Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfoBHQBqV1ZLwXD4WAiDCryJ6JE.roa
File: jfoBHQBqV1ZLwXD4WAiDCryJ6JE.roa (raw, json)
Hash identifier: QtTbgv62VjlCG87MwiUSAaHTo+KkaGEvT3Z/zu0hv1E=
Subject key identifier: 8D:FA:01:1D:00:6A:57:56:4B:C1:70:F8:58:08:83:0A:BC:89:E8:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862E26A44D04138B4D73C715721505E59E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfoBHQBqV1ZLwXD4WAiDCryJ6JE.roa
Signing time: Tue 07 Feb 2023 23:12:09 +0000
ROA not before: Tue 07 Feb 2023 23:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2e:26:a4:4d:04:13:8b:4d:73:c7:15:72:15:05:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 23:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dfa011d006a57564bc170f85808830abc89e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:74:30:00:2b:f8:8c:d1:da:51:e1:b2:21:
fc:7e:49:b1:b8:1f:dc:05:5d:61:06:df:48:24:ab:
c8:98:1d:59:fc:f2:35:47:11:d6:bb:21:7b:6f:1f:
f0:f3:32:38:cd:f3:17:e2:56:6c:9a:80:39:d8:37:
5b:fb:84:4c:d3:ff:bd:3f:e7:3f:a6:2e:44:db:ca:
36:8a:3a:2d:00:45:9c:ab:f5:d5:09:ba:13:3c:17:
be:76:f3:88:7b:f7:5f:70:83:1e:0c:93:ad:ee:d5:
fa:b1:3e:c4:93:6d:b4:3a:95:a1:fa:ae:4a:6f:3d:
49:58:73:6a:91:a2:0f:06:69:6e:1a:85:a7:2c:57:
54:01:70:f7:14:6b:df:68:77:d7:31:58:a7:62:ab:
32:b6:01:db:69:bd:19:07:7e:d6:cd:d8:88:ff:2c:
7f:87:cf:e6:b3:a0:93:9a:e3:bf:a9:86:d4:0f:23:
f4:1a:b5:85:3e:bf:62:b7:e2:14:d6:66:29:04:d6:
bd:14:73:52:bf:bb:b3:11:60:b2:1d:b5:a4:02:f3:
ce:be:9a:bf:c2:28:cd:c8:4b:b8:fb:fc:93:45:ef:
5d:2c:3b:80:c2:a1:b5:bd:12:24:f5:d8:3e:9e:54:
96:eb:58:f1:79:ae:ea:ed:6b:16:a2:0e:86:46:12:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:01:1D:00:6A:57:56:4B:C1:70:F8:58:08:83:0A:BC:89:E8:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jfoBHQBqV1ZLwXD4WAiDCryJ6JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:17:ad:02:f7:0d:1f:6a:37:7a:cb:bf:67:60:28:4d:13:e6:
7e:7a:67:c8:7c:f2:57:3e:09:70:55:a4:ee:f6:ad:76:3b:5a:
05:5a:6b:32:b8:2f:3a:02:92:9b:85:a4:b3:ec:eb:65:58:9c:
6c:7d:c5:ee:89:d4:b8:c8:6d:d3:fb:b8:57:6b:9d:f6:4b:51:
e9:1c:61:5b:22:05:20:89:31:17:4b:b8:d3:29:1b:74:af:82:
9e:2e:7b:6e:82:8d:df:4c:0d:ae:05:0c:7c:23:1c:76:75:b3:
ba:8b:6e:fe:27:f7:ac:a7:81:a7:8f:1b:0b:1a:59:46:a7:eb:
b7:1a:29:6a:d1:7d:69:86:ad:56:16:b5:62:d1:84:f3:a9:ed:
02:7a:88:b2:d3:ed:e6:96:84:54:66:94:13:9e:2a:3c:a1:5d:
6f:7f:12:b0:ae:95:fe:b0:6b:00:47:58:3e:92:85:49:eb:6f:
a9:e8:62:ae:44:e4:8e:d4:26:b1:e4:bf:e1:13:a8:cb:e4:7b:
69:f0:05:9b:07:b7:24:2b:4a:f3:46:95:ff:6f:ed:8e:08:2b:
73:fc:85:c5:ac:30:5b:3c:8c:25:ad:39:ea:5b:96:1b:fd:af:
d0:47:d7:1a:19:e5:d5:36:85:b1:c4:5f:5e:f1:59:b4:ef:8e:
31:df:55:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYuJqRNBBOLTXPHFXIVBeWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA3MjMxMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGZhMDExZDAwNmE1NzU2NGJjMTcwZjg1ODA4ODMwYWJjODllODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4F0MAAr+IzR2lHhsiH8fkmxuB/c
BV1hBt9IJKvImB1Z/PI1RxHWuyF7bx/w8zI4zfMX4lZsmoA52Ddb+4RM0/+9P+c/
pi5E28o2ijotAEWcq/XVCboTPBe+dvOIe/dfcIMeDJOt7tX6sT7Ek220OpWh+q5K
bz1JWHNqkaIPBmluGoWnLFdUAXD3FGvfaHfXMVinYqsytgHbab0ZB37WzdiI/yx/
h8/ms6CTmuO/qYbUDyP0GrWFPr9it+IU1mYpBNa9FHNSv7uzEWCyHbWkAvPOvpq/
wijNyEu4+/yTRe9dLDuAwqG1vRIk9dg+nlSW61jxea7q7WsWog6GRhKGSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI36AR0AaldWS8Fw+FgIgwq8ieiRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvamZvQkhRQnFWMVpMd1hENFdBaURDcnlKNkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJIXrQL3DR9qN3rLv2dg
KE0T5n56Z8h88lc+CXBVpO72rXY7WgVaazK4LzoCkpuFpLPs62VYnGx9xe6J1LjI
bdP7uFdrnfZLUekcYVsiBSCJMRdLuNMpG3Svgp4ue26Cjd9MDa4FDHwjHHZ1s7qL
bv4n96yngaePGwsaWUan67caKWrRfWmGrVYWtWLRhPOp7QJ6iLLT7eaWhFRmlBOe
KjyhXW9/ErCulf6wawBHWD6ShUnrb6noYq5E5I7UJrHkv+ETqMvke2nwBZsHtyQr
SvNGlf9v7Y4IK3P8hcWsMFs8jCWtOepblhv9r9BH1xoZ5dU2hbHEX17xWbTvjjHf
VZU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:03:17 2025 by rpki-client