Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74_JjB7xzhsXooQtXeFU4wZKrfY.roa
File: 74_JjB7xzhsXooQtXeFU4wZKrfY.roa (raw, json)
Hash identifier: o0vZ6+oP8GlgYxiWIxJFz9D3mMsr0WbWCcRtQavFD+g=
Subject key identifier: EF:8F:C9:8C:1E:F1:CE:1B:17:A2:84:2D:5D:E1:54:E3:06:4A:AD:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C178946C043C0BB54106BCD3AE8A1DCAE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74_JjB7xzhsXooQtXeFU4wZKrfY.roa
Signing time: Tue 28 Nov 2023 20:05:21 +0000
ROA not before: Tue 28 Nov 2023 20:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:1788:5d76/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:89:46:c0:43:c0:bb:54:10:6b:cd:3a:e8:a1:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 20:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8fc98c1ef1ce1b17a2842d5de154e3064aadf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:74:f2:33:05:42:46:bb:92:3a:f9:36:57:
62:e2:69:c9:e6:f9:2b:36:ad:6e:27:97:b0:d8:f0:
d7:d1:31:a2:e9:8b:89:77:3d:50:e2:e1:05:b8:0c:
45:f8:2f:ee:4d:46:fe:98:86:c1:01:6d:36:28:9e:
02:7e:c7:30:87:1d:e0:d7:d1:7c:ee:b5:07:b0:c7:
a9:17:62:b7:aa:f4:8a:17:6a:2f:98:93:56:d0:63:
ea:77:8f:8b:79:71:de:30:42:41:a9:d7:77:ab:d4:
f8:c9:56:79:8d:bd:66:f4:7b:2f:7d:bd:73:40:03:
bd:a3:5b:97:bf:61:85:9a:d8:97:44:70:ec:bb:09:
f4:b7:d7:36:34:e0:4c:34:3d:b6:df:42:2a:c2:1b:
de:ad:d1:3b:6f:40:4a:b8:b7:0f:a1:5d:00:2e:3b:
34:ff:df:30:a3:04:bb:7e:c0:38:d3:72:a0:ee:f7:
da:67:2d:d7:de:8a:24:b8:4d:29:c7:6f:8d:da:c0:
2c:67:6f:90:ba:50:e1:c2:34:fc:15:a4:14:00:70:
1d:3a:5a:8e:b3:bc:9a:44:6d:24:0d:2e:cc:9e:b8:
ac:ee:35:36:5f:77:fa:d3:90:e7:60:5c:6f:4e:7e:
c0:fa:2b:40:ac:0d:aa:61:61:d3:d4:37:73:e0:93:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:C9:8C:1E:F1:CE:1B:17:A2:84:2D:5D:E1:54:E3:06:4A:AD:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74_JjB7xzhsXooQtXeFU4wZKrfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:48:fe:95:71:15:75:d2:cf:bc:72:09:e9:eb:a7:bb:f7:07:
2b:c2:31:9c:82:7a:c6:25:04:bd:8f:c6:41:3e:22:e9:3d:c3:
90:b2:71:36:21:70:aa:b6:82:d5:27:f4:64:d4:36:5c:68:fb:
55:d6:e3:f5:a4:55:37:11:96:21:e3:2a:0f:17:60:d5:a5:50:
32:c1:9b:e8:9f:51:4a:e7:fe:14:9a:83:09:7f:d1:fc:78:a2:
16:47:fc:2f:49:43:a8:fc:63:f8:f1:61:31:86:ae:09:3f:ea:
c8:22:08:90:5b:92:cf:3c:5a:10:59:46:ed:92:f7:d8:ea:09:
60:d0:63:53:da:71:42:10:ee:85:86:ee:f5:af:da:3c:af:fd:
46:f8:97:9f:16:2f:fc:5c:0e:71:6a:31:e5:3f:21:49:8e:d3:
d2:29:1c:8d:5a:de:7d:a5:32:c6:2f:da:6c:bb:c7:af:e4:47:
99:23:a9:28:5d:6d:f7:da:df:c3:9c:4b:58:8a:d1:6b:7c:8b:
e7:08:82:aa:85:e4:69:5c:9e:7f:b4:50:43:d6:70:01:ae:c2:
de:a8:1f:42:db:8b:34:9c:0e:a9:d4:9a:65:a1:93:ee:fe:7c:
b9:2b:b6:a1:9e:a6:a5:ee:ed:d5:b4:d7:6c:d1:65:e3:ce:bd:
61:af:c2:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwXiUbAQ8C7VBBrzTroodyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MjAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjhmYzk4YzFlZjFjZTFiMTdhMjg0MmQ1ZGUxNTRlMzA2NGFhZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlR08jMFQka7kjr5Nldi4mnJ5vkr
Nq1uJ5ew2PDX0TGi6YuJdz1Q4uEFuAxF+C/uTUb+mIbBAW02KJ4Cfscwhx3g19F8
7rUHsMepF2K3qvSKF2ovmJNW0GPqd4+LeXHeMEJBqdd3q9T4yVZ5jb1m9Hsvfb1z
QAO9o1uXv2GFmtiXRHDsuwn0t9c2NOBMND2230IqwhverdE7b0BKuLcPoV0ALjs0
/98wowS7fsA403Kg7vfaZy3X3ookuE0px2+N2sAsZ2+QulDhwjT8FaQUAHAdOlqO
s7yaRG0kDS7Mnris7jU2X3f605DnYFxvTn7A+itArA2qYWHT1Ddz4JONqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO+PyYwe8c4bF6KELV3hVOMGSq32MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNzRfSmpCN3h6aHNYb29RdFhlRlU0d1pLcmZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIpI/pVxFXXSz7xyCenr
p7v3ByvCMZyCesYlBL2PxkE+Iuk9w5CycTYhcKq2gtUn9GTUNlxo+1XW4/WkVTcR
liHjKg8XYNWlUDLBm+ifUUrn/hSagwl/0fx4ohZH/C9JQ6j8Y/jxYTGGrgk/6sgi
CJBbks88WhBZRu2S99jqCWDQY1PacUIQ7oWG7vWv2jyv/Ub4l58WL/xcDnFqMeU/
IUmO09IpHI1a3n2lMsYv2my7x6/kR5kjqShdbffa38OcS1iK0Wt8i+cIgqqF5Glc
nn+0UEPWcAGuwt6oH0LbizScDqnUmmWhk+7+fLkrtqGepqXu7dW012zRZePOvWGv
wjA=
-----END CERTIFICATE-----
Generated at Sun May 11 18:58:02 2025 by rpki-client