Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jkZ_kDnYBFm306dstTqzNBVUe1A.roa
File: jkZ_kDnYBFm306dstTqzNBVUe1A.roa (raw, json)
Hash identifier: h/61DPdssF4eRvX9Tb6ZYv50MkICK1V3U5QRstyaFqQ=
Subject key identifier: 8E:46:7F:90:39:D8:04:59:B7:D3:A7:6C:B5:3A:B3:34:15:54:7B:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018897B131AB9AD13E8E175596E0CBEFA909
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jkZ_kDnYBFm306dstTqzNBVUe1A.roa
Signing time: Wed 07 Jun 2023 21:09:12 +0000
ROA not before: Wed 07 Jun 2023 21:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:b1:31:ab:9a:d1:3e:8e:17:55:96:e0:cb:ef:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 21:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e467f9039d80459b7d3a76cb53ab33415547b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:91:93:2f:95:3b:92:4b:50:1e:fa:ec:e3:
0b:a5:30:d0:eb:e2:27:38:a1:99:6a:47:aa:dd:c3:
df:f0:ec:37:ae:01:c0:0e:24:b7:04:2c:3c:98:78:
f1:1b:20:70:b2:4c:7c:51:75:5f:87:01:47:4f:bf:
19:8c:d6:38:5d:e5:8b:8a:7b:0c:17:de:68:99:ea:
01:e2:79:e2:df:13:e3:9a:c1:73:ca:2a:db:53:06:
77:1d:7b:e2:37:fe:11:5a:c5:4e:15:f3:60:29:86:
9f:9d:89:29:4f:be:d4:1a:a2:b3:d7:9d:e7:49:06:
be:87:0c:3d:46:28:cd:9d:bf:21:95:11:6a:70:87:
70:f0:f8:09:6e:e9:6c:75:42:70:48:a8:f4:aa:11:
f8:bd:8d:6e:32:0d:63:ed:b1:4c:69:df:6d:e7:d3:
89:e8:30:5e:87:42:a7:6f:62:d3:0b:c9:23:28:a1:
de:cd:bd:2f:10:46:86:35:b9:89:c9:29:f1:90:75:
b9:f0:28:a4:43:7b:30:11:d4:66:13:9c:0a:35:11:
ce:88:d3:ff:78:74:8c:17:0d:a7:18:a9:e1:03:bf:
a8:a2:f9:e5:fc:d6:7a:fe:28:24:4a:44:9b:1b:e2:
97:f8:4f:27:52:69:ca:e7:a6:75:2b:c4:02:52:db:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:7F:90:39:D8:04:59:B7:D3:A7:6C:B5:3A:B3:34:15:54:7B:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jkZ_kDnYBFm306dstTqzNBVUe1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:4a:b0:5f:76:44:2a:7c:1c:a3:37:c7:8f:1f:06:13:16:f2:
3f:15:9b:ae:9f:82:e1:f1:5f:89:a2:a8:5c:f9:01:31:f8:f4:
66:de:6b:62:72:74:1a:19:ec:43:7d:15:22:ff:a3:64:b5:b4:
8a:56:5f:5c:1f:96:b3:25:38:79:07:ec:1e:6d:f7:75:2e:83:
80:be:89:2a:7b:a6:85:d5:a0:fa:e9:e6:09:99:3a:6b:66:72:
31:dd:9b:04:7b:29:83:fb:7a:7d:e6:5c:23:3d:d9:fd:8a:c2:
95:dd:97:28:f8:46:3d:78:4e:1b:41:77:15:af:df:99:80:49:
f6:8e:70:27:17:20:a3:39:df:fb:bf:8e:45:68:af:9e:3f:56:
4f:d3:a8:2f:35:4f:8b:fd:b8:dd:ab:1c:f1:98:42:e8:f8:0d:
e1:32:73:a7:a8:26:ca:6c:aa:c3:4b:3c:e7:60:8f:62:f8:6a:
7b:99:86:68:00:74:30:10:ef:1b:2c:02:6f:cf:c6:a1:10:b5:
d4:79:ab:50:ba:91:03:e3:65:12:7e:31:94:05:62:45:bb:68:
ca:06:08:af:b1:74:88:e7:c9:7b:9f:6f:b4:83:05:ff:4e:21:
20:f7:f0:1f:cc:db:23:ed:49:d2:28:ed:0a:50:75:62:88:b4:
ae:dd:37:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiXsTGrmtE+jhdVluDL76kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA3MjEwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTQ2N2Y5MDM5ZDgwNDU5YjdkM2E3NmNiNTNhYjMzNDE1NTQ3YjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu42Rky+VO5JLUB767OMLpTDQ6+In
OKGZakeq3cPf8Ow3rgHADiS3BCw8mHjxGyBwskx8UXVfhwFHT78ZjNY4XeWLinsM
F95omeoB4nni3xPjmsFzyirbUwZ3HXviN/4RWsVOFfNgKYafnYkpT77UGqKz153n
SQa+hww9RijNnb8hlRFqcIdw8PgJbulsdUJwSKj0qhH4vY1uMg1j7bFMad9t59OJ
6DBeh0Knb2LTC8kjKKHezb0vEEaGNbmJySnxkHW58CikQ3swEdRmE5wKNRHOiNP/
eHSMFw2nGKnhA7+oovnl/NZ6/igkSkSbG+KX+E8nUmnK56Z1K8QCUtvE0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI5Gf5A52ARZt9OnbLU6szQVVHtQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvamtaX2tEbllCRm0zMDZkc3RUcXpOQlZVZTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFRKsF92RCp8HKM3x48f
BhMW8j8Vm66fguHxX4miqFz5ATH49Gbea2JydBoZ7EN9FSL/o2S1tIpWX1wflrMl
OHkH7B5t93Uug4C+iSp7poXVoPrp5gmZOmtmcjHdmwR7KYP7en3mXCM92f2KwpXd
lyj4Rj14ThtBdxWv35mASfaOcCcXIKM53/u/jkVor54/Vk/TqC81T4v9uN2rHPGY
Quj4DeEyc6eoJspsqsNLPOdgj2L4anuZhmgAdDAQ7xssAm/PxqEQtdR5q1C6kQPj
ZRJ+MZQFYkW7aMoGCK+xdIjnyXufb7SDBf9OISD38B/M2yPtSdIo7QpQdWKItK7d
N9A=
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:35:45 2025 by rpki-client