Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JvFCFJEog4sLqlka66l6ncoV7LQ.roa
File: JvFCFJEog4sLqlka66l6ncoV7LQ.roa (raw, json)
Hash identifier: petd8zBGRPSsZf3IdXnEidlJxsXo2AW/JW07Cu76h6A=
Subject key identifier: 26:F1:42:14:91:28:83:8B:0B:AA:59:1A:EB:A9:7A:9D:CA:15:EC:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD91CBE32D072771D63AF127553C946B3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JvFCFJEog4sLqlka66l6ncoV7LQ.roa
Signing time: Thu 16 Nov 2023 17:10:21 +0000
ROA not before: Thu 16 Nov 2023 17:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:1c:be:32:d0:72:77:1d:63:af:12:75:53:c9:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 17:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f142149128838b0baa591aeba97a9dca15ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:87:28:e5:9d:ad:8a:1b:7e:25:f3:0c:67:6b:
26:c3:01:45:7f:78:9e:3a:91:e0:a6:4f:d1:61:b2:
c3:a9:1f:8e:d9:8f:00:fc:f5:34:39:85:e9:e1:e9:
f9:c8:d2:1e:f5:68:22:de:eb:1d:88:d1:93:43:46:
81:8e:e5:df:27:16:11:bd:0b:33:35:79:a1:19:cd:
f1:44:d4:9b:4e:81:89:1c:e2:e7:8b:05:af:5b:68:
7b:01:91:76:a0:b4:ee:32:40:53:1f:f4:5c:4d:e3:
d0:6b:5d:3b:35:1b:0d:29:86:eb:82:28:83:f1:37:
70:6a:fe:da:d9:3b:8e:f3:87:05:1a:9a:a5:d4:d4:
b2:18:77:9c:d4:4f:a2:9d:87:91:9f:a4:bd:53:a7:
57:6e:27:b2:13:fc:db:74:26:f1:e2:20:52:e7:1c:
6f:36:12:37:6d:5a:1b:50:07:22:b8:82:ee:2d:60:
51:6d:6a:17:aa:31:d0:7d:60:93:e6:0b:9f:09:b5:
ca:0f:f4:8b:c5:19:2c:7d:56:ba:b9:55:ac:63:90:
9c:ed:bf:7f:ea:e8:47:5e:a1:6d:f3:ed:e6:46:e1:
3a:0d:ff:0c:03:72:a2:7b:6a:3e:be:d4:8b:c8:ed:
fa:34:38:94:51:1c:17:6c:66:0e:b8:88:47:2d:fc:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:42:14:91:28:83:8B:0B:AA:59:1A:EB:A9:7A:9D:CA:15:EC:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JvFCFJEog4sLqlka66l6ncoV7LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:48:a1:52:a4:ff:98:13:d0:09:8e:a5:67:10:78:62:1c:b1:
94:75:14:85:67:e9:0e:82:22:11:87:74:01:47:07:1b:c4:36:
c6:62:4c:d1:83:12:4f:0f:ef:05:34:7f:c9:6c:c8:98:f8:a8:
fd:fe:f9:a7:f7:44:c5:34:5a:7e:e0:b0:91:51:e8:7c:19:68:
bf:92:e1:64:99:23:47:6d:ca:13:75:fa:5e:2d:dd:75:04:cb:
fe:24:95:fc:51:b0:80:91:8e:8f:61:a4:84:1d:63:3e:8e:d1:
55:0d:dc:52:de:9c:94:d6:fa:3a:98:1b:ff:77:42:11:2f:7f:
35:e9:7d:98:5e:8c:e9:15:7c:15:f4:00:83:74:9e:c8:cd:13:
b0:35:2d:f9:df:20:4f:30:bb:5d:82:7c:00:92:b8:b1:5c:bc:
f3:9e:7a:d5:e1:78:10:c5:3c:77:40:f6:ad:9d:6a:eb:79:7a:
10:6c:cf:73:06:db:b1:4a:bf:34:56:5b:19:5d:66:25:cb:93:
72:e5:84:2f:a5:66:df:41:04:2e:85:3a:c2:96:98:25:8d:4c:
fb:51:ce:f8:68:22:f9:5e:7f:93:49:7e:6a:2b:81:93:d4:e5:
ec:63:51:e1:5f:6f:ef:66:f0:a7:73:1b:bd:1f:3b:8f:b9:59:
a0:21:e0:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvZHL4y0HJ3HWOvEnVTyUazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE2MTcxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmYxNDIxNDkxMjg4MzhiMGJhYTU5MWFlYmE5N2E5ZGNhMTVlY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYco5Z2tiht+JfMMZ2smwwFFf3ie
OpHgpk/RYbLDqR+O2Y8A/PU0OYXp4en5yNIe9Wgi3usdiNGTQ0aBjuXfJxYRvQsz
NXmhGc3xRNSbToGJHOLniwWvW2h7AZF2oLTuMkBTH/RcTePQa107NRsNKYbrgiiD
8Tdwav7a2TuO84cFGpql1NSyGHec1E+inYeRn6S9U6dXbieyE/zbdCbx4iBS5xxv
NhI3bVobUAciuILuLWBRbWoXqjHQfWCT5gufCbXKD/SLxRksfVa6uVWsY5Cc7b9/
6uhHXqFt8+3mRuE6Df8MA3Kie2o+vtSLyO36NDiUURwXbGYOuIhHLfySfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCbxQhSRKIOLC6pZGuupep3KFey0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSnZGQ0ZKRW9nNHNMcWxrYTY2bDZuY29WN0xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADBIoVKk/5gT0AmOpWcQ
eGIcsZR1FIVn6Q6CIhGHdAFHBxvENsZiTNGDEk8P7wU0f8lsyJj4qP3++af3RMU0
Wn7gsJFR6HwZaL+S4WSZI0dtyhN1+l4t3XUEy/4klfxRsICRjo9hpIQdYz6O0VUN
3FLenJTW+jqYG/93QhEvfzXpfZhejOkVfBX0AIN0nsjNE7A1LfnfIE8wu12CfACS
uLFcvPOeetXheBDFPHdA9q2daut5ehBsz3MG27FKvzRWWxldZiXLk3LlhC+lZt9B
BC6FOsKWmCWNTPtRzvhoIvlef5NJfmorgZPU5exjUeFfb+9m8KdzG70fO4+5WaAh
4Go=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:42 2025 by rpki-client