Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j9_d1K63fN4P_aSvCklrBRwo6G8.roa
File: j9_d1K63fN4P_aSvCklrBRwo6G8.roa (raw, json)
Hash identifier: dkuNHOpRpoSpQYybWqGU6FKcKk0oSh9+H6G4PvDdwxc=
Subject key identifier: 8F:DF:DD:D4:AE:B7:7C:DE:0F:FD:A4:AF:0A:49:6B:05:1C:28:E8:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABBF51AA682D26A3F68E30AD8ED2F42D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j9_d1K63fN4P_aSvCklrBRwo6G8.roa
Signing time: Fri 22 Sep 2023 08:15:17 +0000
ROA not before: Fri 22 Sep 2023 08:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:f5:1a:a6:82:d2:6a:3f:68:e3:0a:d8:ed:2f:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 08:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fdfddd4aeb77cde0ffda4af0a496b051c28e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:9b:eb:5a:5a:6b:cb:6c:64:65:69:72:e7:
6f:8d:67:d6:16:5b:2b:d8:a0:58:cf:c2:b4:59:c1:
f4:79:40:d9:18:8b:78:21:86:3e:59:c7:fc:ba:0d:
24:ef:63:93:43:67:50:1d:a8:03:4b:73:46:15:48:
10:ba:6b:90:42:27:a0:78:28:5a:99:c9:16:73:bf:
1a:79:8c:a4:9e:d1:94:8b:8d:ff:ee:6a:ed:74:6f:
ec:7b:7e:ed:89:94:19:5d:96:cd:f3:6b:31:a8:e6:
6c:9b:af:47:42:02:9d:ee:02:58:16:e1:78:c8:f3:
9b:fc:3f:76:5c:bd:70:19:f0:50:63:0f:17:cc:e8:
3b:cd:ee:7f:3e:c3:9f:41:69:68:22:35:45:6e:9b:
1f:75:96:8d:ad:f7:a5:0e:db:ae:3b:07:45:3a:c6:
c3:9a:50:3e:d1:de:9a:83:44:7f:83:c5:1d:6c:4a:
10:7f:28:aa:3e:4f:8a:86:6c:a4:15:ac:46:79:4a:
b7:47:d6:0f:ba:ef:ec:4b:d3:d5:9c:f5:3f:87:71:
2e:d3:be:2d:94:91:55:51:c9:a3:41:4b:1f:ba:83:
97:9a:db:e8:4d:2a:86:32:5c:86:e6:42:35:4f:03:
e4:4a:f7:56:ff:4c:e2:3e:37:de:6e:11:a4:cb:9b:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:DD:D4:AE:B7:7C:DE:0F:FD:A4:AF:0A:49:6B:05:1C:28:E8:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j9_d1K63fN4P_aSvCklrBRwo6G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:da:03:42:3c:59:6c:69:0e:76:53:66:5d:56:e6:8e:e8:21:
10:28:c6:e6:0c:27:3e:a6:9e:d9:2a:9f:9f:5b:87:fa:fd:44:
4a:6c:8f:7f:41:77:75:26:b0:d0:87:1d:b9:65:88:90:f5:5c:
0e:c6:5d:e5:c6:15:9e:11:65:1a:45:4a:75:ac:b0:9e:32:4d:
f8:9f:4a:4d:a8:eb:3f:7c:da:42:ae:e7:99:5a:0a:70:d8:f0:
b6:f4:d7:50:ec:24:47:fb:1e:9c:03:33:53:7c:0f:80:b8:cd:
cf:45:32:a2:5c:93:71:bd:34:28:b9:da:ee:10:a5:10:2c:8d:
d5:13:8f:d3:c8:e7:b3:ac:10:1e:b1:00:f8:37:fe:13:e7:15:
ec:c9:f5:0d:29:03:3a:5b:c4:a4:75:50:0e:8a:ef:6d:02:35:
80:0c:a7:0d:a3:d1:f9:5d:92:62:7a:5a:22:3b:47:f1:c3:fc:
68:7a:d0:14:c4:5a:f0:4b:2c:ba:0e:b0:3b:69:51:b5:21:f5:
f2:cb:92:04:40:48:0a:73:1b:8e:37:4c:b9:95:b4:be:47:b2:
d5:7a:5b:0d:39:15:e8:8e:01:ce:b9:3c:21:87:d8:73:78:24:
d7:75:44:13:3c:1d:f9:e2:c1:61:41:2a:53:09:4c:3f:fe:86:
32:d7:9d:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq79RqmgtJqP2jjCtjtL0LUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIyMDgxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmRmZGRkNGFlYjc3Y2RlMGZmZGE0YWYwYTQ5NmIwNTFjMjhlODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6b61paa8tsZGVpcudvjWfWFlsr
2KBYz8K0WcH0eUDZGIt4IYY+Wcf8ug0k72OTQ2dQHagDS3NGFUgQumuQQiegeCha
mckWc78aeYykntGUi43/7mrtdG/se37tiZQZXZbN82sxqOZsm69HQgKd7gJYFuF4
yPOb/D92XL1wGfBQYw8XzOg7ze5/PsOfQWloIjVFbpsfdZaNrfelDtuuOwdFOsbD
mlA+0d6ag0R/g8UdbEoQfyiqPk+KhmykFaxGeUq3R9YPuu/sS9PVnPU/h3Eu074t
lJFVUcmjQUsfuoOXmtvoTSqGMlyG5kI1TwPkSvdW/0ziPjfebhGky5t2hQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI/f3dSut3zeD/2krwpJawUcKOhvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvajlfZDFLNjNmTjRQX2FTdkNrbHJCUndvNkc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA/aA0I8WWxpDnZTZl1W
5o7oIRAoxuYMJz6mntkqn59bh/r9REpsj39Bd3UmsNCHHblliJD1XA7GXeXGFZ4R
ZRpFSnWssJ4yTfifSk2o6z982kKu55laCnDY8Lb011DsJEf7HpwDM1N8D4C4zc9F
MqJck3G9NCi52u4QpRAsjdUTj9PI57OsEB6xAPg3/hPnFezJ9Q0pAzpbxKR1UA6K
720CNYAMpw2j0fldkmJ6WiI7R/HD/Gh60BTEWvBLLLoOsDtpUbUh9fLLkgRASApz
G443TLmVtL5HstV6Ww05FeiOAc65PCGH2HN4JNd1RBM8HfniwWFBKlMJTD/+hjLX
nd0=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:30 2025 by rpki-client