Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JE1lVeGNQxu92ZoTbAB5wx6X90E.roa
File: JE1lVeGNQxu92ZoTbAB5wx6X90E.roa (raw, json)
Hash identifier: oSa+7FBSCqenaRjDWcCmxA/GB7FeQ5RBht0aIdUYTFA=
Subject key identifier: 24:4D:65:55:E1:8D:43:1B:BD:D9:9A:13:6C:00:79:C3:1E:97:F7:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C130E1E0DA6B240B1E63DB80AA8510057
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JE1lVeGNQxu92ZoTbAB5wx6X90E.roa
Signing time: Mon 27 Nov 2023 23:12:21 +0000
ROA not before: Mon 27 Nov 2023 23:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:0e:1e:0d:a6:b2:40:b1:e6:3d:b8:0a:a8:51:00:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 23:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244d6555e18d431bbdd99a136c0079c31e97f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9c:02:65:e4:da:86:8a:cd:01:2f:26:96:1f:
e4:59:85:7e:26:a7:92:dd:40:9e:a3:68:48:4e:16:
5f:08:9b:92:8d:b0:5f:c9:43:54:f7:a2:f9:a1:a0:
ce:57:0b:7f:d2:86:a8:9f:3f:52:a4:f7:59:e1:64:
e6:fb:46:2c:bc:f6:84:40:c3:e4:01:d9:be:6b:86:
ac:3a:fb:32:34:e2:6d:70:38:e6:c4:e7:c5:e9:1d:
86:4c:e0:c4:0a:08:fd:c2:58:7e:46:c9:15:4a:51:
40:8c:e0:0d:b5:1c:bf:94:d8:b5:c8:7a:d7:ae:82:
6c:58:36:f5:2c:ce:47:61:a6:cb:de:6e:ab:31:bd:
9b:ff:0b:09:6c:f3:ad:75:57:d4:d0:50:a9:0c:a5:
bd:77:ef:ef:82:8e:11:47:fd:fd:21:75:4c:1a:7a:
60:45:29:6a:64:0b:11:ac:f1:fb:81:5b:6b:34:4e:
ad:ee:4a:90:24:46:ed:a3:41:dd:1c:6a:29:a2:1d:
04:d4:55:17:29:b3:2b:5b:a2:1c:4a:44:45:77:37:
7a:ca:fd:df:2e:38:b1:45:89:f2:21:1e:85:97:df:
63:15:30:26:70:5c:55:9d:ba:45:34:60:3f:0c:eb:
3c:fa:ba:66:64:b3:01:b5:97:f2:08:58:37:8f:0b:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:65:55:E1:8D:43:1B:BD:D9:9A:13:6C:00:79:C3:1E:97:F7:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JE1lVeGNQxu92ZoTbAB5wx6X90E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:a4:3c:da:9b:fc:7b:5f:3e:f5:a0:30:27:b4:0f:98:fe:4e:
e1:46:0d:16:06:25:26:6a:8d:1f:0e:1d:47:c3:f9:f0:d7:5a:
65:05:2c:5f:b2:1d:07:ba:3d:c2:2e:49:2e:a8:41:9f:3a:7e:
4e:14:c2:cb:a8:90:93:f1:48:b2:1c:16:d7:bb:09:92:ab:7c:
37:ad:63:7b:1e:19:b9:ac:98:1b:e7:a8:f6:46:3d:44:27:36:
d4:35:86:38:4b:9a:7b:a5:12:50:e0:7a:1d:1f:8f:58:90:48:
53:1d:54:a2:f1:d8:e2:30:14:95:8f:48:6f:92:b1:f9:e8:97:
37:54:0d:ab:45:79:eb:31:3f:e0:87:0e:08:26:59:74:61:2f:
1a:0f:72:ef:96:4e:4e:ef:c3:d5:5e:0e:d2:ad:8a:1b:12:95:
3f:34:98:4e:13:a3:4d:b3:00:11:c2:79:63:6f:af:6f:2c:dd:
fb:36:a5:35:99:03:25:52:e2:ad:82:c5:72:0d:8d:a6:5b:a9:
8b:f0:7f:4d:e4:2d:bc:b8:bc:ef:f1:94:84:59:51:c5:c2:44:
37:d5:03:97:7a:f7:54:ca:80:f3:4c:fc:ec:bf:36:71:be:a0:
57:0f:c5:ea:d2:12:89:29:37:91:d2:ba:8d:e6:a7:82:ab:d2:
2a:4b:5a:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwTDh4NprJAseY9uAqoUQBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI3MjMxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDRkNjU1NWUxOGQ0MzFiYmRkOTlhMTM2YzAwNzljMzFlOTdmNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipwCZeTahorNAS8mlh/kWYV+JqeS
3UCeo2hIThZfCJuSjbBfyUNU96L5oaDOVwt/0oaonz9SpPdZ4WTm+0YsvPaEQMPk
Adm+a4asOvsyNOJtcDjmxOfF6R2GTODECgj9wlh+RskVSlFAjOANtRy/lNi1yHrX
roJsWDb1LM5HYabL3m6rMb2b/wsJbPOtdVfU0FCpDKW9d+/vgo4RR/39IXVMGnpg
RSlqZAsRrPH7gVtrNE6t7kqQJEbto0HdHGopoh0E1FUXKbMrW6IcSkRFdzd6yv3f
LjixRYnyIR6Fl99jFTAmcFxVnbpFNGA/DOs8+rpmZLMBtZfyCFg3jwsxGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCRNZVXhjUMbvdmaE2wAecMel/dBMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSkUxbFZlR05ReHU5MlpvVGJBQjV3eDZYOTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADikPNqb/HtfPvWgMCe0
D5j+TuFGDRYGJSZqjR8OHUfD+fDXWmUFLF+yHQe6PcIuSS6oQZ86fk4UwsuokJPx
SLIcFte7CZKrfDetY3seGbmsmBvnqPZGPUQnNtQ1hjhLmnulElDgeh0fj1iQSFMd
VKLx2OIwFJWPSG+SsfnolzdUDatFeesxP+CHDggmWXRhLxoPcu+WTk7vw9VeDtKt
ihsSlT80mE4To02zABHCeWNvr28s3fs2pTWZAyVS4q2CxXINjaZbqYvwf03kLby4
vO/xlIRZUcXCRDfVA5d691TKgPNM/Oy/NnG+oFcPxerSEokpN5HSuo3mp4Kr0ipL
WjA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:53 2025 by rpki-client