Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jAMMgr19Y_o4NmLBbXaw_NrjKq8.roa
File: jAMMgr19Y_o4NmLBbXaw_NrjKq8.roa (raw, json)
Hash identifier: pYcE1tx2+67L5yiTa4XWtch1yZldJlfIkyXAE0j7x3U=
Subject key identifier: 8C:03:0C:82:BD:7D:63:FA:38:36:62:C1:6D:76:B0:FC:DA:E3:2A:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE70AB8D70434B2CFD7CFE90143332AD7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jAMMgr19Y_o4NmLBbXaw_NrjKq8.roa
Signing time: Sun 19 Nov 2023 10:05:21 +0000
ROA not before: Sun 19 Nov 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:e709:d7dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:0a:b8:d7:04:34:b2:cf:d7:cf:e9:01:43:33:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c030c82bd7d63fa383662c16d76b0fcdae32aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:3b:c4:c0:4b:a0:c6:e5:2a:0c:e6:d5:2d:
04:3d:4c:04:a0:1a:a0:6a:63:9e:cc:eb:44:d4:ff:
a2:a2:4e:ca:94:15:c9:c3:99:fb:58:e2:79:d5:be:
ec:40:14:7f:26:aa:d7:32:8f:3d:9f:e8:80:f1:b4:
c6:d3:92:3f:2c:4c:cf:07:4a:be:e0:bb:ff:03:fa:
7d:39:44:44:8f:08:88:7a:39:84:8d:8d:4a:16:fc:
84:55:46:7e:32:77:c1:ed:93:47:03:5a:69:57:f9:
98:b8:38:bd:96:3f:61:c8:9e:1b:c3:21:9e:25:f2:
b7:a8:3d:e5:c8:f0:56:f0:f2:29:62:6c:f2:89:45:
64:52:6f:b4:fd:33:28:cf:75:94:5c:d0:22:c8:d5:
de:c1:31:1e:90:2f:03:8f:63:83:3e:68:a8:0f:e5:
73:2c:b3:41:8e:0e:ab:fc:de:03:2a:49:f3:ae:b6:
88:a0:e5:05:91:5c:62:14:7f:e9:6f:b9:30:48:02:
2a:be:b4:38:ed:fb:7b:2a:8d:6d:8b:6c:5b:a7:60:
8c:a9:43:1e:1d:be:23:ac:9d:05:84:db:a3:52:35:
e2:cd:30:bf:d0:96:e0:b1:c3:4e:c1:21:e1:97:fe:
13:f9:c9:50:20:cb:fb:be:a9:1e:0f:ff:be:0b:14:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:0C:82:BD:7D:63:FA:38:36:62:C1:6D:76:B0:FC:DA:E3:2A:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jAMMgr19Y_o4NmLBbXaw_NrjKq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:b0:be:72:82:5e:46:18:2a:9b:30:84:6b:50:fd:ef:e3:1c:
4c:85:04:fb:72:de:51:00:75:8f:52:8b:17:53:8b:ca:3f:65:
db:22:a0:b0:d9:c9:70:6a:8f:d5:38:39:10:01:12:8f:54:24:
51:41:19:d3:5c:2f:91:34:4c:a3:2c:27:7e:b1:0d:ec:56:18:
a5:cd:ce:49:85:04:1c:40:62:00:14:72:de:3c:43:5e:3e:8b:
7e:6c:89:e1:c0:68:5f:3b:3d:41:d9:a2:f1:64:94:04:8e:fe:
b5:cb:da:35:1b:e7:0a:ce:dd:b5:31:de:ad:23:2e:75:b4:18:
77:9a:d5:3b:4a:e4:8c:31:31:c2:a9:e5:93:21:8b:78:34:c4:
69:47:ad:2e:7e:0e:6a:da:5c:56:2c:4a:d6:93:89:06:14:bf:
b9:d2:3f:33:23:1f:78:a0:a6:3d:ac:c7:bb:2a:95:70:5f:35:
2f:43:90:34:79:16:cd:d3:c2:82:fb:70:71:e5:84:2a:0f:e0:
27:a2:d5:e6:88:d1:b2:b8:b6:7d:c8:b5:cb:dd:71:88:18:68:
7d:c9:ce:14:65:46:b2:33:1f:bc:69:e2:a2:f2:41:5b:fc:f7:
57:73:44:16:7c:52:6b:25:c9:b5:70:9c:9f:c4:ee:bd:a4:3f:
0a:aa:0f:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvnCrjXBDSyz9fP6QFDMyrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE5MTAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzAzMGM4MmJkN2Q2M2ZhMzgzNjYyYzE2ZDc2YjBmY2RhZTMyYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQE7xMBLoMblKgzm1S0EPUwEoBqg
amOezOtE1P+iok7KlBXJw5n7WOJ51b7sQBR/JqrXMo89n+iA8bTG05I/LEzPB0q+
4Lv/A/p9OUREjwiIejmEjY1KFvyEVUZ+MnfB7ZNHA1ppV/mYuDi9lj9hyJ4bwyGe
JfK3qD3lyPBW8PIpYmzyiUVkUm+0/TMoz3WUXNAiyNXewTEekC8Dj2ODPmioD+Vz
LLNBjg6r/N4DKknzrraIoOUFkVxiFH/pb7kwSAIqvrQ47ft7Ko1ti2xbp2CMqUMe
Hb4jrJ0FhNujUjXizTC/0JbgscNOwSHhl/4T+clQIMv7vqkeD/++CxQxwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIwDDIK9fWP6ODZiwW12sPza4yqvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvakFNTWdyMTlZX280Tm1MQmJYYXdfTnJqS3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB+wvnKCXkYYKpswhGtQ
/e/jHEyFBPty3lEAdY9SixdTi8o/ZdsioLDZyXBqj9U4ORABEo9UJFFBGdNcL5E0
TKMsJ36xDexWGKXNzkmFBBxAYgAUct48Q14+i35sieHAaF87PUHZovFklASO/rXL
2jUb5wrO3bUx3q0jLnW0GHea1TtK5IwxMcKp5ZMhi3g0xGlHrS5+DmraXFYsStaT
iQYUv7nSPzMjH3igpj2sx7sqlXBfNS9DkDR5Fs3TwoL7cHHlhCoP4Cei1eaI0bK4
tn3ItcvdcYgYaH3JzhRlRrIzH7xp4qLyQVv891dzRBZ8UmslybVwnJ/E7r2kPwqq
Dws=
-----END CERTIFICATE-----
Generated at Mon May 12 04:17:39 2025 by rpki-client