Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JLCjj3MraQgMyuAKuL8zWU6rjOo.roa
File: JLCjj3MraQgMyuAKuL8zWU6rjOo.roa (raw, json)
Hash identifier: KLZoOtmiHoXeehktoJMQxMQNpx9hBLi5RlkJdQe0AcM=
Subject key identifier: 24:B0:A3:8F:73:2B:69:08:0C:CA:E0:0A:B8:BF:33:59:4E:AB:8C:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B25470F61A461FDAAD3BE6034A2CFF98F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JLCjj3MraQgMyuAKuL8zWU6rjOo.roa
Signing time: Thu 12 Oct 2023 19:04:55 +0000
ROA not before: Thu 12 Oct 2023 19:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:2546:80e4/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:47:0f:61:a4:61:fd:aa:d3:be:60:34:a2:cf:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 19:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b0a38f732b69080ccae00ab8bf33594eab8cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:d5:26:22:2e:c4:9f:45:f7:3c:37:40:24:
bd:c8:73:f9:3c:f8:ad:95:dc:40:b6:81:80:7b:e6:
1b:1f:59:98:ce:90:42:8d:28:c4:16:9f:57:d0:36:
cd:0e:e5:fa:bd:2d:73:b1:68:07:84:de:99:b4:10:
80:fe:ac:cc:f4:9b:61:16:b5:0a:f1:69:e6:df:1d:
a3:4f:3a:cc:1b:7f:08:59:18:71:96:41:1f:d9:32:
6e:4e:8c:d8:44:32:af:64:a2:4e:e1:97:d1:3e:8e:
3f:46:ac:14:e3:7a:4d:b9:e4:c0:9e:0a:6e:c0:97:
86:4a:f4:8b:ff:4b:3a:59:fc:c0:c0:29:95:ad:3a:
22:e1:f8:49:d7:4d:5e:21:1a:02:80:78:a8:0e:ac:
e4:40:56:87:fa:f0:49:01:ef:96:32:7e:e4:85:bd:
ea:88:d8:84:e8:17:7e:76:97:fa:86:44:0e:6c:b7:
44:80:28:34:f5:24:f0:d0:42:16:8d:3b:81:bb:5d:
d5:68:ca:23:2e:84:1d:bf:38:cf:3e:45:fa:2a:4b:
5e:43:55:0f:f8:da:68:3a:77:db:df:df:5a:88:2e:
f2:7f:17:2a:17:4a:a6:5e:21:b4:af:cb:bf:b0:d0:
eb:46:e6:4f:87:6e:00:bc:c3:5e:02:79:4e:0f:de:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:A3:8F:73:2B:69:08:0C:CA:E0:0A:B8:BF:33:59:4E:AB:8C:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JLCjj3MraQgMyuAKuL8zWU6rjOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:1c:d4:75:bf:29:4b:cb:fe:6c:d2:42:35:b2:94:3a:57:fb:
7f:bd:46:e7:8c:11:7a:15:f2:d3:f8:eb:60:7b:8b:2b:9b:b6:
47:7a:92:79:7c:d0:2c:06:86:3b:86:20:dd:b6:71:29:da:0b:
52:73:31:ba:9c:db:9c:28:30:38:e3:44:de:4b:02:d1:f3:ca:
09:e2:b8:cd:ca:00:d8:a6:a1:95:5b:d5:cf:8e:f9:bd:2b:33:
99:14:78:05:f1:bf:f9:d7:bf:7e:64:68:b4:f6:95:cc:2d:3d:
1d:97:86:e0:9c:c9:1e:bc:4b:84:f4:6c:f4:2b:b0:52:dc:8d:
27:82:e0:f1:9d:6c:4e:3b:07:24:ba:6d:87:72:43:79:a6:d3:
81:fd:e4:33:b1:3a:21:55:8c:3c:7a:4c:68:75:5d:13:f5:36:
dd:eb:c7:9c:34:03:21:ce:69:14:a8:37:d1:e2:8d:78:2c:25:
dc:d1:9b:39:8b:84:b9:35:19:12:fd:04:3d:42:03:09:b9:b5:
8a:ce:8a:58:e3:2e:fa:ba:1a:b9:7b:12:25:b9:57:65:78:67:
dd:aa:e3:0b:9d:fb:b8:1d:8a:40:f4:0f:66:84:76:27:8f:37:
4f:f5:e7:83:16:0d:3d:20:95:e4:13:76:1a:fa:3b:79:bb:ac:
7a:60:8b:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYslRw9hpGH9qtO+YDSiz/mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEyMTkwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGIwYTM4ZjczMmI2OTA4MGNjYWUwMGFiOGJmMzM1OTRlYWI4Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsebVJiIuxJ9F9zw3QCS9yHP5PPit
ldxAtoGAe+YbH1mYzpBCjSjEFp9X0DbNDuX6vS1zsWgHhN6ZtBCA/qzM9JthFrUK
8Wnm3x2jTzrMG38IWRhxlkEf2TJuTozYRDKvZKJO4ZfRPo4/RqwU43pNueTAngpu
wJeGSvSL/0s6WfzAwCmVrToi4fhJ101eIRoCgHioDqzkQFaH+vBJAe+WMn7khb3q
iNiE6Bd+dpf6hkQObLdEgCg09STw0EIWjTuBu13VaMojLoQdvzjPPkX6KkteQ1UP
+NpoOnfb399aiC7yfxcqF0qmXiG0r8u/sNDrRuZPh24AvMNeAnlOD95drwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCSwo49zK2kIDMrgCri/M1lOq4zqMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSkxDamozTXJhUWdNeXVBS3VMOHpXVTZyak9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAgc1HW/KUvL/mzSQjWy
lDpX+3+9RueMEXoV8tP462B7iyubtkd6knl80CwGhjuGIN22cSnaC1JzMbqc25wo
MDjjRN5LAtHzygniuM3KANimoZVb1c+O+b0rM5kUeAXxv/nXv35kaLT2lcwtPR2X
huCcyR68S4T0bPQrsFLcjSeC4PGdbE47ByS6bYdyQ3mm04H95DOxOiFVjDx6TGh1
XRP1Nt3rx5w0AyHOaRSoN9HijXgsJdzRmzmLhLk1GRL9BD1CAwm5tYrOiljjLvq6
Grl7EiW5V2V4Z92q4wud+7gdikD0D2aEdiePN0/154MWDT0gleQTdhr6O3m7rHpg
i6Y=
-----END CERTIFICATE-----
Generated at Sun May 11 17:08:23 2025 by rpki-client