Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Jvo_IylbQreFLH8MLc6vC_Eo8go.roa
File: Jvo_IylbQreFLH8MLc6vC_Eo8go.roa (raw, json)
Hash identifier: A1uhL8EzIivjbMcBn34Xpqd1UImiTmsmNVQRK1sJBHs=
Subject key identifier: 26:FA:3F:23:29:5B:42:B7:85:2C:7F:0C:2D:CE:AF:0B:F1:28:F2:0A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB6208856AA833A0781926BCE8EAEC9D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Jvo_IylbQreFLH8MLc6vC_Eo8go.roa
Signing time: Sat 17 Feb 2024 08:13:21 +0000
ROA not before: Sat 17 Feb 2024 08:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:20:88:56:aa:83:3a:07:81:92:6b:ce:8e:ae:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 08:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fa3f23295b42b7852c7f0c2dceaf0bf128f20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:d8:55:1d:48:f1:4b:96:d2:09:91:06:9b:
c1:41:55:16:b6:e0:9d:85:d1:11:ff:a3:fc:f0:eb:
dc:e8:3c:0a:84:9e:22:c1:0d:50:85:1c:f3:7c:fb:
3d:78:83:64:8e:f7:61:0f:bc:f9:f2:fb:ef:ef:c6:
83:c7:7a:79:51:26:3e:b6:56:f7:0a:bd:d7:74:16:
ca:b5:42:04:4a:0a:63:aa:74:ec:ad:60:e5:da:a3:
a3:5b:0d:a5:21:4f:14:25:8d:76:72:9d:e0:c9:3a:
c8:cf:cd:b0:a9:f5:57:7d:20:94:b5:ef:21:06:d7:
4e:1f:51:fa:0c:90:16:87:c0:bd:3f:e9:04:a3:81:
45:ba:f0:79:ba:33:1e:8d:1a:3e:08:12:15:c9:54:
2e:ca:b9:c9:92:f3:d4:4e:61:ec:94:1e:f2:84:1b:
48:38:55:26:40:57:81:1e:22:ab:b8:e5:ad:a3:7d:
70:92:f3:a4:af:2f:9f:ca:32:fd:93:75:3c:3d:60:
1f:1e:9c:cd:83:5e:01:44:bb:2e:6f:3c:34:ee:f0:
8a:82:14:28:57:d4:a4:5c:87:1f:64:01:4e:92:ee:
50:a0:c7:50:41:2f:12:6d:db:55:af:93:ab:d3:2c:
5e:a3:25:da:4c:91:56:0e:4a:a3:dd:e5:53:12:a0:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:3F:23:29:5B:42:B7:85:2C:7F:0C:2D:CE:AF:0B:F1:28:F2:0A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Jvo_IylbQreFLH8MLc6vC_Eo8go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:5a:9d:ff:ab:67:14:28:e0:d9:f1:14:59:48:ba:a9:69:69:
44:37:53:e8:1b:d1:dd:cc:b2:c1:23:15:2d:ff:01:9e:68:cf:
8d:cb:cb:31:83:a5:6b:1f:5c:79:42:54:66:c1:83:75:9e:7f:
e4:f2:e9:63:66:db:c4:15:85:f5:ee:cb:c1:d7:4d:97:05:35:
24:dd:5c:92:80:99:23:c0:d0:a3:dc:05:43:2c:b8:8a:a4:bb:
ce:b7:c0:c5:68:b0:8b:5d:a5:9a:ee:20:05:4c:db:6a:d4:fa:
40:fc:b2:bf:1e:f2:51:f2:0d:44:bd:40:39:f0:ec:6e:14:9b:
52:63:91:58:f3:78:68:f4:8b:59:64:aa:32:08:f0:de:e9:5a:
72:24:93:d8:8e:58:c6:b2:95:29:d2:c7:07:ec:ba:43:f9:4d:
a2:fd:d4:f1:8d:4a:70:86:cf:63:a6:bd:ad:21:d1:20:19:2a:
5f:f0:cd:ab:cc:a9:69:58:08:2f:53:47:4a:83:96:7c:d4:76:
42:20:d4:17:2c:88:cc:36:a6:e0:1e:6b:12:ad:1f:b6:e4:2a:
80:33:35:3b:29:91:b6:36:ce:69:34:d6:22:38:98:cc:54:ce:
d1:de:28:62:12:83:cc:02:be:89:17:4d:26:b0:8c:e1:f3:08:
f4:56:83:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY22IIhWqoM6B4GSa86OrsnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE3MDgxMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmZhM2YyMzI5NWI0MmI3ODUyYzdmMGMyZGNlYWYwYmYxMjhmMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPPYVR1I8UuW0gmRBpvBQVUWtuCd
hdER/6P88Ovc6DwKhJ4iwQ1QhRzzfPs9eINkjvdhD7z58vvv78aDx3p5USY+tlb3
Cr3XdBbKtUIESgpjqnTsrWDl2qOjWw2lIU8UJY12cp3gyTrIz82wqfVXfSCUte8h
BtdOH1H6DJAWh8C9P+kEo4FFuvB5ujMejRo+CBIVyVQuyrnJkvPUTmHslB7yhBtI
OFUmQFeBHiKruOWto31wkvOkry+fyjL9k3U8PWAfHpzNg14BRLsubzw07vCKghQo
V9SkXIcfZAFOku5QoMdQQS8SbdtVr5Or0yxeoyXaTJFWDkqj3eVTEqDRWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCb6PyMpW0K3hSx/DC3OrwvxKPIKMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSnZvX0l5bGJRcmVGTEg4TUxjNnZDX0VvOGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGNanf+rZxQo4NnxFFlI
uqlpaUQ3U+gb0d3MssEjFS3/AZ5oz43LyzGDpWsfXHlCVGbBg3Wef+Ty6WNm28QV
hfXuy8HXTZcFNSTdXJKAmSPA0KPcBUMsuIqku863wMVosItdpZruIAVM22rU+kD8
sr8e8lHyDUS9QDnw7G4Um1JjkVjzeGj0i1lkqjII8N7pWnIkk9iOWMaylSnSxwfs
ukP5TaL91PGNSnCGz2Omva0h0SAZKl/wzavMqWlYCC9TR0qDlnzUdkIg1BcsiMw2
puAeaxKtH7bkKoAzNTspkbY2zmk01iI4mMxUztHeKGISg8wCvokXTSawjOHzCPRW
gyk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:25:22 2025 by rpki-client