Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqdRNawUEMdLqvYIvC4-klnkHGQ.roa
File: JqdRNawUEMdLqvYIvC4-klnkHGQ.roa (raw, json)
Hash identifier: vqexGBHdAMX1RGBKW26enzAoRSljmZ4zPSVXc2wB6Es=
Subject key identifier: 26:A7:51:35:AC:14:10:C7:4B:AA:F6:08:BC:2E:3E:92:59:E4:1C:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5FAA4F59D0B50118D8CCD0BA8CDD7795
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqdRNawUEMdLqvYIvC4-klnkHGQ.roa
Signing time: Tue 12 Dec 2023 20:14:06 +0000
ROA not before: Tue 12 Dec 2023 20:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:aa:4f:59:d0:b5:01:18:d8:cc:d0:ba:8c:dd:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 20:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a75135ac1410c74baaf608bc2e3e9259e41c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:0e:20:32:34:03:ed:14:0f:e8:3f:4d:a6:
9f:51:30:34:08:78:1f:65:11:0b:3a:03:4a:e0:b6:
b6:5b:2d:e3:10:a4:8f:32:5a:60:33:49:ab:82:c6:
fb:74:f1:c3:d9:60:68:52:db:de:80:f3:bb:2c:f0:
9b:05:17:06:9d:8a:9c:f7:61:fe:19:07:6d:6d:6d:
25:c9:56:df:d3:43:d1:3a:fc:7a:fd:b8:22:13:f0:
d0:9d:ea:66:15:bb:83:d7:32:f7:1e:56:26:9f:97:
c2:16:b6:58:23:3f:16:1f:eb:a0:5b:a1:e2:b2:43:
21:a1:b9:74:49:5d:30:4d:76:fb:83:41:f6:6f:38:
7c:c8:af:89:93:59:1e:6c:a1:79:48:e0:80:61:74:
7a:3f:76:04:a6:59:87:a8:0b:25:d8:fc:b8:ce:66:
02:64:c0:18:35:e8:54:7e:52:6d:1c:86:58:e4:36:
73:97:ec:fd:d1:70:bc:6f:40:de:2f:6e:d8:57:a3:
a8:27:02:14:f4:ca:42:98:3d:af:ae:53:d9:17:3e:
c3:19:72:fa:e1:63:91:d1:7e:b3:dc:f8:8b:8b:27:
bf:71:3d:35:f3:04:48:07:84:a7:de:d1:60:ff:78:
da:9f:0a:cf:99:c8:f7:9a:82:f7:d5:4b:56:ee:bd:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:51:35:AC:14:10:C7:4B:AA:F6:08:BC:2E:3E:92:59:E4:1C:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqdRNawUEMdLqvYIvC4-klnkHGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:cb:14:44:3c:8d:0c:7f:ee:c3:77:1a:00:73:2e:e8:51:b3:
c5:06:da:25:1d:67:05:20:59:6e:d5:b0:3e:e2:62:21:66:0b:
e9:ec:63:03:fa:3a:fd:b0:51:75:c5:2e:13:ba:9b:1b:08:10:
42:92:e9:6e:78:a0:3d:97:a8:f9:57:6c:eb:41:80:6a:58:01:
8c:fe:be:db:09:57:43:49:3d:87:a5:65:9c:3e:c1:ee:53:63:
74:7c:7e:5f:67:d2:08:5d:58:41:34:32:14:94:8d:6b:06:c4:
ab:e4:fb:d1:7c:c9:d9:e7:d6:4d:26:c4:19:ee:1d:ad:84:56:
18:8b:e9:e7:b7:97:90:3e:ae:df:91:63:67:48:4b:0f:5f:f2:
25:d6:fc:5d:3c:a1:ab:8f:70:07:da:da:12:2a:12:5a:e6:0f:
92:ec:cc:09:ab:f1:18:96:8a:a7:26:db:5f:98:87:bc:16:af:
66:b7:2f:e3:56:c3:0d:f7:a1:59:13:54:01:a5:fd:45:68:33:
8e:d2:bb:af:7e:f5:6d:70:4d:2d:f0:c1:bc:c3:01:d0:c5:ff:
e5:59:82:fe:18:21:47:db:9b:c3:be:3f:a4:cf:35:57:1e:08:
52:5f:e8:f7:c4:24:fc:62:2a:97:5a:9f:f2:49:bf:a2:4e:8c:
06:9c:a7:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxfqk9Z0LUBGNjM0LqM3XeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEyMjAxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE3NTEzNWFjMTQxMGM3NGJhYWY2MDhiYzJlM2U5MjU5ZTQxYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu8OIDI0A+0UD+g/TaafUTA0CHgf
ZRELOgNK4La2Wy3jEKSPMlpgM0mrgsb7dPHD2WBoUtvegPO7LPCbBRcGnYqc92H+
GQdtbW0lyVbf00PROvx6/bgiE/DQnepmFbuD1zL3HlYmn5fCFrZYIz8WH+ugW6Hi
skMhobl0SV0wTXb7g0H2bzh8yK+Jk1kebKF5SOCAYXR6P3YEplmHqAsl2Py4zmYC
ZMAYNehUflJtHIZY5DZzl+z90XC8b0DeL27YV6OoJwIU9MpCmD2vrlPZFz7DGXL6
4WOR0X6z3PiLiye/cT018wRIB4Sn3tFg/3janwrPmcj3moL31UtW7r1x7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCanUTWsFBDHS6r2CLwuPpJZ5BxkMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSnFkUk5hd1VFTWRMcXZZSXZDNC1rbG5rSEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABPLFEQ8jQx/7sN3GgBz
LuhRs8UG2iUdZwUgWW7VsD7iYiFmC+nsYwP6Ov2wUXXFLhO6mxsIEEKS6W54oD2X
qPlXbOtBgGpYAYz+vtsJV0NJPYelZZw+we5TY3R8fl9n0ghdWEE0MhSUjWsGxKvk
+9F8ydnn1k0mxBnuHa2EVhiL6ee3l5A+rt+RY2dISw9f8iXW/F08oauPcAfa2hIq
ElrmD5LszAmr8RiWiqcm21+Yh7wWr2a3L+NWww33oVkTVAGl/UVoM47Su69+9W1w
TS3wwbzDAdDF/+VZgv4YIUfbm8O+P6TPNVceCFJf6PfEJPxiKpdan/JJv6JOjAac
p8s=
-----END CERTIFICATE-----
Generated at Tue May 13 02:19:24 2025 by rpki-client