Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JM7D5lAJ6Jy9WDj3Af8xwndlnHs.roa
File: JM7D5lAJ6Jy9WDj3Af8xwndlnHs.roa (raw, json)
Hash identifier: AFz/vRYvg0srkwHJwGbdKIshJWuSb0Q3grJAAbhRJAU=
Subject key identifier: 24:CE:C3:E6:50:09:E8:9C:BD:58:38:F7:01:FF:31:C2:77:65:9C:7B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5C707653F96A5202218F92D21FC5F56D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JM7D5lAJ6Jy9WDj3Af8xwndlnHs.roa
Signing time: Mon 23 Oct 2023 12:09:16 +0000
ROA not before: Mon 23 Oct 2023 12:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:70:76:53:f9:6a:52:02:21:8f:92:d2:1f:c5:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 12:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cec3e65009e89cbd5838f701ff31c277659c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:bf:40:5a:57:e7:1d:2e:49:b9:84:68:9f:
5a:ff:03:78:bd:1e:cb:c0:36:0c:05:de:b1:fe:06:
b1:c5:f2:20:22:87:0b:69:a4:3a:6c:09:92:64:c6:
2d:82:c8:24:03:71:e5:c4:af:e8:d7:25:c0:a8:a4:
a2:20:12:7d:df:bc:5e:32:34:59:be:d9:2e:d5:b7:
2a:2f:bc:99:06:25:83:e3:af:83:d4:1c:3e:c3:11:
55:11:d6:7d:0e:96:ef:3f:d8:fb:4b:75:75:3e:18:
76:3c:e7:c0:a2:c3:79:97:eb:98:a8:11:11:0f:eb:
89:0d:bf:a7:20:fc:de:97:a3:42:af:0f:9a:e1:31:
f2:8f:1c:41:99:cc:c3:e7:27:c7:38:90:f8:44:b6:
1d:8a:42:cd:6d:ea:99:2c:8b:58:3a:15:a6:a2:6f:
ea:2e:1c:35:fc:b1:5c:15:0e:8a:b8:b6:4a:9f:8a:
99:ce:79:e5:43:2f:29:aa:e4:c4:6a:b0:84:9c:19:
9f:93:df:2f:34:cc:c5:91:5e:38:a9:06:5c:23:fe:
2f:7d:1a:6b:f6:a9:26:67:bc:61:18:dd:0c:a4:97:
e6:40:3d:46:90:56:48:f3:15:d4:44:ae:49:8d:68:
43:f4:58:70:0d:5d:5d:b3:a0:12:7c:70:be:df:70:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CE:C3:E6:50:09:E8:9C:BD:58:38:F7:01:FF:31:C2:77:65:9C:7B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JM7D5lAJ6Jy9WDj3Af8xwndlnHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:2f:d5:e1:1a:c0:2d:ed:83:ac:4b:ff:e6:00:70:75:4b:46:
2a:a3:cb:b8:3a:c4:e4:58:ab:5a:bd:da:02:5d:08:cf:31:cb:
20:a3:8b:f9:30:cf:f2:1e:2d:bf:ac:07:67:c4:bb:28:42:c5:
e0:ba:c0:d2:1e:65:ae:03:de:6d:54:c7:2e:9a:a5:56:44:9c:
82:b0:b8:e1:a0:f4:63:10:fe:67:ef:15:11:4d:3c:45:e0:b2:
21:9d:4d:77:bd:74:92:78:81:07:1d:e6:ca:0a:ba:c2:61:f0:
4f:31:ce:4c:b8:a9:d5:f0:c8:37:e6:3c:67:41:45:75:13:7f:
ca:03:dc:3c:29:54:16:7f:9a:f0:6e:dc:62:7b:e3:9f:05:e7:
33:fa:bd:c8:ce:42:ea:1a:1e:cd:04:b8:99:6a:e8:0b:55:40:
5e:e1:dd:a8:14:4b:e8:7a:23:84:63:9f:ad:31:6b:75:ee:cb:
9f:57:ed:b4:92:4c:41:0c:e0:1b:4c:4d:f5:88:32:e1:7f:2f:
5a:f3:cc:85:d4:5a:f8:ce:b8:4d:45:dd:6c:0c:1f:64:b1:49:
30:62:5a:09:ca:f6:9e:40:4a:af:a8:15:c9:a2:07:05:aa:c2:
57:0e:99:fe:de:7a:28:5a:de:ee:ad:c8:68:55:e6:62:aa:25:
63:9d:43:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtccHZT+WpSAiGPktIfxfVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIzMTIwOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGNlYzNlNjUwMDllODljYmQ1ODM4ZjcwMWZmMzFjMjc3NjU5YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvC/QFpX5x0uSbmEaJ9a/wN4vR7L
wDYMBd6x/gaxxfIgIocLaaQ6bAmSZMYtgsgkA3HlxK/o1yXAqKSiIBJ937xeMjRZ
vtku1bcqL7yZBiWD46+D1Bw+wxFVEdZ9DpbvP9j7S3V1Phh2POfAosN5l+uYqBER
D+uJDb+nIPzel6NCrw+a4THyjxxBmczD5yfHOJD4RLYdikLNbeqZLItYOhWmom/q
Lhw1/LFcFQ6KuLZKn4qZznnlQy8pquTEarCEnBmfk98vNMzFkV44qQZcI/4vfRpr
9qkmZ7xhGN0MpJfmQD1GkFZI8xXURK5JjWhD9FhwDV1ds6ASfHC+33BFhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCTOw+ZQCeicvVg49wH/McJ3ZZx7MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSk03RDVsQUo2Snk5V0RqM0FmOHh3bmRsbkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMov1eEawC3tg6xL/+YA
cHVLRiqjy7g6xORYq1q92gJdCM8xyyCji/kwz/IeLb+sB2fEuyhCxeC6wNIeZa4D
3m1Uxy6apVZEnIKwuOGg9GMQ/mfvFRFNPEXgsiGdTXe9dJJ4gQcd5soKusJh8E8x
zky4qdXwyDfmPGdBRXUTf8oD3DwpVBZ/mvBu3GJ7458F5zP6vcjOQuoaHs0EuJlq
6AtVQF7h3agUS+h6I4Rjn60xa3Xuy59X7bSSTEEM4BtMTfWIMuF/L1rzzIXUWvjO
uE1F3WwMH2SxSTBiWgnK9p5ASq+oFcmiBwWqwlcOmf7eeiha3u6tyGhV5mKqJWOd
QyI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:06:04 2025 by rpki-client