Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JwT_FruYnCEOxSi5E5W5IhKR0D4.roa
File: JwT_FruYnCEOxSi5E5W5IhKR0D4.roa (raw, json)
Hash identifier: huqyE8k+cohy4mwzpYYYwwLqE+NghC7Mtoa5sjwR+bA=
Subject key identifier: 27:04:FF:16:BB:98:9C:21:0E:C5:28:B9:13:95:B9:22:12:91:D0:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDE0B41C28D028697F9AF45CAAEB79813
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JwT_FruYnCEOxSi5E5W5IhKR0D4.roa
Signing time: Fri 17 Nov 2023 16:09:21 +0000
ROA not before: Fri 17 Nov 2023 16:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:0b:41:c2:8d:02:86:97:f9:af:45:ca:ae:b7:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 16:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2704ff16bb989c210ec528b91395b9221291d03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:51:4b:b6:bf:7e:e8:d0:30:67:59:bd:17:
ee:a0:9f:8e:33:c1:b9:de:74:ba:30:ee:8e:36:41:
ba:c5:25:bb:3a:a1:f4:3a:b1:50:37:3b:a7:79:01:
07:cd:e2:d1:da:b8:15:4d:fd:2c:7e:c5:68:c0:fc:
0d:b0:bb:ab:b0:67:e8:f1:d1:3f:16:1f:36:29:57:
ee:42:9e:aa:c9:2c:51:87:35:0a:0b:4d:fc:dc:9f:
6f:9e:8b:92:6f:2f:4c:ca:eb:5c:c0:34:03:37:e6:
6f:38:4e:79:d6:4c:7e:98:30:8e:67:55:2c:d8:cf:
af:ae:0a:f0:26:29:33:1d:e3:a2:cd:c9:aa:f5:d4:
de:28:5e:6e:d4:9f:ef:c7:1e:d9:b3:f1:d7:9e:61:
47:1a:91:36:2f:65:38:e7:70:29:4c:9b:b7:75:3d:
76:35:b9:0a:32:32:e0:74:03:9c:7e:4e:c2:41:a1:
f1:00:f5:23:5d:11:eb:54:97:9c:7c:24:12:83:68:
b1:58:7d:d4:13:6e:44:ae:da:3c:3b:f5:ee:89:b6:
73:3d:b7:d4:c4:23:77:a4:c1:1e:76:3e:28:43:20:
82:15:93:d7:24:59:23:1a:1d:59:19:22:7a:ae:e9:
a7:e7:a8:01:c4:9e:47:38:2a:ee:91:a5:0f:d1:e3:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:FF:16:BB:98:9C:21:0E:C5:28:B9:13:95:B9:22:12:91:D0:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JwT_FruYnCEOxSi5E5W5IhKR0D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:45:75:87:2d:78:5b:a7:88:1d:83:4b:91:04:1c:ad:6c:7e:
5e:eb:cd:8f:a4:c0:72:21:6f:66:2c:cb:99:e0:cd:84:f4:57:
a7:ab:4e:1f:4b:52:f2:9f:e8:9f:23:06:19:5c:68:93:58:4f:
25:99:73:5d:ad:f8:4d:91:b5:b4:f0:ad:ce:f8:4f:03:b6:ca:
bb:72:fb:02:37:76:d9:42:15:b9:26:8d:77:6a:46:ce:2a:5b:
e6:94:aa:db:80:f4:2e:cf:21:59:7d:37:e5:45:a1:0b:36:8d:
48:f2:e2:b6:df:81:28:97:26:6d:63:55:a1:67:f5:1d:84:dc:
06:c7:95:09:65:43:7e:c4:f6:75:5d:89:bf:97:49:d9:d1:92:
e4:9f:f3:f2:ba:1b:26:1c:b6:ff:67:0c:e8:99:61:1a:0c:17:
de:b6:a7:ea:37:5a:c1:4b:b0:51:da:23:2d:d7:1d:9f:7c:be:
aa:e4:63:96:58:f2:0c:e3:07:b1:b7:2d:00:49:65:fc:fe:94:
6a:61:fb:4b:9c:22:1e:8c:9d:88:4a:ed:09:2f:c8:f4:d0:02:
b3:8b:9a:f7:94:e6:83:96:a5:a0:e4:d0:f7:0a:9c:eb:94:12:
bc:a8:2e:74:27:f0:90:ca:9e:46:0d:73:32:65:69:d9:be:fc:
4e:86:df:97
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYveC0HCjQKGl/mvRcqut5gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE3MTYwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzA0ZmYxNmJiOTg5YzIxMGVjNTI4YjkxMzk1YjkyMjEyOTFkMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlRS7a/fujQMGdZvRfuoJ+OM8G5
3nS6MO6ONkG6xSW7OqH0OrFQNzuneQEHzeLR2rgVTf0sfsVowPwNsLursGfo8dE/
Fh82KVfuQp6qySxRhzUKC0383J9vnouSby9MyutcwDQDN+ZvOE551kx+mDCOZ1Us
2M+vrgrwJikzHeOizcmq9dTeKF5u1J/vxx7Zs/HXnmFHGpE2L2U453ApTJu3dT12
NbkKMjLgdAOcfk7CQaHxAPUjXRHrVJecfCQSg2ixWH3UE25Erto8O/XuibZzPbfU
xCN3pMEedj4oQyCCFZPXJFkjGh1ZGSJ6rumn56gBxJ5HOCrukaUP0eOjZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCcE/xa7mJwhDsUouROVuSISkdA+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSndUX0ZydVluQ0VPeFNpNUU1VzVJaEtSMEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC5FdYcteFuniB2DS5EE
HK1sfl7rzY+kwHIhb2Ysy5ngzYT0V6erTh9LUvKf6J8jBhlcaJNYTyWZc12t+E2R
tbTwrc74TwO2yrty+wI3dtlCFbkmjXdqRs4qW+aUqtuA9C7PIVl9N+VFoQs2jUjy
4rbfgSiXJm1jVaFn9R2E3AbHlQllQ37E9nVdib+XSdnRkuSf8/K6GyYctv9nDOiZ
YRoMF962p+o3WsFLsFHaIy3XHZ98vqrkY5ZY8gzjB7G3LQBJZfz+lGph+0ucIh6M
nYhK7QkvyPTQArOLmveU5oOWpaDk0PcKnOuUEryoLnQn8JDKnkYNczJladm+/E6G
35c=
-----END CERTIFICATE-----
Generated at Sat May 10 13:35:45 2025 by rpki-client