+OiopO1rHteFAWBJmn+f3RVQtZeJpOr6G
T9HViXO06OUKD+xHlr4lwQHeNEDWzrN16gGwz5a0pRPvF752cDXxmhPpY+ld2zW6
m9Rt9TQvfx9Apqwi/VrjCbYmV/ErDFvW3rL8lA3KmOpR5dl2AOqqquQ769ogcuh0
nUQlBQkri7qBoSYKZST8BL3+hWx8F0v96v8JT3gykRbm7pDYV13h8KX0kQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIwOo4XiqeyNHbebSW1Bm2dtXCEwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvakE2amhlS3A3STBkdDV0SmJVR2JaMjFjSVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEODYFXPqSi/9mB6CpfR
EGBqIFVzpFiS116DE8q+AewHf6LjOI2gQ3IlKAUfAzw5vrV+obwIoIhevhMEiiaZ
VIDuxMeSNjU3kGkpFXzb/gzVk79p/G85ZTfukxKCO5s+NU7C3VKxxp+OWbmxPgQO
1UxtxyeLk4NZE0MwKSfhDZXbBLUgjovzogNNbjjhsT01g5MfoR71wUN17NBf5uGE
RuLTU2+o852hGuzdrzvBDTQuktTkdKBXDS8ubqioijTbB688g05PfFXVwLMyImDu
dArW2FEYC5NOM9dCeJb+eou3pMye6YRw+2ipGzvn+SOymtGDkbZWVuaPCEmcDKWD
PjE=
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:26 2025 by rpki-client