Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JVe-aLTZFCzW7PV4DlVWqWuDkJ4.roa
File: JVe-aLTZFCzW7PV4DlVWqWuDkJ4.roa (raw, json)
Hash identifier: Ime9uiBc0y/5FhXLKsZkLycrgLAU83wyNkFI6ydXpMo=
Subject key identifier: 25:57:BE:68:B4:D9:14:2C:D6:EC:F5:78:0E:55:56:A9:6B:83:90:9E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C99FF5B90B4A2D62C2C0B04DBFC46F498
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JVe-aLTZFCzW7PV4DlVWqWuDkJ4.roa
Signing time: Sun 24 Dec 2023 04:04:58 +0000
ROA not before: Sun 24 Dec 2023 04:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:99ff:25dc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:ff:5b:90:b4:a2:d6:2c:2c:0b:04:db:fc:46:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 04:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2557be68b4d9142cd6ecf5780e5556a96b83909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:2a:97:88:35:1d:89:ae:5f:07:5c:1d:ee:
a6:df:e3:d3:04:d6:16:ee:33:ae:bb:c7:b2:de:0b:
c9:ce:3b:de:0e:7c:d2:b4:0a:6a:e3:d2:26:98:2b:
85:38:b0:ea:ae:94:c3:43:57:9e:3d:fb:c1:69:b6:
41:a3:ff:af:0f:90:bf:3c:1f:cd:91:f7:e5:39:7c:
eb:17:5b:f0:db:b5:f2:a1:08:22:34:ab:cb:20:8c:
50:01:32:c8:97:e3:4a:2d:b9:b1:2c:db:b7:4b:ed:
78:80:da:24:08:f0:73:9a:12:8f:e5:58:5a:87:e8:
8c:0c:d8:27:96:f8:35:c4:83:2e:47:1f:6e:10:4a:
1f:b1:90:71:16:99:5a:c0:a5:e0:e7:be:20:80:fd:
d8:27:01:2e:3c:98:d9:da:2d:a2:c5:11:42:da:24:
fc:88:90:d3:41:9e:f9:95:c9:17:2d:75:c6:46:74:
53:25:d5:73:f4:93:75:7d:19:d2:dc:a2:34:4e:b0:
fe:82:b2:63:bd:5c:75:ca:3b:9d:01:c0:bb:02:ba:
b9:83:0b:3a:50:8f:5c:e0:71:22:a1:68:78:74:55:
4b:2e:c3:57:06:09:f4:8c:47:10:40:61:8a:5b:da:
ef:34:bf:ce:a4:1e:d4:26:72:1f:08:75:26:37:9c:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:BE:68:B4:D9:14:2C:D6:EC:F5:78:0E:55:56:A9:6B:83:90:9E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JVe-aLTZFCzW7PV4DlVWqWuDkJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:29:c4:05:ef:b4:fc:16:c7:6c:5f:16:d8:47:79:a4:3a:1b:
e5:3d:59:57:66:1e:c0:55:8c:4e:80:ed:77:f9:12:c3:20:81:
ef:4e:20:f2:d5:8a:ef:4e:56:e4:65:a5:2b:63:be:53:c6:c4:
1c:d0:03:1c:f5:ae:22:2b:b4:5c:4a:fe:3c:15:74:a1:c0:d3:
23:ce:5a:75:f0:cf:7f:21:5a:0a:28:fc:53:54:d2:9b:cb:27:
77:89:ef:a0:5b:e7:81:c7:6f:65:f3:b7:73:7d:74:bd:ff:fa:
24:93:50:54:3f:ba:2a:08:2b:71:61:38:66:7c:4f:b5:81:58:
ff:86:ee:98:2c:d2:a2:6f:06:7d:c6:e4:ca:f1:ae:64:22:fa:
d7:1e:87:46:63:08:d9:87:35:a3:3e:a5:15:3b:04:d2:46:16:
7e:55:e5:01:0b:19:2e:4e:dd:0d:34:f0:cb:fb:9f:04:25:0a:
cc:ce:24:fe:86:58:9a:a1:66:fd:12:9d:18:11:97:d6:76:0c:
22:18:73:cf:5f:59:69:04:59:58:f0:dc:83:d4:22:ea:c8:6c:
92:a3:27:18:0a:ae:e7:89:c3:1d:89:0d:c4:73:24:fd:c0:9f:
1a:32:a5:dd:ab:e0:e1:d0:63:77:c0:51:05:78:07:33:8b:1f:
a9:60:1e:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyZ/1uQtKLWLCwLBNv8RvSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI0MDQwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTU3YmU2OGI0ZDkxNDJjZDZlY2Y1NzgwZTU1NTZhOTZiODM5MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoecql4g1HYmuXwdcHe6m3+PTBNYW
7jOuu8ey3gvJzjveDnzStApq49ImmCuFOLDqrpTDQ1eePfvBabZBo/+vD5C/PB/N
kfflOXzrF1vw27XyoQgiNKvLIIxQATLIl+NKLbmxLNu3S+14gNokCPBzmhKP5Vha
h+iMDNgnlvg1xIMuRx9uEEofsZBxFplawKXg574ggP3YJwEuPJjZ2i2ixRFC2iT8
iJDTQZ75lckXLXXGRnRTJdVz9JN1fRnS3KI0TrD+grJjvVx1yjudAcC7Arq5gws6
UI9c4HEioWh4dFVLLsNXBgn0jEcQQGGKW9rvNL/OpB7UJnIfCHUmN5wqTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCVXvmi02RQs1uz1eA5VVqlrg5CeMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSlZlLWFMVFpGQ3pXN1BWNERsVldxV3VEa0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADwpxAXvtPwWx2xfFthH
eaQ6G+U9WVdmHsBVjE6A7Xf5EsMgge9OIPLViu9OVuRlpStjvlPGxBzQAxz1riIr
tFxK/jwVdKHA0yPOWnXwz38hWgoo/FNU0pvLJ3eJ76Bb54HHb2Xzt3N9dL3/+iST
UFQ/uioIK3FhOGZ8T7WBWP+G7pgs0qJvBn3G5MrxrmQi+tceh0ZjCNmHNaM+pRU7
BNJGFn5V5QELGS5O3Q008Mv7nwQlCszOJP6GWJqhZv0SnRgRl9Z2DCIYc89fWWkE
WVjw3IPUIurIbJKjJxgKrueJwx2JDcRzJP3Anxoypd2r4OHQY3fAUQV4BzOLH6lg
Hh8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:26 2025 by rpki-client