Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jB5qV9UVbvJICSBJMT_21ulSFQk.roa
File: jB5qV9UVbvJICSBJMT_21ulSFQk.roa (raw, json)
Hash identifier: tVRRtRnIrSWidnezQReXdVfijUSDgavR97rwELVY0nQ=
Subject key identifier: 8C:1E:6A:57:D5:15:6E:F2:48:09:20:49:31:3F:F6:D6:E9:52:15:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858CC3381C3A5DEA0DA88D4238CAF2EF4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jB5qV9UVbvJICSBJMT_21ulSFQk.roa
Signing time: Sat 07 Jan 2023 15:04:42 +0000
ROA not before: Sat 07 Jan 2023 15:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:8cc2:b468/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:c3:38:1c:3a:5d:ea:0d:a8:8d:42:38:ca:f2:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 15:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c1e6a57d5156ef248092049313ff6d6e9521509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:33:a8:2a:5d:70:8f:69:02:dc:9b:28:c3:
95:e1:ad:7d:68:23:30:fa:01:0c:6e:bb:b2:f6:c5:
5c:28:90:c1:98:ee:54:5d:59:35:ba:7b:d9:3e:84:
0a:df:92:11:bd:fc:22:e5:9a:e5:ff:72:fa:f6:86:
41:69:2e:57:6d:ff:3b:e3:a7:08:7f:0d:73:5a:1b:
de:82:6b:0b:f4:81:c9:b5:9a:b3:75:ff:36:40:cc:
c4:b0:5e:aa:3b:91:b7:26:9b:97:eb:e2:33:81:69:
09:74:15:94:50:4e:5a:21:75:c0:28:b5:5c:f6:31:
44:fd:09:fc:0d:de:28:55:97:ae:4b:74:4f:9c:ac:
5b:86:cf:30:47:49:e7:89:90:35:7b:86:cf:8d:8e:
1e:c0:8d:02:77:7a:2d:38:47:74:c5:1b:d8:13:be:
ab:a8:87:f1:96:26:da:a8:e9:1e:4b:26:af:3b:eb:
4c:a0:d9:1b:48:e7:6b:f3:5b:68:6c:e9:d0:3d:a3:
82:2d:c9:1a:c5:af:b9:fc:f2:e0:9b:95:2c:c1:04:
2e:44:cd:4d:a8:82:52:99:41:35:9d:81:78:04:d9:
f4:74:9b:98:2b:9f:9b:14:e1:cc:e4:50:14:5a:51:
44:b8:e4:b6:06:cd:2f:c9:a1:40:c0:c4:c8:45:fa:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1E:6A:57:D5:15:6E:F2:48:09:20:49:31:3F:F6:D6:E9:52:15:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jB5qV9UVbvJICSBJMT_21ulSFQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:ba:e6:f5:88:64:43:02:08:47:29:66:f6:4f:28:cb:d3:de:
67:b8:cb:1a:85:af:96:7c:db:2b:e9:fb:1a:8d:55:82:01:8a:
fe:90:d8:ca:f7:4a:88:05:c4:2c:6a:bf:10:a0:38:a3:e8:d8:
b2:1b:c7:18:3b:e7:24:c6:5e:f4:31:0d:59:75:76:a0:9f:e4:
6f:c2:7a:3c:e1:31:4e:b1:dd:6f:d1:9a:36:e7:7b:27:b3:d6:
5d:59:fb:8e:e9:73:10:2c:b1:b1:88:2f:1e:1b:74:e8:56:87:
c7:52:ea:f0:0c:c4:80:1e:72:bf:da:f2:bd:f5:2e:d0:fd:14:
af:9d:6c:6b:1d:38:d7:d1:81:80:6b:3c:76:bb:f2:6d:3a:aa:
33:86:94:0f:9d:07:05:99:e7:b8:9b:fd:0c:10:c0:4b:5a:e8:
5b:5c:e6:01:ca:f2:c7:58:2a:0a:5c:c8:4f:88:ec:ba:a4:91:
ba:82:af:25:21:39:91:8f:ae:42:a8:9c:25:79:35:8d:8d:22:
5c:3f:fb:c3:a6:e3:9f:aa:0a:52:4d:60:5a:21:c9:50:1b:a1:
bd:44:ac:c3:39:f6:b8:10:ac:ad:a6:71:49:98:01:1e:68:39:
71:bf:a7:82:a2:68:02:ee:32:2b:19:bd:f8:ea:6f:99:87:65:
af:bd:93:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWMwzgcOl3qDaiNQjjK8u9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA3MTUwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzFlNmE1N2Q1MTU2ZWYyNDgwOTIwNDkzMTNmZjZkNmU5NTIxNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38czqCpdcI9pAtybKMOV4a19aCMw
+gEMbruy9sVcKJDBmO5UXVk1unvZPoQK35IRvfwi5Zrl/3L69oZBaS5Xbf8746cI
fw1zWhvegmsL9IHJtZqzdf82QMzEsF6qO5G3JpuX6+IzgWkJdBWUUE5aIXXAKLVc
9jFE/Qn8Dd4oVZeuS3RPnKxbhs8wR0nniZA1e4bPjY4ewI0Cd3otOEd0xRvYE76r
qIfxlibaqOkeSyavO+tMoNkbSOdr81tobOnQPaOCLckaxa+5/PLgm5UswQQuRM1N
qIJSmUE1nYF4BNn0dJuYK5+bFOHM5FAUWlFEuOS2Bs0vyaFAwMTIRfoihQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIwealfVFW7ySAkgSTE/9tbpUhUJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvakI1cVY5VVZidkpJQ1NCSk1UXzIxdWxTRlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJC65vWIZEMCCEcpZvZP
KMvT3me4yxqFr5Z82yvp+xqNVYIBiv6Q2Mr3SogFxCxqvxCgOKPo2LIbxxg75yTG
XvQxDVl1dqCf5G/CejzhMU6x3W/Rmjbneyez1l1Z+47pcxAssbGILx4bdOhWh8dS
6vAMxIAecr/a8r31LtD9FK+dbGsdONfRgYBrPHa78m06qjOGlA+dBwWZ57ib/QwQ
wEta6Ftc5gHK8sdYKgpcyE+I7LqkkbqCryUhOZGPrkKonCV5NY2NIlw/+8Om45+q
ClJNYFohyVAbob1ErMM59rgQrK2mcUmYAR5oOXG/p4KiaALuMisZvfjqb5mHZa+9
kzs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:20 2025 by rpki-client