Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JxksoBVceB2lTRMO1ZsQT9XZNmM.roa
File: JxksoBVceB2lTRMO1ZsQT9XZNmM.roa (raw, json)
Hash identifier: il0d5mGSE5rQCPcA1vK8MEgQ3WzUuWW4S1IB2P8SCH8=
Subject key identifier: 27:19:2C:A0:15:5C:78:1D:A5:4D:13:0E:D5:9B:10:4F:D5:D9:36:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD491FA6A71B97D7E94D6434287952127
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JxksoBVceB2lTRMO1ZsQT9XZNmM.roa
Signing time: Sat 01 Jun 2024 16:11:27 +0000
ROA not before: Sat 01 Jun 2024 16:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:91:fa:6a:71:b9:7d:7e:94:d6:43:42:87:95:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 16:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27192ca0155c781da54d130ed59b104fd5d93663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:4c:26:c6:78:ce:c9:ac:7f:2d:dc:30:32:
f8:a3:36:3d:61:02:dd:1d:2c:23:1a:39:b4:11:5a:
04:75:8a:f9:49:90:8b:88:72:a4:f7:af:a3:62:e8:
b2:1b:3b:ab:8f:94:a1:60:3e:27:bc:68:85:42:0f:
b1:12:55:37:2c:bc:16:9e:62:fd:48:26:df:5e:69:
3f:8b:57:37:a9:6c:87:04:91:d2:c3:35:d3:08:25:
73:ca:d5:a8:9f:63:2b:0e:11:fc:7b:fe:61:ec:71:
c6:13:7b:1c:ae:01:a7:ea:bf:77:ed:cb:63:95:85:
a6:b8:5c:d4:e1:45:b3:d2:3c:6e:69:7c:67:98:b2:
6b:20:fe:4f:d9:46:b8:0a:55:06:8a:03:ad:1a:78:
75:8e:26:73:42:cb:27:9d:d0:d9:51:2f:cf:e6:d2:
b4:00:13:18:74:e1:95:45:5b:da:68:b5:97:0d:e9:
dc:60:2a:cf:b5:f8:89:1a:17:52:e8:45:c0:c6:3e:
9c:8d:16:58:0b:c4:66:32:20:c3:e2:1f:30:4f:ff:
be:6c:cc:45:fd:34:cb:a4:0e:2e:f6:26:29:13:c1:
42:a8:d2:e5:a2:d4:c4:1b:3c:53:ab:63:98:b9:0d:
21:2c:c1:71:be:da:97:28:32:af:6b:8d:84:c6:06:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:2C:A0:15:5C:78:1D:A5:4D:13:0E:D5:9B:10:4F:D5:D9:36:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JxksoBVceB2lTRMO1ZsQT9XZNmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:1b:85:12:10:30:b1:73:70:39:31:28:d7:ac:50:2b:6d:8e:
88:6f:ea:6f:5c:3f:3a:e8:7f:1d:a9:0c:d1:b7:84:84:fd:36:
10:a9:49:a6:7f:36:ac:7d:95:49:b4:f8:19:6a:a1:70:cc:dc:
ed:1b:a5:1a:19:ee:70:01:97:3b:ef:49:68:eb:60:d7:a6:fb:
98:da:45:dc:0d:3f:92:1f:79:70:0e:da:7e:bf:a9:3c:21:4b:
7b:40:dd:f0:06:c4:ef:c3:05:76:d4:0f:c5:c0:72:4f:c2:95:
87:d7:ce:cf:60:5a:b5:db:21:56:82:de:56:99:f4:09:a0:9c:
4c:1c:62:6e:95:fc:d8:f4:5d:5c:bc:70:df:e8:4e:9a:99:e6:
ef:70:9d:b9:a2:aa:67:b8:e1:82:ee:30:c9:54:f9:5c:ef:db:
5c:6c:bf:97:80:97:50:9e:45:fc:ca:f4:35:2c:b7:3b:84:3f:
87:64:de:89:15:8d:7e:e1:7c:52:36:55:bf:da:23:a8:3b:1e:
70:75:09:37:c9:80:3c:5c:b1:cc:53:5d:06:aa:b9:f2:25:a9:
1c:63:ea:5c:b7:f3:16:a1:99:77:3c:b3:37:59:18:1a:dc:84:
20:e9:a3:7d:54:08:fa:e3:23:e3:87:c2:93:7c:6f:74:97:5d:
98:aa:04:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/Ukfpqcbl9fpTWQ0KHlSEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjAxMTYxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzE5MmNhMDE1NWM3ODFkYTU0ZDEzMGVkNTliMTA0ZmQ1ZDkzNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtMJsZ4zsmsfy3cMDL4ozY9YQLd
HSwjGjm0EVoEdYr5SZCLiHKk96+jYuiyGzurj5ShYD4nvGiFQg+xElU3LLwWnmL9
SCbfXmk/i1c3qWyHBJHSwzXTCCVzytWon2MrDhH8e/5h7HHGE3scrgGn6r937ctj
lYWmuFzU4UWz0jxuaXxnmLJrIP5P2Ua4ClUGigOtGnh1jiZzQssnndDZUS/P5tK0
ABMYdOGVRVvaaLWXDencYCrPtfiJGhdS6EXAxj6cjRZYC8RmMiDD4h8wT/++bMxF
/TTLpA4u9iYpE8FCqNLlotTEGzxTq2OYuQ0hLMFxvtqXKDKva42ExgYvgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCcZLKAVXHgdpU0TDtWbEE/V2TZjMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvSnhrc29CVmNlQjJsVFJNTzFac1FUOVhaTm1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADUbhRIQMLFzcDkxKNes
UCttjohv6m9cPzrofx2pDNG3hIT9NhCpSaZ/Nqx9lUm0+BlqoXDM3O0bpRoZ7nAB
lzvvSWjrYNem+5jaRdwNP5IfeXAO2n6/qTwhS3tA3fAGxO/DBXbUD8XAck/ClYfX
zs9gWrXbIVaC3laZ9AmgnEwcYm6V/Nj0XVy8cN/oTpqZ5u9wnbmiqme44YLuMMlU
+Vzv21xsv5eAl1CeRfzK9DUstzuEP4dk3okVjX7hfFI2Vb/aI6g7HnB1CTfJgDxc
scxTXQaqufIlqRxj6ly38xahmXc8szdZGBrchCDpo31UCPrjI+OHwpN8b3SXXZiq
BKQ=
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:46 2025 by rpki-client