Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjC_JDZ_YyW4gk29KnEYewO8UrA.roa
File: bjC_JDZ_YyW4gk29KnEYewO8UrA.roa (raw, json)
Hash identifier: iFM3LAXCDv5zh7sfYO7rqW4gnG4RJA4Rf6ug9cPvGro=
Subject key identifier: 6E:30:BF:24:36:7F:63:25:B8:82:4D:BD:2A:71:18:7B:03:BC:52:B0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8B008CC9852151FD9670D46AFCACB1B8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjC_JDZ_YyW4gk29KnEYewO8UrA.roa
Signing time: Thu 21 Dec 2023 06:11:58 +0000
ROA not before: Thu 21 Dec 2023 06:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:00:8c:c9:85:21:51:fd:96:70:d4:6a:fc:ac:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 06:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e30bf24367f6325b8824dbd2a71187b03bc52b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:4e:00:cd:43:3a:93:3f:a0:37:9a:33:6c:
e6:c1:bc:ff:3a:5a:80:ea:60:94:0d:75:12:c3:7f:
2b:ea:f3:a8:62:c0:f5:a2:8e:d6:8d:36:42:2c:3f:
bb:9f:f9:49:bf:df:c0:38:fd:10:28:35:59:9f:da:
2c:be:66:f2:ed:b8:ee:9e:83:74:95:b4:12:37:25:
94:7d:bf:70:3a:b7:2d:b2:3b:57:df:40:77:92:f0:
ce:60:e2:de:59:fd:50:54:70:f0:b6:8e:75:4d:89:
b6:78:76:63:cc:0a:d7:e0:b9:eb:46:b5:4d:a4:7d:
97:9e:5a:f1:d2:ce:7b:b8:16:ca:d3:15:ab:e1:ad:
7c:43:ba:2b:2b:ca:ca:cc:ce:01:95:05:01:9f:fb:
a2:24:db:a3:96:8f:9a:ef:94:eb:ce:75:18:21:d6:
61:92:c7:c7:a6:db:de:f8:28:17:8d:b4:96:f6:d9:
88:ac:6c:93:9b:b1:ee:f5:97:27:0c:e0:15:fa:d6:
d9:50:67:34:31:8e:25:a4:bc:69:0e:4b:f5:62:ce:
ff:bf:cb:f2:e2:47:66:80:e7:61:7e:52:8f:95:5f:
40:d9:f6:b4:c0:af:8e:17:cd:26:52:c8:1a:81:a7:
6e:4b:9a:09:a3:95:9b:09:be:dc:25:ad:f8:48:c8:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:BF:24:36:7F:63:25:B8:82:4D:BD:2A:71:18:7B:03:BC:52:B0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjC_JDZ_YyW4gk29KnEYewO8UrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:85:b1:bd:5d:02:b4:92:2b:66:15:9b:58:21:4d:36:8e:78:
2e:2a:bc:89:86:8a:2f:5e:aa:cf:17:b4:86:c4:3f:43:34:cb:
be:0d:8d:eb:62:48:6d:54:b9:dc:2f:5e:dc:01:12:a0:a3:8b:
45:8b:85:20:b0:5d:32:5f:90:aa:4d:8b:85:0f:0c:52:f2:7f:
16:d0:7d:7a:e9:da:36:01:7f:43:db:b9:dc:6d:a6:fb:72:14:
b4:f2:15:15:f3:46:fa:96:0b:23:39:77:f6:a4:b8:ea:b3:06:
56:01:43:50:cc:24:49:31:45:10:d4:c5:e5:2c:75:08:99:f8:
7f:4a:4c:0f:eb:b8:53:c7:f0:62:34:d1:9b:e8:0d:b1:22:cd:
1f:75:15:5c:c2:ba:9d:99:d2:2b:c5:8a:49:cf:b8:35:d2:d7:
e3:11:5b:ef:1e:e7:5b:01:39:53:11:10:cb:0d:89:b3:ee:19:
72:1a:84:68:d0:a3:aa:9f:41:b7:bc:39:ad:82:60:83:97:ee:
94:b2:85:df:3c:20:81:1b:ad:1e:6a:3c:22:70:2a:1e:76:32:
73:27:d6:de:78:19:04:80:be:98:9d:17:7f:c8:87:9f:44:49:
c6:51:97:c9:d1:49:63:e1:03:8a:b9:ed:a6:1f:00:1c:ae:36:
34:12:fb:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyLAIzJhSFR/ZZw1Gr8rLG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMDYxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTMwYmYyNDM2N2Y2MzI1Yjg4MjRkYmQyYTcxMTg3YjAzYmM1MmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41tOAM1DOpM/oDeaM2zmwbz/OlqA
6mCUDXUSw38r6vOoYsD1oo7WjTZCLD+7n/lJv9/AOP0QKDVZn9osvmby7bjunoN0
lbQSNyWUfb9wOrctsjtX30B3kvDOYOLeWf1QVHDwto51TYm2eHZjzArX4LnrRrVN
pH2Xnlrx0s57uBbK0xWr4a18Q7orK8rKzM4BlQUBn/uiJNujlo+a75TrznUYIdZh
ksfHptve+CgXjbSW9tmIrGyTm7Hu9ZcnDOAV+tbZUGc0MY4lpLxpDkv1Ys7/v8vy
4kdmgOdhflKPlV9A2fa0wK+OF80mUsgagaduS5oJo5WbCb7cJa34SMiY8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG4wvyQ2f2MluIJNvSpxGHsDvFKwMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYmpDX0pEWl9ZeVc0Z2syOUtuRVlld084VXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF6Fsb1dArSSK2YVm1gh
TTaOeC4qvImGii9eqs8XtIbEP0M0y74NjetiSG1UudwvXtwBEqCji0WLhSCwXTJf
kKpNi4UPDFLyfxbQfXrp2jYBf0PbudxtpvtyFLTyFRXzRvqWCyM5d/akuOqzBlYB
Q1DMJEkxRRDUxeUsdQiZ+H9KTA/ruFPH8GI00ZvoDbEizR91FVzCup2Z0ivFiknP
uDXS1+MRW+8e51sBOVMREMsNibPuGXIahGjQo6qfQbe8Oa2CYIOX7pSyhd88IIEb
rR5qPCJwKh52MnMn1t54GQSAvpidF3/Ih59EScZRl8nRSWPhA4q57aYfAByuNjQS
+6I=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:05 2025 by rpki-client