Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jdOrI-oyBp0znYePS2UHZPMqliU.roa
File: jdOrI-oyBp0znYePS2UHZPMqliU.roa (raw, json)
Hash identifier: a++ubc9LG3Xjg16v0UZMccqbfvUKWhhhKbfaFpXZsmM=
Subject key identifier: 8D:D3:AB:23:EA:32:06:9D:33:9D:87:8F:4B:65:07:64:F3:2A:96:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018511D4BF818D7522D36E5B4AC6DBC0164F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jdOrI-oyBp0znYePS2UHZPMqliU.roa
Signing time: Wed 14 Dec 2022 18:10:33 +0000
ROA not before: Wed 14 Dec 2022 18:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:d4:bf:81:8d:75:22:d3:6e:5b:4a:c6:db:c0:16:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 18:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dd3ab23ea32069d339d878f4b650764f32a9625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:c7:b6:6c:0a:98:a2:f7:b3:c1:02:0c:39:
15:2b:be:54:fd:77:50:0f:d5:a4:67:a8:49:67:2c:
ac:64:d4:89:ae:c8:24:3e:12:2f:24:9b:40:28:06:
2d:78:38:76:12:e1:c8:61:b0:e5:7f:fe:3e:c6:a8:
93:da:db:3b:d4:ca:55:04:c9:4c:56:fa:12:6d:e5:
43:5c:ca:b8:d8:86:26:9f:9d:33:c8:69:4d:e1:57:
5d:8a:17:91:e5:35:4b:cd:27:3e:02:e6:8a:55:13:
b3:aa:4b:20:d7:0e:a3:62:77:af:27:79:dd:94:2f:
87:63:98:df:74:fa:06:99:67:64:7f:51:49:f7:fd:
ae:dd:71:0b:be:f2:a1:a7:fe:be:06:5d:b8:c9:ab:
8d:55:1b:9f:18:e3:e5:3f:30:6a:bb:df:66:0a:b3:
4d:f3:20:72:89:1f:f2:a1:d6:12:30:61:5e:4f:b6:
3f:a4:71:2a:60:3a:24:53:4e:6a:6d:3d:c5:23:0c:
2d:66:e4:97:1c:c5:9a:d6:f7:b1:20:c6:52:57:cf:
92:22:4f:06:42:6f:24:1a:b4:b5:33:8d:43:7f:50:
38:c1:7b:44:ba:e8:2a:c8:87:90:b0:c2:88:94:8e:
51:fb:a0:b3:dd:b6:7b:a9:92:e0:39:09:60:b7:86:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:AB:23:EA:32:06:9D:33:9D:87:8F:4B:65:07:64:F3:2A:96:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jdOrI-oyBp0znYePS2UHZPMqliU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:bd:e8:31:3b:f5:77:34:c9:e8:c8:a4:e3:26:2e:26:ac:aa:
76:7c:21:68:ae:45:aa:f7:1d:9a:bf:b7:a4:39:d9:db:f3:17:
29:57:11:ab:53:9d:04:a0:2c:7e:7c:33:af:08:89:b2:9c:38:
df:9d:04:01:62:cf:53:23:08:dc:ef:ac:7d:d7:9b:8c:26:e3:
6a:a4:91:73:b9:56:7e:0d:48:bb:1f:b5:e4:b1:27:c0:d9:29:
30:5e:e1:7d:b0:7e:2f:64:72:42:ab:80:1f:3a:7c:d6:92:23:
92:56:46:0e:8e:a5:69:64:84:ec:13:83:54:7e:c7:07:a2:34:
64:9f:02:7e:fa:8d:27:28:32:10:78:19:19:40:cc:1e:50:8a:
36:c2:e0:94:f5:88:63:88:a7:45:b2:a9:3c:3e:21:98:f4:2c:
55:f7:2f:bc:42:28:eb:d5:1f:20:2c:5a:ab:8c:fb:e6:ac:92:
62:f3:67:40:c7:6e:9b:72:1d:3d:50:2c:f4:7c:24:a5:29:74:
a4:6b:8f:41:b4:30:4f:e6:a1:b1:c3:b7:64:a9:e3:fa:d6:0b:
27:87:30:fe:cf:eb:08:26:dc:bd:20:ad:d7:1d:e9:12:01:0b:
fb:c2:87:d7:41:f9:8c:a8:47:3e:e9:df:4f:bc:ed:19:0d:24:
73:d2:d6:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUR1L+BjXUi025bSsbbwBZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE0MTgxMDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGQzYWIyM2VhMzIwNjlkMzM5ZDg3OGY0YjY1MDc2NGYzMmE5NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvDHtmwKmKL3s8ECDDkVK75U/XdQ
D9WkZ6hJZyysZNSJrsgkPhIvJJtAKAYteDh2EuHIYbDlf/4+xqiT2ts71MpVBMlM
VvoSbeVDXMq42IYmn50zyGlN4VddiheR5TVLzSc+AuaKVROzqksg1w6jYnevJ3nd
lC+HY5jfdPoGmWdkf1FJ9/2u3XELvvKhp/6+Bl24yauNVRufGOPlPzBqu99mCrNN
8yByiR/yodYSMGFeT7Y/pHEqYDokU05qbT3FIwwtZuSXHMWa1vexIMZSV8+SIk8G
Qm8kGrS1M41Df1A4wXtEuugqyIeQsMKIlI5R+6Cz3bZ7qZLgOQlgt4aqBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI3TqyPqMgadM52Hj0tlB2TzKpYlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvamRPckktb3lCcDB6blllUFMyVUhaUE1xbGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKe96DE79Xc0yejIpOMm
LiasqnZ8IWiuRar3HZq/t6Q52dvzFylXEatTnQSgLH58M68IibKcON+dBAFiz1Mj
CNzvrH3Xm4wm42qkkXO5Vn4NSLsfteSxJ8DZKTBe4X2wfi9kckKrgB86fNaSI5JW
Rg6OpWlkhOwTg1R+xweiNGSfAn76jScoMhB4GRlAzB5QijbC4JT1iGOIp0WyqTw+
IZj0LFX3L7xCKOvVHyAsWquM++askmLzZ0DHbptyHT1QLPR8JKUpdKRrj0G0ME/m
obHDt2Sp4/rWCyeHMP7P6wgm3L0grdcd6RIBC/vCh9dB+YyoRz7p30+87RkNJHPS
1hI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:37 2025 by rpki-client