Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jL08BbJudq7HK1oe-VDvEiTxJtY.roa
File: jL08BbJudq7HK1oe-VDvEiTxJtY.roa (raw, json)
Hash identifier: eqZSd/Ivu6gt0+tFHfQNGzYsBmo2hYVMIXeW2wqIpCQ=
Subject key identifier: 8C:BD:3C:05:B2:6E:76:AE:C7:2B:5A:1E:F9:50:EF:12:24:F1:26:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3294D1F03B00658DF30B91A6C3C391F8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jL08BbJudq7HK1oe-VDvEiTxJtY.roa
Signing time: Sun 15 Oct 2023 09:04:55 +0000
ROA not before: Sun 15 Oct 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3294:79a9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:32:94:d1:f0:3b:00:65:8d:f3:0b:91:a6:c3:c3:91:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cbd3c05b26e76aec72b5a1ef950ef1224f126d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:4b:6f:e6:1c:e4:83:94:58:c9:32:7f:67:
9c:8a:c8:6d:3d:d6:fc:8d:64:19:25:57:53:75:3b:
09:24:1e:c5:f1:43:8c:7d:85:e2:cf:35:9a:4c:0c:
3f:14:64:2d:77:d0:ed:7e:1b:df:c3:84:16:78:40:
88:71:0b:fb:f6:e0:de:ef:fc:af:11:d1:1e:4e:13:
cc:a5:75:34:8f:91:ce:2a:7f:27:90:c0:66:d7:e3:
46:45:16:73:98:f7:f1:2d:56:08:d0:7a:20:28:0b:
f2:44:8c:1d:a8:c1:fb:0b:6b:27:15:f5:f9:8b:43:
33:c3:2f:01:d8:57:4f:db:79:f8:da:14:57:6c:7a:
3e:89:ce:4b:16:18:7a:de:5e:aa:03:e6:9d:83:c5:
67:e5:43:44:d9:d7:72:e5:61:7b:b1:2f:12:b3:cf:
b9:20:80:2f:81:a2:0e:ec:8c:a9:9c:4d:1b:1b:64:
f7:52:2a:b7:88:9c:50:d7:d4:cd:4b:37:96:1f:a1:
ba:20:79:d2:6d:ae:b1:de:61:76:a3:32:fc:2f:8d:
fa:b2:e1:d1:18:de:ce:50:24:69:39:10:bf:12:f6:
d5:32:2a:ff:e9:f8:1b:f2:67:ec:8a:d2:e3:21:99:
e7:8a:fe:f5:a7:fa:16:ae:ab:89:71:fd:9a:f3:11:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:3C:05:B2:6E:76:AE:C7:2B:5A:1E:F9:50:EF:12:24:F1:26:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jL08BbJudq7HK1oe-VDvEiTxJtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:72:ba:9a:ca:a2:6e:2d:fd:12:12:07:9f:c9:8a:ae:56:6c:
72:e3:ee:d1:28:15:4f:53:de:48:64:e8:82:ff:2c:01:6b:e1:
b4:6f:66:66:d6:c4:33:9a:02:96:e3:5b:22:b7:42:c0:32:5b:
1e:7c:7f:1f:82:98:e2:9d:14:d5:54:07:26:23:5d:fc:1a:ca:
b8:53:44:ef:46:97:0a:b0:cf:a2:8f:79:66:50:c7:ae:e9:46:
2d:63:55:f1:d1:b8:31:1e:3f:3f:e4:4e:f1:3d:55:bf:00:52:
7e:54:46:73:63:99:47:24:02:18:36:c7:6f:90:65:2d:2b:08:
7b:e0:f0:84:14:be:4b:f1:a5:3a:57:53:14:9b:f6:38:ad:6f:
9f:bb:6f:d7:f8:12:a7:fd:51:e2:80:7e:39:92:bf:26:63:21:
30:68:bf:3b:e9:cb:64:1f:7b:57:4b:79:77:ee:15:5b:7a:a5:
6c:1d:63:46:dd:36:31:c2:61:67:9f:71:49:7d:af:8a:41:a2:
04:09:e2:86:9a:04:6c:22:90:1c:3a:b9:89:28:0b:4a:07:c7:
06:2f:ca:4d:8a:cd:c8:19:ef:a5:9e:98:08:22:da:ce:17:f0:
c0:ff:7b:a9:17:43:1a:93:d5:1a:86:2e:01:07:e6:8d:99:60:
66:b2:bf:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsylNHwOwBljfMLkabDw5H4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE1MDkwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2JkM2MwNWIyNmU3NmFlYzcyYjVhMWVmOTUwZWYxMjI0ZjEyNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BJLb+Yc5IOUWMkyf2ecishtPdb8
jWQZJVdTdTsJJB7F8UOMfYXizzWaTAw/FGQtd9Dtfhvfw4QWeECIcQv79uDe7/yv
EdEeThPMpXU0j5HOKn8nkMBm1+NGRRZzmPfxLVYI0HogKAvyRIwdqMH7C2snFfX5
i0Mzwy8B2FdP23n42hRXbHo+ic5LFhh63l6qA+adg8Vn5UNE2ddy5WF7sS8Ss8+5
IIAvgaIO7IypnE0bG2T3Uiq3iJxQ19TNSzeWH6G6IHnSba6x3mF2ozL8L436suHR
GN7OUCRpORC/EvbVMir/6fgb8mfsitLjIZnniv71p/oWrquJcf2a8xFrzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIy9PAWybnauxytaHvlQ7xIk8SbWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvakwwOEJiSnVkcTdISzFvZS1WRHZFaVR4SnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHByuprKom4t/RISB5/J
iq5WbHLj7tEoFU9T3khk6IL/LAFr4bRvZmbWxDOaApbjWyK3QsAyWx58fx+CmOKd
FNVUByYjXfwayrhTRO9Glwqwz6KPeWZQx67pRi1jVfHRuDEePz/kTvE9Vb8AUn5U
RnNjmUckAhg2x2+QZS0rCHvg8IQUvkvxpTpXUxSb9jitb5+7b9f4Eqf9UeKAfjmS
vyZjITBovzvpy2Qfe1dLeXfuFVt6pWwdY0bdNjHCYWefcUl9r4pBogQJ4oaaBGwi
kBw6uYkoC0oHxwYvyk2KzcgZ76WemAgi2s4X8MD/e6kXQxqT1RqGLgEH5o2ZYGay
vy8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:46:17 2025 by rpki-client