Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j5d_M5MU0gIhSe73i-OljiSNv6U.roa
File: j5d_M5MU0gIhSe73i-OljiSNv6U.roa (raw, json)
Hash identifier: h+fumjKtRSSIvopfQ/18mwZuNxN8L6C1qv1QwnIty9A=
Subject key identifier: 8F:97:7F:33:93:14:D2:02:21:49:EE:F7:8B:E3:A5:8E:24:8D:BF:A5
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A703324065CF74702DD436AD310D22AE9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j5d_M5MU0gIhSe73i-OljiSNv6U.roa
Signing time: Thu 07 Sep 2023 15:11:54 +0000
ROA not before: Thu 07 Sep 2023 15:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:33:24:06:5c:f7:47:02:dd:43:6a:d3:10:d2:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 15:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f977f339314d2022149eef78be3a58e248dbfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:68:f0:95:d9:81:20:8b:3b:62:42:bc:32:
1e:cd:86:d2:16:6c:9a:fa:fc:49:57:a6:e5:fb:2e:
48:dd:f9:df:8d:06:bc:66:c4:07:f0:1d:36:97:a0:
92:59:9c:de:8d:83:37:f9:ad:35:08:1b:c0:19:3a:
59:fb:2c:a4:f6:bb:2b:a1:7a:f0:54:d3:de:6d:8e:
21:bb:8b:56:8e:0c:f9:87:67:d1:2d:b2:4a:c2:c1:
24:55:2f:cb:57:ab:ef:4b:05:e0:78:7c:b6:9f:6a:
22:6d:6a:a7:c7:a6:6b:52:b5:56:c8:9e:3c:38:39:
26:30:8b:bb:ce:3c:03:aa:c1:b6:d4:e9:f2:06:fc:
95:94:30:4d:a8:90:51:4b:af:4d:7e:ed:04:5a:6a:
78:af:5b:4b:27:75:34:33:23:d1:67:e1:22:f5:6f:
51:6b:92:3b:66:55:f0:f3:a0:50:12:52:44:f4:e8:
b0:cb:4c:8c:80:81:90:ab:4a:71:90:73:ff:ce:7e:
28:b8:06:9c:1a:7f:2e:87:2e:35:be:06:57:65:d8:
56:4e:fc:39:73:33:36:40:ce:c2:2c:bf:dc:54:a1:
a2:7f:34:01:74:94:cf:e7:20:7d:13:1b:85:a3:60:
b0:fe:ce:c2:aa:01:90:7c:6d:7b:6d:58:f1:5a:68:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:7F:33:93:14:D2:02:21:49:EE:F7:8B:E3:A5:8E:24:8D:BF:A5
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j5d_M5MU0gIhSe73i-OljiSNv6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c7:14:f4:1f:c3:d6:0a:8e:6b:65:2c:15:51:99:b3:e3:5c:
21:70:f0:2d:0b:cb:61:6b:6b:0c:0d:66:8e:57:59:f9:98:94:
6b:d9:00:5c:0c:a3:09:46:c9:f2:63:98:68:d6:a0:38:0d:dc:
de:62:95:ee:7c:3b:f0:a9:59:97:3f:17:95:8d:78:48:c4:d6:
4d:90:f9:36:97:26:cf:9f:19:68:e0:99:47:8c:0b:d8:b3:ca:
5f:b2:ae:9d:5c:fc:3e:f9:6e:ad:dc:94:0f:00:d5:9e:e7:09:
27:51:59:49:90:cc:07:dd:ee:fb:64:1c:19:4a:74:84:55:5e:
49:8e:44:f3:1e:d2:ed:e0:f8:d9:a0:60:b6:71:52:99:cf:81:
b7:0c:51:91:fe:64:25:9e:dd:cc:94:50:bb:58:dc:ac:ac:32:
cb:e0:d9:82:c1:a6:58:e5:14:da:4e:5d:aa:ef:d4:26:e2:24:
8a:5e:30:ab:24:ba:4d:e9:8b:64:53:4c:39:89:c6:2a:c9:11:
04:cf:53:05:3e:a7:22:c4:46:be:b8:a8:c3:7d:0a:d6:38:ad:
6d:42:69:2d:6a:a0:24:83:73:78:96:1f:7f:3c:da:1d:c1:c8:
c1:3e:97:30:ad:a2:10:b9:57:50:47:2a:7c:66:3e:c5:15:33:
e8:2b:d5:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpwMyQGXPdHAt1DatMQ0irpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA3MTUxMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjk3N2YzMzkzMTRkMjAyMjE0OWVlZjc4YmUzYTU4ZTI0OGRiZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptpo8JXZgSCLO2JCvDIezYbSFmya
+vxJV6bl+y5I3fnfjQa8ZsQH8B02l6CSWZzejYM3+a01CBvAGTpZ+yyk9rsroXrw
VNPebY4hu4tWjgz5h2fRLbJKwsEkVS/LV6vvSwXgeHy2n2oibWqnx6ZrUrVWyJ48
ODkmMIu7zjwDqsG21OnyBvyVlDBNqJBRS69Nfu0EWmp4r1tLJ3U0MyPRZ+Ei9W9R
a5I7ZlXw86BQElJE9Oiwy0yMgIGQq0pxkHP/zn4ouAacGn8uhy41vgZXZdhWTvw5
czM2QM7CLL/cVKGifzQBdJTP5yB9ExuFo2Cw/s7CqgGQfG17bVjxWmg3xwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI+XfzOTFNICIUnu94vjpY4kjb+lMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvajVkX001TVUwZ0loU2U3M2ktT2xqaVNOdjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG3HFPQfw9YKjmtlLBVR
mbPjXCFw8C0Ly2FrawwNZo5XWfmYlGvZAFwMowlGyfJjmGjWoDgN3N5ile58O/Cp
WZc/F5WNeEjE1k2Q+TaXJs+fGWjgmUeMC9izyl+yrp1c/D75bq3clA8A1Z7nCSdR
WUmQzAfd7vtkHBlKdIRVXkmORPMe0u3g+NmgYLZxUpnPgbcMUZH+ZCWe3cyUULtY
3KysMsvg2YLBpljlFNpOXarv1CbiJIpeMKskuk3pi2RTTDmJxirJEQTPUwU+pyLE
Rr64qMN9CtY4rW1CaS1qoCSDc3iWH3882h3ByME+lzCtohC5V1BHKnxmPsUVM+gr
1dU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:20 2025 by rpki-client