Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JYqKREp1rYK-7DZw-fyiYTXvAxI.roa
File: JYqKREp1rYK-7DZw-fyiYTXvAxI.roa (raw, json)
Hash identifier: /hNQQiFpTkMD5zqIkYNaAZ5OBRkxxgP/mmNxSFBFSuU=
Subject key identifier: 25:8A:8A:44:4A:75:AD:82:BE:EC:36:70:F9:FC:A2:61:35:EF:03:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2AE29A84E6364551A4DDFA6B9B9708FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JYqKREp1rYK-7DZw-fyiYTXvAxI.roa
Signing time: Fri 13 Oct 2023 21:12:55 +0000
ROA not before: Fri 13 Oct 2023 21:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:e2:9a:84:e6:36:45:51:a4:dd:fa:6b:9b:97:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 21:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=258a8a444a75ad82beec3670f9fca26135ef0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:4f:75:9b:06:a1:92:44:49:99:80:b2:06:
76:87:33:0b:54:8f:cd:6d:43:1c:4d:17:42:45:57:
6f:63:40:c9:44:e8:3b:7a:c5:ec:f4:c8:d9:24:71:
35:41:eb:cd:ac:27:dd:20:dc:9b:42:9c:26:93:11:
19:ba:6b:d3:f6:ff:f4:89:f5:ea:91:0e:e7:9d:94:
b1:02:08:fa:05:51:fc:f0:42:d6:ba:b0:94:0b:51:
38:8a:16:ff:b3:1b:3f:96:25:c8:53:1c:a2:1e:61:
9d:bd:f8:e8:55:83:d9:b1:43:cd:4b:6c:a7:13:2a:
a1:ee:48:df:c1:0d:01:64:93:7a:2b:f7:4d:23:55:
b1:71:82:e9:da:7a:1f:e2:f2:87:d4:cf:ac:73:e1:
55:bd:a5:16:62:8b:84:a8:1c:ea:8b:d3:f1:a4:ee:
d8:22:14:bf:61:22:55:a2:4b:0b:02:7e:0d:08:9e:
ea:97:9d:86:82:c4:24:a4:59:11:d2:8a:c5:89:99:
a0:07:39:a3:04:de:b2:21:58:20:59:f3:68:74:69:
fa:2e:c7:fb:14:d9:96:33:7d:91:64:0e:34:6d:d8:
36:56:90:11:a5:2c:da:18:20:88:51:8a:86:91:16:
be:13:33:0f:6e:36:8c:a5:6c:9e:bd:ec:7f:3a:fc:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:8A:44:4A:75:AD:82:BE:EC:36:70:F9:FC:A2:61:35:EF:03:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JYqKREp1rYK-7DZw-fyiYTXvAxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:73:c4:6d:c7:f4:59:d7:c6:a1:fd:73:1f:3b:33:0b:a3:30:
96:5f:83:1c:c3:e8:bd:f3:7f:6a:4b:ba:7c:48:eb:a4:cb:63:
63:1f:7f:75:71:09:d1:87:1c:71:2a:76:58:c9:d7:42:88:64:
04:6c:7d:32:f1:22:ce:d6:b6:e2:8f:78:c7:18:ae:c2:0b:23:
a7:95:c7:bf:75:7c:29:97:38:bc:70:7d:62:b0:e8:04:85:87:
3c:5e:2c:d8:47:3b:ad:a3:19:fe:53:80:84:ef:ed:18:10:98:
c8:21:03:0d:f2:3f:6c:68:d4:f0:1e:60:ac:17:7e:84:0f:f2:
cf:5f:e0:3e:77:1d:7e:c6:24:2f:62:c8:33:02:bc:fc:6b:13:
ad:69:01:ea:67:71:4d:03:89:7e:a2:67:59:38:6d:7a:83:1c:
55:b0:8b:90:c5:d3:6b:0a:14:da:83:1c:a0:50:b0:06:b3:4b:
81:ed:f3:37:e3:22:de:c6:0d:eb:3c:2c:24:d9:69:f0:59:3b:
b1:9a:cc:65:7a:92:76:87:c2:92:ec:6a:6d:cf:87:64:b3:d7:
f7:6c:17:0a:f2:36:3f:75:21:6b:11:02:42:6b:d9:b1:cb:af:
d6:3f:5b:12:43:9c:e5:13:a5:d4:4a:8a:98:ea:d0:f1:97:61:
38:90:86:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsq4pqE5jZFUaTd+mublwj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMjExMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThhOGE0NDRhNzVhZDgyYmVlYzM2NzBmOWZjYTI2MTM1ZWYwMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWxPdZsGoZJESZmAsgZ2hzMLVI/N
bUMcTRdCRVdvY0DJROg7esXs9MjZJHE1QevNrCfdINybQpwmkxEZumvT9v/0ifXq
kQ7nnZSxAgj6BVH88ELWurCUC1E4ihb/sxs/liXIUxyiHmGdvfjoVYPZsUPNS2yn
Eyqh7kjfwQ0BZJN6K/dNI1WxcYLp2nof4vKH1M+sc+FVvaUWYouEqBzqi9PxpO7Y
IhS/YSJVoksLAn4NCJ7ql52GgsQkpFkR0orFiZmgBzmjBN6yIVggWfNodGn6Lsf7
FNmWM32RZA40bdg2VpARpSzaGCCIUYqGkRa+EzMPbjaMpWyevex/OvyOeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCWKikRKda2Cvuw2cPn8omE17wMSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSllxS1JFcDFyWUstN0Rady1meWlZVFh2QXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACtzxG3H9FnXxqH9cx87
MwujMJZfgxzD6L3zf2pLunxI66TLY2Mff3VxCdGHHHEqdljJ10KIZARsfTLxIs7W
tuKPeMcYrsILI6eVx791fCmXOLxwfWKw6ASFhzxeLNhHO62jGf5TgITv7RgQmMgh
Aw3yP2xo1PAeYKwXfoQP8s9f4D53HX7GJC9iyDMCvPxrE61pAepncU0DiX6iZ1k4
bXqDHFWwi5DF02sKFNqDHKBQsAazS4Ht8zfjIt7GDes8LCTZafBZO7GazGV6knaH
wpLsam3Ph2Sz1/dsFwryNj91IWsRAkJr2bHLr9Y/WxJDnOUTpdRKipjq0PGXYTiQ
hhg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:15:56 2025 by rpki-client