Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/CJUlJDy-56wu6zeQ3niPJdV4COg.roa
File: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (raw, json)
Hash identifier: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=
Subject key identifier: 08:95:25:24:3C:BE:E7:AC:2E:EB:37:90:DE:78:8F:25:D5:78:08:E8
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 019427B6008F853ADD84FA9C71AEB57632D9
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/CJUlJDy-56wu6zeQ3niPJdV4COg.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8816
IP address blocks: 193.43.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:00:8f:85:3a:dd:84:fa:9c:71:ae:b5:76:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089525243cbee7ac2eeb3790de788f25d57808e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:51:22:31:14:69:0b:97:e9:cb:0f:6b:49:
9b:79:e3:8a:03:9b:1b:b1:8c:be:28:63:f0:70:ab:
29:4d:f3:82:a6:c4:25:e8:92:93:e9:94:64:2f:1d:
2d:84:3f:a2:ec:57:6f:2b:b1:2b:87:36:9f:f3:8b:
ac:da:c1:cb:46:06:09:6f:10:ed:21:e5:5e:a2:4c:
df:bd:b6:df:18:80:c1:f2:b0:ee:83:55:8c:63:b3:
08:5d:6d:d3:de:60:cf:ab:98:f3:cc:db:d5:4c:0b:
c2:0d:80:0a:c5:9f:e9:24:d8:52:13:ae:7b:7f:36:
d1:69:e1:55:88:b0:86:cb:f3:79:a0:0c:05:46:95:
46:20:0f:b9:4c:e2:58:0c:3d:b0:76:13:8b:42:69:
c0:d2:43:1d:16:62:99:ac:27:41:e9:a2:40:f1:e9:
71:2c:c9:b3:ac:2a:96:bc:ee:44:5b:cc:e4:c9:23:
a7:30:5b:66:28:28:bb:e3:ad:db:4b:7f:4d:1a:41:
ee:b0:2f:0b:55:e7:93:8f:72:08:1e:d1:63:c3:66:
c1:a9:00:6c:a9:97:a0:3a:54:48:a3:2e:7d:35:e5:
1b:d3:62:2c:b6:69:97:39:70:74:69:f6:52:7f:96:
95:db:10:83:36:d7:22:8d:d4:cd:80:73:38:a3:c2:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:25:24:3C:BE:E7:AC:2E:EB:37:90:DE:78:8F:25:D5:78:08:E8
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/CJUlJDy-56wu6zeQ3niPJdV4COg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e5:c2:b3:9e:12:a8:9a:40:82:9c:73:80:d0:0b:5c:ba:e7:
0a:2d:44:72:30:dd:12:81:62:83:c4:eb:b7:d0:ed:77:4d:ea:
2a:73:03:8f:dc:57:a6:0c:9f:fb:c1:24:2f:67:a2:e2:5a:50:
fa:7b:67:9b:f7:e7:0f:27:93:4f:40:d5:5c:f8:e7:b8:1a:6a:
99:ff:b1:07:fb:b5:00:e0:e6:09:ba:79:96:3d:f3:fd:e2:29:
69:0a:ed:b1:a5:ce:96:ec:8c:72:7b:9a:1e:cf:51:39:62:71:
57:ea:70:9f:9b:7f:a0:4f:a0:5e:d7:74:5c:ab:09:d8:2d:b9:
8d:b3:09:a2:b3:d1:09:f3:b3:71:80:1a:be:82:7c:5d:d3:a0:
7c:b0:76:c4:1a:af:59:77:0a:3e:4d:ee:d9:36:73:b7:02:ea:
7c:c2:d0:35:4c:68:7e:ee:0d:71:f9:ec:b6:bf:4c:0d:86:25:
13:cb:bf:5e:c8:77:f2:7d:61:ac:bd:01:bb:c8:94:de:2a:91:
c3:a7:47:cd:b0:9b:28:da:82:57:68:f4:56:98:57:61:2f:b4:
34:2e:e1:96:bc:e3:88:e4:b7:86:13:ee:f2:5c:0f:3d:18:53:
c8:00:78:43:fd:57:f4:cd:48:42:82:4f:5a:88:1a:42:60:b5:
97:a6:a9:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntgCPhTrdhPqcca61djLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz
ZGNlYmYwHhcNMjUwMTAyMTU1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODk1MjUyNDNjYmVlN2FjMmVlYjM3OTBkZTc4OGYyNWQ1NzgwOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqpRIjEUaQuX6csPa0mbeeOKA5sb
sYy+KGPwcKspTfOCpsQl6JKT6ZRkLx0thD+i7FdvK7Erhzaf84us2sHLRgYJbxDt
IeVeokzfvbbfGIDB8rDug1WMY7MIXW3T3mDPq5jzzNvVTAvCDYAKxZ/pJNhSE657
fzbRaeFViLCGy/N5oAwFRpVGIA+5TOJYDD2wdhOLQmnA0kMdFmKZrCdB6aJA8elx
LMmzrCqWvO5EW8zkySOnMFtmKCi7463bS39NGkHusC8LVeeTj3IIHtFjw2bBqQBs
qZegOlRIoy59NeUb02IstmmXOXB0afZSf5aV2xCDNtcijdTNgHM4o8JLzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAiVJSQ8vuesLus3kN54jyXVeAjoMB8GA1UdIwQY
MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt
N2IzY2MyMjgyNzFkLzEvQ0pVbEpEeS01Nnd1NnplUTNuaVBKZFY0Q09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk
LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwStgMA0G
CSqGSIb3DQEBCwUAA4IBAQAt5cKznhKomkCCnHOA0AtcuucKLURyMN0SgWKDxOu3
0O13TeoqcwOP3FemDJ/7wSQvZ6LiWlD6e2eb9+cPJ5NPQNVc+Oe4GmqZ/7EH+7UA
4OYJunmWPfP94ilpCu2xpc6W7Ixye5oez1E5YnFX6nCfm3+gT6Be13RcqwnYLbmN
swmis9EJ87NxgBq+gnxd06B8sHbEGq9Zdwo+Te7ZNnO3Aup8wtA1TGh+7g1x+ey2
v0wNhiUTy79eyHfyfWGsvQG7yJTeKpHDp0fNsJso2oJXaPRWmFdhL7Q0LuGWvOOI
5LeGE+7yXA89GFPIAHhD/Vf0zUhCgk9aiBpCYLWXpqkj
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:14 2025 by rpki-client