Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI8iOqUqVR2wFh2OS6VpsNxKTak.roa
File: JI8iOqUqVR2wFh2OS6VpsNxKTak.roa (raw, json)
Hash identifier: 0tHmVY3oAymgS2aYdwmZGj6UN4ZSlfu1/vMtvTY5iEg=
Subject key identifier: 24:8F:22:3A:A5:2A:55:1D:B0:16:1D:8E:4B:A5:69:B0:DC:4A:4D:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF759887C0AC8C8DE806BEFD39EFE591D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI8iOqUqVR2wFh2OS6VpsNxKTak.roa
Signing time: Wed 22 Nov 2023 14:05:21 +0000
ROA not before: Wed 22 Nov 2023 14:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:f758:a405/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:59:88:7c:0a:c8:c8:de:80:6b:ef:d3:9e:fe:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 14:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248f223aa52a551db0161d8e4ba569b0dc4a4da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:68:8c:22:e4:48:98:0d:ef:66:27:02:c9:
1e:f0:8d:24:44:b9:c7:68:ef:fa:c2:6e:94:3c:83:
41:c6:ab:7e:ff:a7:80:fc:23:1d:8f:3c:fe:51:e5:
5a:a5:2e:58:4f:10:a2:f9:12:de:23:80:fb:9e:11:
64:26:d8:12:48:11:6c:14:81:cf:d9:a4:d0:1e:e6:
6f:27:4e:b4:aa:3c:dc:2a:fc:33:b1:55:12:df:18:
4f:7d:87:5c:bd:e2:01:11:97:c0:ba:ee:11:04:68:
df:20:1b:cb:e7:09:e3:62:26:e0:b3:09:04:e0:a7:
6d:81:fa:39:39:e8:66:2f:c8:4e:ed:de:fc:d9:16:
0a:fd:4a:84:a8:a4:f6:3f:23:5d:e9:be:25:4a:aa:
cc:f7:ec:a3:d9:58:9c:31:9f:1e:d9:74:50:1b:d0:
18:44:2f:71:a1:e6:57:b4:50:21:b7:ed:80:f6:1d:
df:cb:c1:0e:26:05:35:00:cf:c0:4c:bd:c5:2b:c0:
24:da:5a:99:fc:a9:55:a0:f8:0d:af:0c:74:db:14:
37:cd:50:c0:df:1c:36:88:b0:c4:46:01:32:f2:69:
8a:f2:ea:ea:07:af:2c:5b:7a:f6:34:64:36:63:7e:
90:07:a7:39:db:0c:0b:ba:ad:14:50:ed:c7:b5:c4:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:22:3A:A5:2A:55:1D:B0:16:1D:8E:4B:A5:69:B0:DC:4A:4D:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI8iOqUqVR2wFh2OS6VpsNxKTak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:8b:a1:2f:7c:e1:ed:28:d0:91:4a:81:d7:ed:c3:ea:3e:af:
21:8e:07:4d:7e:07:b2:bf:c8:59:aa:d7:c3:9a:a8:0b:6c:67:
6c:7f:c2:6a:5e:15:0c:f9:53:a5:b0:87:a0:68:cf:d9:34:c3:
61:f7:92:53:8f:dd:8f:48:36:e7:46:0b:69:44:f6:02:20:b0:
eb:06:2c:6e:29:ad:a1:47:56:27:87:5a:20:37:3b:0a:eb:b3:
e7:c6:92:18:41:b5:97:60:8e:ed:d6:4b:05:04:36:10:b4:e9:
dd:13:80:92:b6:66:8e:ae:d7:4a:9f:8d:8c:cc:57:3e:ed:fd:
52:e3:ee:90:0c:6f:88:e3:1d:34:44:54:ee:26:52:03:20:58:
95:0e:5a:8e:66:e2:77:a6:19:4c:11:07:a2:f8:d2:23:f0:c6:
4f:99:5d:6d:b1:88:2d:e9:0b:24:81:b1:d5:ab:23:89:e0:09:
5a:a1:16:89:5b:16:c7:b6:86:5d:41:81:64:a5:c2:e9:db:93:
68:51:61:70:00:72:76:f3:40:ba:6f:46:a6:88:76:c3:12:4d:
5e:8a:5b:7c:1d:11:53:af:1e:2c:ec:78:a2:c5:db:ed:dc:55:
fc:75:88:63:9d:3f:75:30:e4:6d:c9:15:e9:e2:7e:21:7e:77:
14:d3:84:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv3WYh8CsjI3oBr79Oe/lkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIyMTQwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDhmMjIzYWE1MmE1NTFkYjAxNjFkOGU0YmE1NjliMGRjNGE0ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXFojCLkSJgN72YnAske8I0kRLnH
aO/6wm6UPINBxqt+/6eA/CMdjzz+UeVapS5YTxCi+RLeI4D7nhFkJtgSSBFsFIHP
2aTQHuZvJ060qjzcKvwzsVUS3xhPfYdcveIBEZfAuu4RBGjfIBvL5wnjYibgswkE
4Kdtgfo5OehmL8hO7d782RYK/UqEqKT2PyNd6b4lSqrM9+yj2VicMZ8e2XRQG9AY
RC9xoeZXtFAht+2A9h3fy8EOJgU1AM/ATL3FK8Ak2lqZ/KlVoPgNrwx02xQ3zVDA
3xw2iLDERgEy8mmK8urqB68sW3r2NGQ2Y36QB6c52wwLuq0UUO3HtcSqxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCSPIjqlKlUdsBYdjkulabDcSk2pMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSkk4aU9xVXFWUjJ3RmgyT1M2VnBzTnhLVGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEKLoS984e0o0JFKgdft
w+o+ryGOB01+B7K/yFmq18OaqAtsZ2x/wmpeFQz5U6Wwh6Boz9k0w2H3klOP3Y9I
NudGC2lE9gIgsOsGLG4praFHVieHWiA3Owrrs+fGkhhBtZdgju3WSwUENhC06d0T
gJK2Zo6u10qfjYzMVz7t/VLj7pAMb4jjHTREVO4mUgMgWJUOWo5m4nemGUwRB6L4
0iPwxk+ZXW2xiC3pCySBsdWrI4ngCVqhFolbFse2hl1BgWSlwunbk2hRYXAAcnbz
QLpvRqaIdsMSTV6KW3wdEVOvHizseKLF2+3cVfx1iGOdP3Uw5G3JFenifiF+dxTT
hMM=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:20:18 2025 by rpki-client