Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jcVBSEhXDqFSXC9N2mj-QJsS6LM.roa
File: jcVBSEhXDqFSXC9N2mj-QJsS6LM.roa (raw, json)
Hash identifier: M7NF4LiJ/nOXhCspEkmOTwEasGAvz+ru2Ws/YMj2Z2w=
Subject key identifier: 8D:C5:41:48:48:57:0E:A1:52:5C:2F:4D:DA:68:FE:40:9B:12:E8:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7027CFDE01E3B6EF47FC5365F8570F14
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jcVBSEhXDqFSXC9N2mj-QJsS6LM.roa
Signing time: Sat 16 Dec 2023 01:05:06 +0000
ROA not before: Sat 16 Dec 2023 01:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:7027:12e1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:70:27:cf:de:01:e3:b6:ef:47:fc:53:65:f8:57:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 01:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc5414848570ea1525c2f4dda68fe409b12e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:b6:36:46:8b:1b:cd:a5:ef:3b:cf:c0:49:
91:ca:2f:cc:f9:de:be:72:b8:90:83:85:64:a3:dc:
86:00:bf:a4:f2:74:ff:d3:e0:d8:5f:67:15:8f:4f:
d9:00:23:ab:cc:65:8a:8a:0c:df:ee:59:0c:f4:57:
d8:f3:83:63:d4:0d:f8:fd:f9:cd:7f:ba:51:a6:0b:
1b:80:c8:8b:b7:3e:b4:53:dd:85:a0:95:63:85:95:
a3:b6:17:dd:2a:fc:c5:65:26:e0:81:0c:d8:b5:9e:
e5:f2:0b:ec:bb:f1:d3:36:0d:a7:0d:bc:fa:fe:7e:
f7:af:c3:21:7c:02:2e:e4:2e:98:74:3a:07:e0:14:
d8:4d:87:db:6a:c4:75:cf:b4:00:8f:ff:09:2b:44:
7b:ba:80:77:48:79:91:9e:33:a2:d1:c8:f0:2d:41:
e3:44:47:b1:d1:f6:38:b5:4d:65:be:fa:e9:c8:e6:
ed:bb:45:b1:1e:02:24:4e:df:a0:32:1e:2b:08:d0:
ca:1d:78:83:a3:31:3e:76:fc:de:47:a2:f3:05:c5:
62:b6:f0:90:b7:3a:52:0f:be:75:95:24:9b:25:c3:
45:ec:02:c1:16:72:d0:e3:ba:96:c7:30:be:48:66:
d3:18:8f:b7:da:0c:19:9f:20:a5:17:40:65:a5:98:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:41:48:48:57:0E:A1:52:5C:2F:4D:DA:68:FE:40:9B:12:E8:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jcVBSEhXDqFSXC9N2mj-QJsS6LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:e3:85:11:a7:52:b9:ae:4c:e0:c6:37:cf:33:be:db:31:e6:
c7:d6:4c:37:66:49:ab:7f:7a:67:99:34:92:6a:4f:4e:27:8e:
8e:04:bb:ff:02:c5:ba:52:49:28:cb:76:0d:79:21:ff:ec:36:
2b:c8:c5:65:43:58:8f:a7:92:1e:e3:99:d6:b8:bc:f4:15:ae:
b4:8a:35:d9:98:d0:4d:68:64:54:a8:f9:6a:ff:ea:a2:51:5f:
1e:a3:35:1d:0f:b8:32:59:9d:88:65:b8:3d:ae:ad:07:fc:fe:
b3:85:7b:c3:65:4a:bf:ba:a3:be:e9:f1:37:fd:41:d0:2c:ea:
2a:89:9e:eb:ca:3b:b2:a8:03:25:22:6f:7c:b3:a7:dc:b7:fb:
35:ea:4b:39:20:7d:40:93:77:6a:b2:ca:a7:28:a1:a6:68:0a:
65:72:a5:1d:b5:d7:0e:4d:b3:55:50:6d:db:75:b3:8e:39:61:
02:2d:60:ff:5e:23:0f:99:e8:57:3b:41:73:6f:26:d9:c6:ac:
cb:33:81:b0:c3:e1:cb:56:07:4f:81:a5:9e:84:45:67:ef:ce:
db:4a:16:d8:76:c1:d1:44:6a:fc:06:c0:9e:72:94:f2:45:78:
14:8f:ca:3c:97:9a:e5:e3:f3:c2:08:8b:2a:0e:db:c8:dc:6b:
82:90:9b:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxwJ8/eAeO270f8U2X4Vw8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE2MDEwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM1NDE0ODQ4NTcwZWExNTI1YzJmNGRkYTY4ZmU0MDliMTJlOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfi2NkaLG82l7zvPwEmRyi/M+d6+
criQg4Vko9yGAL+k8nT/0+DYX2cVj0/ZACOrzGWKigzf7lkM9FfY84Nj1A34/fnN
f7pRpgsbgMiLtz60U92FoJVjhZWjthfdKvzFZSbggQzYtZ7l8gvsu/HTNg2nDbz6
/n73r8MhfAIu5C6YdDoH4BTYTYfbasR1z7QAj/8JK0R7uoB3SHmRnjOi0cjwLUHj
REex0fY4tU1lvvrpyObtu0WxHgIkTt+gMh4rCNDKHXiDozE+dvzeR6LzBcVitvCQ
tzpSD751lSSbJcNF7ALBFnLQ47qWxzC+SGbTGI+32gwZnyClF0BlpZg64QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI3FQUhIVw6hUlwvTdpo/kCbEuizMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvamNWQlNFaFhEcUZTWEM5TjJtai1RSnNTNkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADvjhRGnUrmuTODGN88z
vtsx5sfWTDdmSat/emeZNJJqT04njo4Eu/8CxbpSSSjLdg15If/sNivIxWVDWI+n
kh7jmda4vPQVrrSKNdmY0E1oZFSo+Wr/6qJRXx6jNR0PuDJZnYhluD2urQf8/rOF
e8NlSr+6o77p8Tf9QdAs6iqJnuvKO7KoAyUib3yzp9y3+zXqSzkgfUCTd2qyyqco
oaZoCmVypR211w5Ns1VQbdt1s445YQItYP9eIw+Z6Fc7QXNvJtnGrMszgbDD4ctW
B0+BpZ6ERWfvzttKFth2wdFEavwGwJ5ylPJFeBSPyjyXmuXj88IIiyoO28jca4KQ
m0E=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:09 2025 by rpki-client