Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sjoEqDBjdcrydq1_dD-Q39hFVhQ.roa
File: sjoEqDBjdcrydq1_dD-Q39hFVhQ.roa (raw, json)
Hash identifier: HF4zKvOVlXM30XXfQi/3PdR3ONzqWlZktxG3DLWPSkc=
Subject key identifier: B2:3A:04:A8:30:63:75:CA:F2:76:AD:7F:74:3F:90:DF:D8:45:56:14
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C68407F458862B9E6807C8884C2DD1FBB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sjoEqDBjdcrydq1_dD-Q39hFVhQ.roa
Signing time: Thu 14 Dec 2023 12:15:06 +0000
ROA not before: Thu 14 Dec 2023 12:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:40:7f:45:88:62:b9:e6:80:7c:88:84:c2:dd:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 12:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b23a04a8306375caf276ad7f743f90dfd8455614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:30:a1:1a:bb:f7:1d:40:67:05:53:b9:3b:
15:77:d6:0d:67:7b:94:65:a2:dc:de:e0:35:50:4d:
59:be:63:2c:aa:18:f7:ee:4e:71:90:a5:1a:53:fa:
b2:c0:67:37:da:6b:83:3f:1a:b4:c3:f8:15:00:51:
d3:4a:16:75:e7:ac:fa:16:64:e3:b5:20:7c:9d:d6:
77:0d:55:08:72:eb:e9:c5:b7:e1:52:b9:e9:c6:a8:
28:da:17:68:e4:67:d0:8d:44:81:03:9b:d5:fd:03:
f0:3d:7b:ba:b1:4c:9e:fe:8f:6e:50:a5:39:a1:81:
56:d2:c7:19:68:49:38:c7:fc:4e:d9:b2:5e:df:f7:
48:d9:ba:33:d4:11:2d:c1:5e:b0:0a:0f:0c:41:9b:
a0:8e:7f:78:b7:71:09:fe:14:0d:29:01:9c:91:54:
d4:b2:ab:ed:07:b7:bd:92:6b:4a:1e:45:70:09:ad:
a4:3a:a4:c4:21:dc:8e:fa:02:04:c5:db:8a:da:e2:
60:ff:72:1e:46:b5:3c:40:80:93:d2:4f:a7:49:91:
0c:63:39:b0:1b:fd:e0:8f:10:a7:b9:a3:3d:6a:fd:
8f:2b:78:e5:85:66:56:81:37:36:db:6b:95:27:8a:
5b:ea:d2:50:78:c2:0f:a8:8b:c9:8a:79:e1:cd:38:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:04:A8:30:63:75:CA:F2:76:AD:7F:74:3F:90:DF:D8:45:56:14
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sjoEqDBjdcrydq1_dD-Q39hFVhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:d6:71:ab:1d:3c:41:af:a2:77:3f:04:8b:f9:4c:0a:5b:8b:
4a:88:8f:73:0d:b1:da:ce:d0:0d:77:ce:9f:17:bc:59:50:35:
7a:d7:b1:f6:b1:03:62:ee:fd:ca:0c:bf:07:2c:cb:03:87:bc:
29:61:72:49:7c:e9:ef:b8:b6:e5:3e:1f:27:ac:dc:d5:1c:74:
5c:6e:d3:d0:d1:eb:79:86:3b:76:97:f2:c4:89:bf:22:0b:9f:
c4:74:e6:d6:d2:1e:ae:a3:bf:4b:72:0f:e3:8a:bf:1a:8a:11:
33:17:55:be:bf:43:67:1f:a8:fd:50:86:84:87:6e:1e:af:01:
92:17:71:09:49:a1:06:86:05:7b:3a:35:f9:25:8d:59:ef:77:
ad:1f:bf:7c:d3:fd:bc:7f:46:b6:cb:26:29:c9:fa:72:a0:33:
dc:de:1c:50:44:64:a0:8a:71:75:36:d5:8e:6e:78:00:bc:92:
38:64:2c:06:30:7b:e5:50:02:be:61:8d:6c:27:d6:16:00:e0:
c0:0d:65:f2:11:c5:44:61:3c:8b:07:c9:45:55:99:2e:af:5f:
cf:ac:65:c2:41:f2:e9:64:7a:78:dc:ec:39:f3:96:92:60:8f:
49:7c:4a:e1:5a:60:98:de:a0:d6:fb:03:a1:58:db:da:ef:b4:
88:c1:eb:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxoQH9FiGK55oB8iITC3R+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MTIxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjNhMDRhODMwNjM3NWNhZjI3NmFkN2Y3NDNmOTBkZmQ4NDU1NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjYwoRq79x1AZwVTuTsVd9YNZ3uU
ZaLc3uA1UE1ZvmMsqhj37k5xkKUaU/qywGc32muDPxq0w/gVAFHTShZ156z6FmTj
tSB8ndZ3DVUIcuvpxbfhUrnpxqgo2hdo5GfQjUSBA5vV/QPwPXu6sUye/o9uUKU5
oYFW0scZaEk4x/xO2bJe3/dI2boz1BEtwV6wCg8MQZugjn94t3EJ/hQNKQGckVTU
sqvtB7e9kmtKHkVwCa2kOqTEIdyO+gIExduK2uJg/3IeRrU8QICT0k+nSZEMYzmw
G/3gjxCnuaM9av2PK3jlhWZWgTc222uVJ4pb6tJQeMIPqIvJinnhzTiCoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLI6BKgwY3XK8natf3Q/kN/YRVYUMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc2pvRXFEQmpkY3J5ZHExX2RELVEzOWhGVmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADLWcasdPEGvonc/BIv5
TApbi0qIj3MNsdrO0A13zp8XvFlQNXrXsfaxA2Lu/coMvwcsywOHvClhckl86e+4
tuU+Hyes3NUcdFxu09DR63mGO3aX8sSJvyILn8R05tbSHq6jv0tyD+OKvxqKETMX
Vb6/Q2cfqP1QhoSHbh6vAZIXcQlJoQaGBXs6NfkljVnvd60fv3zT/bx/RrbLJinJ
+nKgM9zeHFBEZKCKcXU21Y5ueAC8kjhkLAYwe+VQAr5hjWwn1hYA4MANZfIRxURh
PIsHyUVVmS6vX8+sZcJB8ulkenjc7DnzlpJgj0l8SuFaYJjeoNb7A6FY29rvtIjB
6yo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:28 2025 by rpki-client