Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JELCq67MmHHIhBy81cmxEhe13a0.roa
File: JELCq67MmHHIhBy81cmxEhe13a0.roa (raw, json)
Hash identifier: xfTKZj1xlg4Uh1e5NV9EeapuBIyLEhT2RSLaNXjvRuQ=
Subject key identifier: 24:42:C2:AB:AE:CC:98:71:C8:84:1C:BC:D5:C9:B1:12:17:B5:DD:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2773B2FEAA481B308AAE14E99D5B4431
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JELCq67MmHHIhBy81cmxEhe13a0.roa
Signing time: Fri 13 Oct 2023 05:12:55 +0000
ROA not before: Fri 13 Oct 2023 05:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:73:b2:fe:aa:48:1b:30:8a:ae:14:e9:9d:5b:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 05:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2442c2abaecc9871c8841cbcd5c9b11217b5ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:c0:29:13:8d:20:01:49:a3:6e:85:a4:c9:
c4:3e:2c:41:c5:17:4b:9f:e1:3d:30:89:97:64:01:
e2:a6:05:01:42:d6:0b:aa:6a:d3:18:0b:5a:dd:29:
5a:2c:dd:e9:8d:61:b4:df:3d:fc:49:3d:a4:6e:22:
69:f2:db:32:4a:d4:c4:17:19:da:a6:7a:49:ca:23:
81:e7:af:a7:b8:12:83:53:f2:53:29:0c:ba:b8:a9:
b6:aa:48:f4:4c:bc:32:b0:5a:6e:04:e4:79:00:6b:
70:fd:3f:0e:88:90:8a:84:ca:db:71:b4:51:e7:4a:
72:5d:72:44:83:ac:60:7c:78:cc:a9:dd:c1:68:5f:
05:1d:b6:37:a5:f8:e3:ac:bd:98:8d:2f:1a:f9:5c:
e9:ad:22:f9:6d:2f:24:1c:04:4d:db:a3:3c:8c:cb:
6c:65:83:17:f9:57:a2:6d:1e:e1:d2:38:d7:f1:f9:
20:df:f2:39:35:b6:80:78:22:f8:f9:ed:ed:3c:39:
11:ce:c5:eb:ac:b1:29:9d:45:c6:3b:54:fd:9a:3c:
c0:13:29:74:43:10:fa:72:a8:43:51:d9:bb:5e:2d:
19:31:2e:b0:7d:96:15:ae:9b:a6:ba:dd:52:f3:21:
b4:c8:e2:59:17:49:9a:06:82:ee:01:81:90:a2:13:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:C2:AB:AE:CC:98:71:C8:84:1C:BC:D5:C9:B1:12:17:B5:DD:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JELCq67MmHHIhBy81cmxEhe13a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:3d:ea:38:b7:90:8f:f1:22:95:a4:c0:00:bf:76:2a:34:08:
00:16:9a:0c:8b:d2:ba:b8:10:e8:55:b2:57:17:00:6a:3a:36:
b3:bf:96:d6:35:f1:95:17:75:e3:f8:6f:4b:94:df:dd:94:7e:
69:9d:dc:39:d1:84:84:4f:a6:e2:31:84:65:e1:e5:ce:90:fb:
53:5c:ea:0b:1b:e4:1a:2f:75:30:d1:6d:33:51:46:9a:b5:11:
b6:f7:d4:a9:75:94:15:65:57:06:f9:02:ca:89:c0:d8:6a:f7:
a3:d7:87:14:7b:cf:7a:4a:9c:65:8f:84:fa:56:ea:61:98:6b:
5a:de:f6:dc:3c:40:06:a2:2b:f7:e4:8d:41:a5:5d:16:e6:21:
5b:d4:11:31:77:0c:e8:0a:ac:87:69:44:a9:0d:a6:89:1f:9e:
9e:6a:91:54:b1:0f:69:0a:ac:2e:ad:ef:90:5c:11:2f:b8:9c:
ef:2e:46:a7:ea:a8:59:a3:cd:14:24:fc:01:80:f4:83:7a:36:
46:cb:7f:7e:79:04:13:11:f2:da:97:24:4b:83:c9:07:14:9f:
2c:4f:97:c1:ba:0b:03:27:d2:de:59:b7:a8:51:ca:a3:97:64:
95:5d:08:48:8a:ef:1f:99:d3:fd:64:82:6c:61:62:ef:c2:aa:
17:56:22:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsnc7L+qkgbMIquFOmdW0QxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMDUxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQyYzJhYmFlY2M5ODcxYzg4NDFjYmNkNWM5YjExMjE3YjVkZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+jAKRONIAFJo26FpMnEPixBxRdL
n+E9MImXZAHipgUBQtYLqmrTGAta3SlaLN3pjWG03z38ST2kbiJp8tsyStTEFxna
pnpJyiOB56+nuBKDU/JTKQy6uKm2qkj0TLwysFpuBOR5AGtw/T8OiJCKhMrbcbRR
50pyXXJEg6xgfHjMqd3BaF8FHbY3pfjjrL2YjS8a+VzprSL5bS8kHARN26M8jMts
ZYMX+VeibR7h0jjX8fkg3/I5NbaAeCL4+e3tPDkRzsXrrLEpnUXGO1T9mjzAEyl0
QxD6cqhDUdm7Xi0ZMS6wfZYVrpumut1S8yG0yOJZF0maBoLuAYGQohNqrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCRCwquuzJhxyIQcvNXJsRIXtd2tMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSkVMQ3E2N01tSEhJaEJ5ODFjbXhFaGUxM2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJk96ji3kI/xIpWkwAC/
dio0CAAWmgyL0rq4EOhVslcXAGo6NrO/ltY18ZUXdeP4b0uU392Ufmmd3DnRhIRP
puIxhGXh5c6Q+1Nc6gsb5BovdTDRbTNRRpq1Ebb31Kl1lBVlVwb5AsqJwNhq96PX
hxR7z3pKnGWPhPpW6mGYa1re9tw8QAaiK/fkjUGlXRbmIVvUETF3DOgKrIdpRKkN
pokfnp5qkVSxD2kKrC6t75BcES+4nO8uRqfqqFmjzRQk/AGA9IN6NkbLf355BBMR
8tqXJEuDyQcUnyxPl8G6CwMn0t5Zt6hRyqOXZJVdCEiK7x+Z0/1kgmxhYu/CqhdW
Ir4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:35 2025 by rpki-client