Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa
File: jPt46NJvcVymNYY_27_BoDut4u0.roa (raw, json)
Hash identifier: /s7RJvIWG/Y4kr42tcGNTlJvjXvIAxWdEzwirBb2Dp0=
Subject key identifier: 8C:FB:78:E8:D2:6F:71:5C:A6:35:86:3F:DB:BF:C1:A0:3B:AD:E2:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1613BE571374F15629817989F574F29C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa
Signing time: Tue 28 Nov 2023 13:17:21 +0000
ROA not before: Tue 28 Nov 2023 13:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:13:be:57:13:74:f1:56:29:81:79:89:f5:74:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 13:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cfb78e8d26f715ca635863fdbbfc1a03bade2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:fe:a7:51:58:aa:63:8f:02:11:95:0c:ed:
f4:63:f0:b9:79:e6:b1:0c:e3:92:09:f7:fc:d6:61:
ac:bf:43:bd:62:0e:4b:cf:98:7d:e4:49:66:07:fc:
5a:7a:33:68:3c:28:1a:6b:65:24:0b:32:2f:c6:ed:
e7:68:9c:08:76:22:b1:d3:13:cf:54:f7:3d:be:53:
6a:10:c5:2c:2a:92:3c:ef:1e:a8:05:b4:be:a4:0c:
8b:b7:de:18:c3:3e:8d:9f:ff:7b:6c:c6:1a:be:85:
c6:c1:c6:e4:ea:e8:9d:07:4a:2f:4c:5b:6b:f0:a2:
dd:75:70:2b:d5:a4:2e:b3:15:ee:6f:46:84:79:9a:
3d:3b:14:25:72:a3:d2:b4:36:0e:1c:03:54:aa:51:
be:e3:ad:e9:dd:a2:c5:35:49:46:01:44:60:f2:02:
17:ad:cf:c7:f7:e3:bc:99:92:a9:ca:21:fc:d6:92:
5b:b8:71:e6:9d:cf:67:a8:67:f9:a2:a6:82:b5:41:
1e:92:53:b9:eb:f2:d4:06:62:0e:8f:cb:76:b9:88:
82:e0:48:07:c6:47:3d:12:b6:57:f4:82:13:f7:1c:
fd:ba:06:c4:39:66:32:8d:78:fe:7e:26:59:55:8d:
9c:72:4a:4b:42:c6:f7:a6:b1:4e:6b:52:c4:1e:a6:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:78:E8:D2:6F:71:5C:A6:35:86:3F:DB:BF:C1:A0:3B:AD:E2:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:a7:12:9d:1e:d3:8e:9e:4b:91:cc:59:03:a2:bb:d1:24:70:
d8:76:a3:a1:3e:99:08:8f:59:16:c9:7f:dc:c5:f9:f7:d0:a5:
9d:a8:1f:67:e6:40:3f:50:6e:ea:54:c5:78:13:59:ac:52:08:
49:a4:00:3a:84:9b:db:27:ab:38:ea:14:d4:c4:57:a0:cc:68:
0f:65:0d:b0:aa:f6:1e:ed:6d:22:70:9c:cd:38:50:80:37:a2:
f4:96:0f:d9:e0:d9:31:db:bb:74:5b:f8:ba:af:61:0b:ff:99:
6e:dd:ce:23:88:cb:ef:6c:c9:90:ff:64:4f:60:a4:fa:8e:27:
82:c1:a0:27:8f:bd:f4:57:c4:69:f8:ed:a7:85:b4:99:b9:6c:
2a:7f:08:d9:12:c3:a2:41:e5:81:15:d2:e9:b8:9f:c8:b4:94:
57:bc:20:c7:7c:6b:45:a6:aa:31:e8:d5:04:ef:25:bb:a9:bc:
55:5f:e4:c3:37:75:1a:a4:a8:f4:35:9e:23:6f:a8:bd:60:0b:
69:0f:e0:6c:bd:6b:d8:40:9b:4a:8b:e3:71:bf:8d:a7:8c:07:
cc:61:d4:4d:ce:77:46:98:85:60:c3:e9:02:25:63:56:8b:e6:
d1:91:ea:47:8b:9a:f3:13:62:b6:db:3d:f3:ed:97:01:93:40:
d6:53:04:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwWE75XE3TxVimBeYn1dPKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MTMxNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2ZiNzhlOGQyNmY3MTVjYTYzNTg2M2ZkYmJmYzFhMDNiYWRlMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAter+p1FYqmOPAhGVDO30Y/C5eeax
DOOSCff81mGsv0O9Yg5Lz5h95ElmB/xaejNoPCgaa2UkCzIvxu3naJwIdiKx0xPP
VPc9vlNqEMUsKpI87x6oBbS+pAyLt94Ywz6Nn/97bMYavoXGwcbk6uidB0ovTFtr
8KLddXAr1aQusxXub0aEeZo9OxQlcqPStDYOHANUqlG+463p3aLFNUlGAURg8gIX
rc/H9+O8mZKpyiH81pJbuHHmnc9nqGf5oqaCtUEeklO56/LUBmIOj8t2uYiC4EgH
xkc9ErZX9IIT9xz9ugbEOWYyjXj+fiZZVY2cckpLQsb3prFOa1LEHqZ5zQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIz7eOjSb3FcpjWGP9u/waA7reLtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvalB0NDZOSnZjVnltTllZXzI3X0JvRHV0NHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADSnEp0e046eS5HMWQOi
u9EkcNh2o6E+mQiPWRbJf9zF+ffQpZ2oH2fmQD9QbupUxXgTWaxSCEmkADqEm9sn
qzjqFNTEV6DMaA9lDbCq9h7tbSJwnM04UIA3ovSWD9ng2THbu3Rb+LqvYQv/mW7d
ziOIy+9syZD/ZE9gpPqOJ4LBoCePvfRXxGn47aeFtJm5bCp/CNkSw6JB5YEV0um4
n8i0lFe8IMd8a0WmqjHo1QTvJbupvFVf5MM3dRqkqPQ1niNvqL1gC2kP4Gy9a9hA
m0qL43G/jaeMB8xh1E3Od0aYhWDD6QIlY1aL5tGR6keLmvMTYrbbPfPtlwGTQNZT
BH4=
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:22:25 2025 by rpki-client