Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xxjvLWuo0XGggBjuU4mOcgd7zUg.roa
File: xxjvLWuo0XGggBjuU4mOcgd7zUg.roa (raw, json)
Hash identifier: pj92ZdVBVzo/iu5oFJ900d8zClFYg9GzGTvAmlQjmYQ=
Subject key identifier: C7:18:EF:2D:6B:A8:D1:71:A0:80:18:EE:53:89:8E:72:07:7B:CD:48
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A769CA69C7AE604B63EEFE7ABF898B1F8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xxjvLWuo0XGggBjuU4mOcgd7zUg.roa
Signing time: Fri 08 Sep 2023 21:04:52 +0000
ROA not before: Fri 08 Sep 2023 21:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:769c:1802/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:9c:a6:9c:7a:e6:04:b6:3e:ef:e7:ab:f8:98:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 21:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c718ef2d6ba8d171a08018ee53898e72077bcd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:5e:ce:08:03:2f:b1:ff:1f:d1:27:1a:98:
eb:86:0c:17:cb:89:be:0e:94:d6:99:e4:29:2d:ef:
e3:8f:06:df:06:fb:5c:c6:4b:da:30:2c:db:4d:90:
9b:bf:aa:b2:8a:0b:9e:b7:2f:c1:6d:c7:a5:49:7c:
b2:cb:fa:f8:cd:89:fa:a2:ba:b3:6a:ac:96:d1:de:
f6:27:36:49:d5:38:05:5d:4c:ad:22:a0:bd:f4:81:
2c:a5:b4:2e:2a:17:1f:e4:88:d8:a5:df:ac:8a:8e:
71:8a:d2:ca:26:42:25:dd:8a:46:51:bd:79:b1:7e:
af:cb:6b:a1:6b:2e:32:4a:df:a1:80:86:e9:d5:dc:
a0:8c:d9:d6:d9:67:33:eb:0e:29:13:6b:61:d9:04:
e1:d4:5e:d0:97:fa:f0:5e:0f:ec:ce:c9:35:80:43:
f4:d7:c2:a5:0e:98:db:ed:27:83:ca:05:87:a5:68:
98:39:7d:84:1e:8f:89:47:ad:b6:7d:69:89:77:8e:
15:e4:61:15:92:53:3c:f4:7d:cb:31:0d:58:c3:3e:
9d:b1:1e:28:e1:b5:4e:ff:22:32:67:3a:1b:17:cd:
c6:a5:06:ca:50:f7:06:81:ec:59:16:86:31:4b:3b:
6e:1d:8f:a7:46:23:a6:90:24:84:3b:e3:6d:b0:5e:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:EF:2D:6B:A8:D1:71:A0:80:18:EE:53:89:8E:72:07:7B:CD:48
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xxjvLWuo0XGggBjuU4mOcgd7zUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:63:1a:46:0b:93:72:2e:3c:79:1f:6f:88:2d:bb:3d:5a:85:
18:58:3f:5d:36:06:2b:c0:93:4d:12:f0:21:c6:30:9b:ec:9a:
71:a1:bf:64:3d:41:cf:82:8a:d4:49:9b:84:bf:19:db:a6:70:
81:13:49:ac:53:30:b6:50:53:02:4f:51:4f:12:f9:de:d6:5e:
97:23:13:1b:e7:2f:af:12:2d:47:6b:57:be:08:c9:8d:7b:5c:
a1:5c:00:19:28:7d:2e:d0:95:8a:a5:bd:c6:6b:77:03:71:fc:
f2:0a:51:6c:6a:c4:a6:be:fb:03:c2:97:21:eb:a4:2b:9b:b2:
49:b1:27:17:71:9d:41:9e:88:59:d8:c5:71:a8:36:72:a5:cc:
6c:be:34:0d:f4:be:40:22:1d:20:cd:98:f8:b1:d1:56:62:0f:
f6:ac:6a:58:42:4f:b0:19:70:9d:46:5e:00:fe:16:4b:7b:4d:
4f:56:66:03:4d:c7:26:ea:f2:2d:78:04:5c:85:d1:1c:aa:43:
61:4b:dd:83:fe:54:78:a0:a5:9b:a4:d8:4e:fb:6e:76:ad:6b:
a6:ff:82:7a:a4:50:e5:64:cd:87:1a:74:2a:ba:ce:d6:08:2f:
47:40:fa:4b:eb:cb:d1:ca:d4:cc:cc:7a:68:ec:37:ce:fd:03:
c0:00:7e:ca
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp2nKaceuYEtj7v56v4mLH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MjEwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzE4ZWYyZDZiYThkMTcxYTA4MDE4ZWU1Mzg5OGU3MjA3N2JjZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLNezggDL7H/H9EnGpjrhgwXy4m+
DpTWmeQpLe/jjwbfBvtcxkvaMCzbTZCbv6qyiguety/BbcelSXyyy/r4zYn6orqz
aqyW0d72JzZJ1TgFXUytIqC99IEspbQuKhcf5IjYpd+sio5xitLKJkIl3YpGUb15
sX6vy2uhay4ySt+hgIbp1dygjNnW2Wcz6w4pE2th2QTh1F7Ql/rwXg/szsk1gEP0
18KlDpjb7SeDygWHpWiYOX2EHo+JR622fWmJd44V5GEVklM89H3LMQ1Ywz6dsR4o
4bVO/yIyZzobF83GpQbKUPcGgexZFoYxSztuHY+nRiOmkCSEO+NtsF6wNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMcY7y1rqNFxoIAY7lOJjnIHe81IMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEveHhqdkxXdW8wWEdnZ0JqdVU0bU9jZ2Q3elVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADVjGkYLk3IuPHkfb4gt
uz1ahRhYP102BivAk00S8CHGMJvsmnGhv2Q9Qc+CitRJm4S/GdumcIETSaxTMLZQ
UwJPUU8S+d7WXpcjExvnL68SLUdrV74IyY17XKFcABkofS7QlYqlvcZrdwNx/PIK
UWxqxKa++wPClyHrpCubskmxJxdxnUGeiFnYxXGoNnKlzGy+NA30vkAiHSDNmPix
0VZiD/asalhCT7AZcJ1GXgD+Fkt7TU9WZgNNxybq8i14BFyF0RyqQ2FL3YP+VHig
pZuk2E77bnata6b/gnqkUOVkzYcadCq6ztYIL0dA+kvry9HK1MzMemjsN879A8AA
fso=
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:09 2025 by rpki-client