Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lJ8tzhWwLlOXbc3F7Y1NEK52b9o.roa
File: lJ8tzhWwLlOXbc3F7Y1NEK52b9o.roa (raw, json)
Hash identifier: gu/Y4BXZQ9oX40jhpaG2AXGMkWP98gbFCNkG3+s/2XQ=
Subject key identifier: 94:9F:2D:CE:15:B0:2E:53:97:6D:CD:C5:ED:8D:4D:10:AE:76:6F:DA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A57B6ADF883CE0692BCCF4870A21089ED
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lJ8tzhWwLlOXbc3F7Y1NEK52b9o.roa
Signing time: Sat 02 Sep 2023 21:05:04 +0000
ROA not before: Sat 02 Sep 2023 21:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:57b5:c2d7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:b6:ad:f8:83:ce:06:92:bc:cf:48:70:a2:10:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 21:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949f2dce15b02e53976dcdc5ed8d4d10ae766fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:6f:21:bc:6f:e9:85:64:39:42:2f:87:22:
a3:18:c2:e1:ec:a6:7d:ea:36:9d:90:ec:d5:c9:ba:
e0:97:4a:05:18:13:d0:b3:33:7f:27:a3:25:62:34:
4c:f4:53:18:33:9a:89:47:48:26:e9:78:3f:be:ee:
a0:a4:ee:92:6c:56:1a:30:30:5a:ff:f2:90:06:75:
8e:2d:4b:35:6a:c0:c9:55:fc:d0:a9:ae:d6:93:1b:
e1:13:4c:37:25:70:86:e7:4d:39:23:f4:1e:0a:dd:
f0:26:81:66:df:cf:62:17:2a:cb:8f:bf:a3:e7:4d:
9b:30:42:42:b6:b9:1e:67:23:8d:11:08:30:12:9d:
61:d5:4f:aa:e2:f8:da:f1:f5:07:b7:62:76:1c:fe:
ad:14:96:d3:71:b2:18:30:5c:9c:20:01:c6:20:b2:
0b:ab:f7:60:2c:39:9e:62:44:62:da:26:96:60:81:
f3:d7:c9:03:8d:02:e8:27:51:3c:09:1a:1a:e9:69:
c3:75:cd:a7:8d:33:fd:eb:00:3a:e9:2e:e7:13:1b:
dc:0f:f8:18:1c:bc:a3:83:a9:3f:3e:1b:49:da:5e:
1b:35:da:3a:17:8c:38:a3:89:99:90:c7:50:4b:d1:
3b:e8:14:b1:53:8c:17:0b:ed:28:4d:5c:bb:f2:12:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:2D:CE:15:B0:2E:53:97:6D:CD:C5:ED:8D:4D:10:AE:76:6F:DA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lJ8tzhWwLlOXbc3F7Y1NEK52b9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ac:ce:6f:64:8d:15:53:bc:9a:53:a9:a7:01:9d:ab:86:5b:
63:ef:e2:dc:a3:6c:7f:e2:18:6d:bc:6d:28:37:b7:38:91:f9:
c5:bf:32:92:41:1c:8b:db:c0:58:cc:30:e5:4c:a0:ca:5e:18:
21:80:8a:c6:18:b3:77:62:09:bc:7c:a7:92:d8:0a:75:8b:be:
5d:58:df:d4:19:06:2a:0a:ef:d8:59:18:97:cb:ac:48:8e:59:
fc:e6:54:e1:75:77:fd:c9:e2:0e:78:36:22:df:9c:ba:b6:40:
38:d6:eb:b0:43:5a:7c:91:b9:3c:75:d0:55:be:ee:e2:cd:f3:
be:4e:eb:d5:13:48:c9:c9:f1:5e:4d:0e:0e:00:f8:e9:f8:d9:
0a:33:b3:53:b2:35:b0:c3:49:64:19:cd:e8:fc:d0:4a:b3:95:
82:bf:28:55:c5:4c:00:07:ad:d2:ff:81:c1:3f:d8:5c:62:fa:
10:35:27:5d:a3:bd:8f:60:be:0e:0f:fb:5c:7d:a9:c4:fa:62:
3b:11:96:df:e3:5b:d9:ad:a3:75:d2:42:aa:34:ad:08:c6:09:
21:73:af:9a:c6:1d:a1:bc:ae:91:b5:5c:4a:51:97:fd:1d:bc:
dd:42:9b:0a:93:6e:0b:ec:e2:b4:1c:2f:25:2d:fe:a5:94:3c:
01:1f:6a:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpXtq34g84GkrzPSHCiEIntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAyMjEwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDlmMmRjZTE1YjAyZTUzOTc2ZGNkYzVlZDhkNGQxMGFlNzY2ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9vIbxv6YVkOUIvhyKjGMLh7KZ9
6jadkOzVybrgl0oFGBPQszN/J6MlYjRM9FMYM5qJR0gm6Xg/vu6gpO6SbFYaMDBa
//KQBnWOLUs1asDJVfzQqa7WkxvhE0w3JXCG5005I/QeCt3wJoFm389iFyrLj7+j
502bMEJCtrkeZyONEQgwEp1h1U+q4vja8fUHt2J2HP6tFJbTcbIYMFycIAHGILIL
q/dgLDmeYkRi2iaWYIHz18kDjQLoJ1E8CRoa6WnDdc2njTP96wA66S7nExvcD/gY
HLyjg6k/PhtJ2l4bNdo6F4w4o4mZkMdQS9E76BSxU4wXC+0oTVy78hLuhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJSfLc4VsC5Tl23Nxe2NTRCudm/aMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvbEo4dHpoV3dMbE9YYmMzRjdZMU5FSzUyYjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+szm9kjRVTvJpTqacB
nauGW2Pv4tyjbH/iGG28bSg3tziR+cW/MpJBHIvbwFjMMOVMoMpeGCGAisYYs3di
Cbx8p5LYCnWLvl1Y39QZBioK79hZGJfLrEiOWfzmVOF1d/3J4g54NiLfnLq2QDjW
67BDWnyRuTx10FW+7uLN875O69UTSMnJ8V5NDg4A+On42Qozs1OyNbDDSWQZzej8
0EqzlYK/KFXFTAAHrdL/gcE/2Fxi+hA1J12jvY9gvg4P+1x9qcT6YjsRlt/jW9mt
o3XSQqo0rQjGCSFzr5rGHaG8rpG1XEpRl/0dvN1CmwqTbgvs4rQcLyUt/qWUPAEf
asI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:09 2025 by rpki-client