Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JUawdFNQv5Gc9lBVMt0VKb99Jkw.roa
File: JUawdFNQv5Gc9lBVMt0VKb99Jkw.roa (raw, json)
Hash identifier: i7yTZ4+Tis4tFo0saPHhgJ5roQuiMFDCYZRZYGtL8lQ=
Subject key identifier: 25:46:B0:74:53:50:BF:91:9C:F6:50:55:32:DD:15:29:BF:7D:26:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B058E2755C470168A9DEAC12C3A576BAE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JUawdFNQv5Gc9lBVMt0VKb99Jkw.roa
Signing time: Fri 06 Oct 2023 15:14:44 +0000
ROA not before: Fri 06 Oct 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:8e:27:55:c4:70:16:8a:9d:ea:c1:2c:3a:57:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2546b0745350bf919cf6505532dd1529bf7d264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:be:cd:60:65:c4:ba:cd:43:47:a7:d7:e4:
c9:57:6c:7e:f6:8e:df:83:47:8c:ef:2a:a0:e2:5a:
5d:b7:40:48:aa:f0:44:0e:ef:df:4b:ca:91:4a:61:
e4:f3:bd:2f:09:28:02:91:1f:34:dc:93:d8:a4:ee:
47:cc:c1:19:70:40:1f:f4:7e:fd:83:fa:70:64:74:
ba:0b:16:20:ab:44:25:1d:63:21:64:93:e2:25:10:
3f:ba:2b:f2:6b:5e:36:c8:29:cc:df:37:88:ae:96:
b1:62:96:ef:b6:64:95:39:d6:28:b3:e4:d4:a0:a7:
4b:5d:58:ed:c5:e6:08:28:bb:5e:86:55:a3:1f:39:
65:2b:07:c1:b9:d3:1c:4e:80:e8:4a:ab:2c:ff:c6:
a8:be:de:37:7a:05:88:a2:4a:20:21:41:c0:58:19:
d0:25:48:81:98:af:fe:0f:2d:f3:f3:9a:f9:39:99:
54:72:bb:11:24:5f:79:0a:e1:e0:95:d3:f5:5f:f7:
bd:81:44:a6:b5:f7:65:a9:e9:12:e1:f1:35:1f:ec:
db:92:c3:b0:42:1f:97:b4:55:d6:82:f9:b7:fa:fd:
a0:f3:61:44:18:d7:b0:92:a0:5f:21:cf:55:02:da:
a1:cd:ac:a0:f7:fe:76:22:6e:d8:32:ad:49:7a:f0:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:B0:74:53:50:BF:91:9C:F6:50:55:32:DD:15:29:BF:7D:26:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JUawdFNQv5Gc9lBVMt0VKb99Jkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:71:22:e2:47:13:4c:38:6e:62:2a:7d:dd:08:d1:c1:a3:c9:
f6:80:f6:45:c6:b2:1a:3a:5a:6c:10:48:36:c1:6b:ce:2d:26:
88:6e:87:55:a7:fc:41:1b:82:e4:04:5e:f1:1a:08:67:6b:c1:
0e:e1:1b:de:6f:72:20:12:44:a7:33:c3:21:84:1f:d1:bd:3d:
79:6b:96:94:e7:2a:ee:dd:ba:a6:96:37:29:f5:11:b4:a9:e8:
e6:c7:cb:d0:bf:3c:f7:9d:5f:e8:3e:93:80:13:e6:7f:5d:b7:
00:47:14:15:c1:d9:4b:31:8c:2e:38:a6:a1:73:d7:ab:a3:47:
70:6b:82:87:6b:35:56:17:ca:5f:37:60:d9:d0:a7:72:e7:78:
57:f5:67:1f:59:fd:e3:4d:f3:3e:8c:33:78:14:2b:aa:46:66:
94:64:55:fa:01:a0:7f:ad:f2:50:4c:6a:1d:24:39:c7:f8:b2:
7a:75:2e:29:40:90:87:f1:dd:90:15:85:68:a8:ea:49:7f:8c:
cf:d5:db:0f:88:6e:b3:83:66:42:33:b3:a6:df:85:df:04:a5:
94:a3:78:86:20:0f:4c:e6:2a:e1:99:62:b5:d1:a1:fb:ba:30:
a4:cc:ab:e2:fb:38:b5:38:af:2a:0c:c9:d4:eb:f0:cd:4d:9a:
a4:1b:3e:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsFjidVxHAWip3qwSw6V2uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA2MTUxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQ2YjA3NDUzNTBiZjkxOWNmNjUwNTUzMmRkMTUyOWJmN2QyNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdO+zWBlxLrNQ0en1+TJV2x+9o7f
g0eM7yqg4lpdt0BIqvBEDu/fS8qRSmHk870vCSgCkR803JPYpO5HzMEZcEAf9H79
g/pwZHS6CxYgq0QlHWMhZJPiJRA/uivya142yCnM3zeIrpaxYpbvtmSVOdYos+TU
oKdLXVjtxeYIKLtehlWjHzllKwfBudMcToDoSqss/8aovt43egWIokogIUHAWBnQ
JUiBmK/+Dy3z85r5OZlUcrsRJF95CuHgldP1X/e9gUSmtfdlqekS4fE1H+zbksOw
Qh+XtFXWgvm3+v2g82FEGNewkqBfIc9VAtqhzayg9/52Im7YMq1JevCRUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCVGsHRTUL+RnPZQVTLdFSm/fSZMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSlVhd2RGTlF2NUdjOWxCVk10MFZLYjk5Smt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABFxIuJHE0w4bmIqfd0I
0cGjyfaA9kXGsho6WmwQSDbBa84tJohuh1Wn/EEbguQEXvEaCGdrwQ7hG95vciAS
RKczwyGEH9G9PXlrlpTnKu7duqaWNyn1EbSp6ObHy9C/PPedX+g+k4AT5n9dtwBH
FBXB2UsxjC44pqFz16ujR3BrgodrNVYXyl83YNnQp3LneFf1Zx9Z/eNN8z6MM3gU
K6pGZpRkVfoBoH+t8lBMah0kOcf4snp1LilAkIfx3ZAVhWio6kl/jM/V2w+IbrOD
ZkIzs6bfhd8EpZSjeIYgD0zmKuGZYrXRofu6MKTMq+L7OLU4ryoMydTr8M1NmqQb
PkI=
-----END CERTIFICATE-----
Generated at Mon May 12 04:05:34 2025 by rpki-client