Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jbcGb_A31951BJBK49WdiZV2jc.roa
File: 9jbcGb_A31951BJBK49WdiZV2jc.roa (raw, json)
Hash identifier: 0QVqnIMJ2/hQVQHNfWge00h5ThVsa7GZReFvQl87x5c=
Subject key identifier: F6:36:DC:19:BF:C0:DF:5F:79:D4:12:41:2B:8F:56:76:26:55:DA:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B97A5EF1730B95583AE87423DA3BEA87A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jbcGb_A31951BJBK49WdiZV2jc.roa
Signing time: Sat 04 Nov 2023 00:05:16 +0000
ROA not before: Sat 04 Nov 2023 00:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:97a5:52f6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:97:a5:ef:17:30:b9:55:83:ae:87:42:3d:a3:be:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 00:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f636dc19bfc0df5f79d412412b8f56762655da37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:4a:c8:b8:9a:c1:75:55:32:94:29:82:ff:
3a:47:61:56:ae:ff:e4:ae:4a:c7:58:14:b1:87:02:
15:e6:3c:4a:3b:6c:25:c4:80:0d:f6:06:2a:3c:b7:
33:c4:4f:88:30:1f:00:93:89:2a:20:2d:12:41:b5:
6d:37:f9:b4:e0:2a:7a:14:7c:8a:31:84:85:5c:eb:
b5:83:b0:b3:76:d8:da:10:6c:80:2e:29:ff:10:f0:
9f:21:07:b5:37:01:e5:75:82:09:95:6d:45:fc:2b:
4a:e7:57:df:e9:77:91:e9:fa:c1:64:86:9f:9e:46:
73:e5:a1:29:b2:6a:57:21:38:fb:60:8e:9d:fa:9a:
3d:88:3f:e6:db:a9:00:eb:8c:88:af:86:a0:6d:8e:
bd:ce:56:09:4a:07:f1:6e:25:c8:19:62:a1:5d:14:
06:10:22:6d:27:fb:e9:c0:51:14:5f:2a:73:66:2e:
63:14:4e:5a:ff:9e:7d:79:64:12:eb:8b:33:82:53:
16:cb:73:db:e6:95:c1:c7:d6:1b:83:b3:e8:a2:a0:
54:b1:62:00:5a:b8:4d:ea:85:63:9d:cc:b2:d9:01:
41:68:be:fa:93:96:4f:74:02:ba:2c:bd:02:2d:3c:
77:cc:e4:43:67:9c:37:d0:1b:6c:69:07:52:b0:cd:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:DC:19:BF:C0:DF:5F:79:D4:12:41:2B:8F:56:76:26:55:DA:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jbcGb_A31951BJBK49WdiZV2jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:68:90:0b:23:65:0b:92:0a:86:94:3d:52:a7:27:3f:28:b4:
6d:43:87:85:b3:0f:bd:13:83:b1:a0:65:4b:fa:04:d1:88:fb:
02:02:a4:e0:e0:39:6e:35:80:9c:d9:fc:72:b9:07:bc:7f:6d:
82:ed:c4:98:c6:14:1d:c2:14:82:52:2e:fc:55:74:c7:86:2a:
7f:f6:41:b5:12:8b:e9:0b:8b:d3:0e:b7:11:ba:0e:7b:8f:e0:
69:63:61:d9:c5:82:29:68:6b:47:f1:57:c7:3a:3a:03:ca:e0:
7f:66:e1:2b:ad:f0:55:ae:07:73:4f:2c:9f:ca:66:16:2e:94:
19:c1:f7:11:95:64:16:72:5d:8d:b2:3d:cc:2f:b1:53:12:ed:
d6:65:ca:05:f5:4b:50:5b:5e:0f:59:d0:fe:9b:02:e1:92:bd:
f4:50:48:cf:63:11:8e:48:08:7b:5f:98:5b:a5:fb:ea:95:dc:
05:67:fd:28:9c:1e:31:df:df:a7:55:e8:75:d5:44:f6:d9:f1:
2f:f7:6f:b6:4e:48:60:18:7a:16:e4:09:dc:30:de:5d:ed:c7:
3d:b9:4b:c8:fc:04:a4:e9:be:9a:7e:17:f7:70:77:d5:d9:24:
79:60:78:85:b1:31:69:99:70:99:c3:1c:6c:80:fd:0f:f6:7c:
f4:b9:94:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuXpe8XMLlVg66HQj2jvqh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MDAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjM2ZGMxOWJmYzBkZjVmNzlkNDEyNDEyYjhmNTY3NjI2NTVkYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5VKyLiawXVVMpQpgv86R2FWrv/k
rkrHWBSxhwIV5jxKO2wlxIAN9gYqPLczxE+IMB8Ak4kqIC0SQbVtN/m04Cp6FHyK
MYSFXOu1g7CzdtjaEGyALin/EPCfIQe1NwHldYIJlW1F/CtK51ff6XeR6frBZIaf
nkZz5aEpsmpXITj7YI6d+po9iD/m26kA64yIr4agbY69zlYJSgfxbiXIGWKhXRQG
ECJtJ/vpwFEUXypzZi5jFE5a/559eWQS64szglMWy3Pb5pXBx9Ybg7PooqBUsWIA
WrhN6oVjncyy2QFBaL76k5ZPdAK6LL0CLTx3zORDZ5w30BtsaQdSsM0gfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPY23Bm/wN9fedQSQSuPVnYmVdo3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOWpiY0diX0EzMTk1MUJKQks0OVdkaVpWMmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALZokAsjZQuSCoaUPVKn
Jz8otG1Dh4WzD70Tg7GgZUv6BNGI+wICpODgOW41gJzZ/HK5B7x/bYLtxJjGFB3C
FIJSLvxVdMeGKn/2QbUSi+kLi9MOtxG6DnuP4GljYdnFgiloa0fxV8c6OgPK4H9m
4Sut8FWuB3NPLJ/KZhYulBnB9xGVZBZyXY2yPcwvsVMS7dZlygX1S1BbXg9Z0P6b
AuGSvfRQSM9jEY5ICHtfmFul++qV3AVn/SicHjHf36dV6HXVRPbZ8S/3b7ZOSGAY
ehbkCdww3l3txz25S8j8BKTpvpp+F/dwd9XZJHlgeIWxMWmZcJnDHGyA/Q/2fPS5
lAw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:15:30 2025 by rpki-client