Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jzMceDMzxdZ082EnnuCnB4O1RRw.roa
File: jzMceDMzxdZ082EnnuCnB4O1RRw.roa (raw, json)
Hash identifier: YMb36dfjuasn73YOq9nOpmgyC1Zg2lVp2vkG8XiO5V4=
Subject key identifier: 8F:33:1C:78:33:33:C5:D6:74:F3:61:27:9E:E0:A7:07:83:B5:45:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BB1A2E8057361813D899EF5DFB53549D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jzMceDMzxdZ082EnnuCnB4O1RRw.roa
Signing time: Tue 07 Mar 2023 08:05:00 +0000
ROA not before: Tue 07 Mar 2023 08:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:bb19:600d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:1a:2e:80:57:36:18:13:d8:99:ef:5d:fb:53:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 08:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f331c783333c5d674f361279ee0a70783b5451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:9e:74:74:28:ea:d5:80:ce:88:d8:af:92:
9d:4a:18:e2:17:4b:4d:e4:95:b5:c3:ae:88:a8:e5:
fb:8c:26:c2:ab:db:a1:54:e9:49:0d:9b:2f:74:c7:
20:1f:22:27:63:0b:39:7a:6a:d4:94:d2:44:44:2f:
f9:75:62:db:06:23:64:77:68:47:78:27:29:80:f8:
6b:da:3a:4d:86:9c:e2:fb:02:7b:3b:be:dd:f9:32:
b8:68:8f:ae:09:2f:5e:c9:7d:48:ff:92:16:3d:d3:
d0:40:45:bf:a6:40:c9:5b:25:56:d9:2a:71:f8:04:
b7:80:0a:97:bd:6e:97:7a:2a:a7:ed:f9:b8:49:3d:
ab:86:54:5b:13:e0:52:c1:32:50:42:94:6d:1e:51:
71:a4:d9:fa:76:93:46:db:a1:ff:af:f7:0f:64:91:
a0:48:cd:cc:3d:24:a4:39:d0:46:0e:d9:6b:36:47:
8d:85:7d:03:4e:3d:0d:da:ea:89:13:ef:35:62:71:
90:f0:b2:34:c3:2a:f2:03:f1:ab:cb:0e:46:c1:d9:
a7:81:5d:89:c4:dc:f9:e8:e0:62:b3:81:f2:57:f0:
a4:cb:5a:4b:4e:53:a4:e2:da:3f:96:29:a4:d0:de:
f0:07:aa:15:0b:c2:53:5b:df:2b:fb:a7:2d:fb:81:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:33:1C:78:33:33:C5:D6:74:F3:61:27:9E:E0:A7:07:83:B5:45:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jzMceDMzxdZ082EnnuCnB4O1RRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:3b:6d:47:78:28:8f:d6:0f:53:0d:b3:ea:88:fc:99:5d:6b:
0d:a9:a2:d4:ca:ab:d2:56:8b:6c:c8:c4:6e:a7:9e:fb:02:89:
6b:cf:14:f1:72:e6:73:2a:f2:d3:14:c1:d8:6c:50:64:f6:32:
5e:0e:c7:59:34:41:70:e3:76:ff:49:1a:39:64:2b:0b:39:41:
20:c5:64:a1:a2:99:3c:6a:b2:5e:51:d3:60:02:32:2d:45:fd:
d8:1c:45:ad:cd:1f:15:24:dc:1e:29:c0:de:da:89:08:ea:1e:
fe:99:56:ff:9b:ce:e2:44:43:13:cb:ef:4a:20:79:c8:a6:4d:
4c:9e:8c:bc:75:d7:dd:05:52:89:b2:68:24:7d:92:19:e6:47:
ae:31:54:88:fc:3d:f8:2c:7d:a1:81:67:a9:0a:9f:d0:97:dd:
2f:40:c0:0b:55:c8:9f:e8:d9:f2:db:fa:14:84:ee:6a:d5:e7:
2a:86:a8:2e:14:50:50:2e:ff:66:04:37:fd:48:62:07:2e:12:
91:5a:31:ab:29:75:51:e6:27:78:eb:0b:1d:04:e2:ea:12:83:
9c:0c:29:f3:d3:00:98:ac:fd:8b:c9:28:ba:e5:d5:a1:d5:1f:
b7:32:bb:72:7a:2c:1b:19:c2:de:d5:d9:d5:b7:21:cb:92:12:
ba:bd:87:b7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa7Gi6AVzYYE9iZ7137U1SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA3MDgwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjMzMWM3ODMzMzNjNWQ2NzRmMzYxMjc5ZWUwYTcwNzgzYjU0NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkmedHQo6tWAzojYr5KdShjiF0tN
5JW1w66IqOX7jCbCq9uhVOlJDZsvdMcgHyInYws5emrUlNJERC/5dWLbBiNkd2hH
eCcpgPhr2jpNhpzi+wJ7O77d+TK4aI+uCS9eyX1I/5IWPdPQQEW/pkDJWyVW2Spx
+AS3gAqXvW6Xeiqn7fm4ST2rhlRbE+BSwTJQQpRtHlFxpNn6dpNG26H/r/cPZJGg
SM3MPSSkOdBGDtlrNkeNhX0DTj0N2uqJE+81YnGQ8LI0wyryA/Gryw5GwdmngV2J
xNz56OBis4HyV/Cky1pLTlOk4to/limk0N7wB6oVC8JTW98r+6ct+4E5NQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI8zHHgzM8XWdPNhJ57gpweDtUUcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvanpNY2VETXp4ZFowODJFbm51Q25CNE8xUlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE07bUd4KI/WD1MNs+qI
/Jldaw2potTKq9JWi2zIxG6nnvsCiWvPFPFy5nMq8tMUwdhsUGT2Ml4Ox1k0QXDj
dv9JGjlkKws5QSDFZKGimTxqsl5R02ACMi1F/dgcRa3NHxUk3B4pwN7aiQjqHv6Z
Vv+bzuJEQxPL70ogecimTUyejLx1190FUomyaCR9khnmR64xVIj8PfgsfaGBZ6kK
n9CX3S9AwAtVyJ/o2fLb+hSE7mrV5yqGqC4UUFAu/2YEN/1IYgcuEpFaMaspdVHm
J3jrCx0E4uoSg5wMKfPTAJis/YvJKLrl1aHVH7cyu3J6LBsZwt7V2dW3IcuSErq9
h7c=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:20 2025 by rpki-client