Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_I4Ka-WOsho57hQeIN_ZY2dvAU.roa
File: 0_I4Ka-WOsho57hQeIN_ZY2dvAU.roa (raw, json)
Hash identifier: bU1AUdY7TNSvyuZXvRiKCGh3OYvVEttI/xcibNeQFkA=
Subject key identifier: D3:F2:38:29:AF:96:3A:C8:68:E7:B8:50:78:83:7F:65:8D:9D:BC:05
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2E811E575F3D183405631E8BDA5CEE2F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_I4Ka-WOsho57hQeIN_ZY2dvAU.roa
Signing time: Sat 14 Oct 2023 14:04:55 +0000
ROA not before: Sat 14 Oct 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2e80:a006/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:81:1e:57:5f:3d:18:34:05:63:1e:8b:da:5c:ee:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f23829af963ac868e7b85078837f658d9dbc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:cb:9a:d8:82:93:f4:a1:f9:08:a1:00:fe:
bb:e7:03:6a:fe:30:d4:4f:2d:fd:0b:97:4b:e8:ff:
b4:b1:0f:f3:73:73:d2:13:0a:04:9f:3d:7f:69:a7:
c3:61:b8:32:20:27:d9:9f:c1:18:a7:e2:7f:e2:72:
98:8e:26:f9:26:62:e4:65:bc:24:54:1a:d6:61:90:
17:28:f0:8a:f2:3e:e1:ae:90:47:93:ae:42:33:84:
1c:c9:d8:dc:31:df:f5:61:73:d8:d7:61:22:39:39:
12:8c:71:3b:38:ff:4f:2d:1e:d5:19:3a:7f:e0:40:
ed:14:9e:16:25:86:c2:17:55:71:46:bb:6d:89:21:
8b:11:3a:aa:99:ef:91:c9:c1:7d:6b:f9:e0:cd:c1:
7b:ba:81:85:bc:d7:65:e0:3a:5d:fb:bc:b3:b1:bc:
fc:bd:88:22:d7:f1:2f:8f:63:d4:35:12:de:4f:65:
55:51:a9:a0:79:cb:ea:42:f7:1d:0f:d2:e6:e7:0f:
1e:65:27:03:20:1b:61:10:0b:b3:18:ae:5a:b8:49:
3f:7c:e8:88:b9:b9:33:b2:2c:48:61:ba:94:f1:82:
34:02:4d:d2:48:45:c1:e3:ce:a7:9b:e5:36:92:b6:
f5:26:47:b8:5e:09:72:cd:27:0d:02:2f:0c:e7:76:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:38:29:AF:96:3A:C8:68:E7:B8:50:78:83:7F:65:8D:9D:BC:05
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_I4Ka-WOsho57hQeIN_ZY2dvAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:bb:a0:17:75:fc:24:04:2b:a1:ec:94:e5:e1:fc:de:2d:f7:
81:fa:b6:3d:bc:81:12:75:04:4d:22:6a:77:b2:71:24:a5:63:
ab:11:14:47:31:d2:4c:6d:d0:a9:3f:42:36:cc:1e:41:7d:5f:
a2:73:7a:2d:9b:82:7d:97:34:c1:a6:33:2d:af:6d:e4:20:83:
98:d3:3c:12:1a:2e:90:58:58:e9:3e:f8:09:2e:2c:dd:7a:da:
86:18:63:0c:b3:8f:7a:6a:dd:12:a4:a4:a0:96:91:f0:2b:8a:
0b:e9:62:7e:bb:65:03:57:54:23:ba:53:ab:69:27:bc:e5:d7:
ba:a0:60:9a:5d:39:ae:24:43:81:20:5e:71:5c:bc:65:bb:16:
a7:cd:27:5f:41:ea:34:da:6c:a5:30:e5:02:f0:07:01:c8:79:
18:99:f5:94:d5:32:19:cb:44:71:7e:4b:1d:af:8f:a8:9d:f3:
b2:b4:83:75:e8:73:53:29:93:aa:7d:67:bd:9e:9e:e6:15:a8:
03:11:59:6b:0c:32:e2:9c:8a:91:50:f7:2e:a3:25:3a:17:04:
96:a4:d7:5c:a0:52:35:ad:41:b5:7a:22:ba:14:35:46:46:46:
f3:55:8c:d9:25:98:5c:ea:fa:15:24:86:c8:cb:bd:fd:dd:78:
e5:25:df:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsugR5XXz0YNAVjHovaXO4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTQwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2YyMzgyOWFmOTYzYWM4NjhlN2I4NTA3ODgzN2Y2NThkOWRiYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnDLmtiCk/Sh+QihAP675wNq/jDU
Ty39C5dL6P+0sQ/zc3PSEwoEnz1/aafDYbgyICfZn8EYp+J/4nKYjib5JmLkZbwk
VBrWYZAXKPCK8j7hrpBHk65CM4QcydjcMd/1YXPY12EiOTkSjHE7OP9PLR7VGTp/
4EDtFJ4WJYbCF1VxRrttiSGLETqqme+RycF9a/ngzcF7uoGFvNdl4Dpd+7yzsbz8
vYgi1/Evj2PUNRLeT2VVUamgecvqQvcdD9Lm5w8eZScDIBthEAuzGK5auEk/fOiI
ubkzsixIYbqU8YI0Ak3SSEXB486nm+U2krb1Jke4XglyzScNAi8M53bpkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNPyOCmvljrIaOe4UHiDf2WNnbwFMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMF9JNEthLVdPc2hvNTdoUWVJTl9aWTJkdkFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGy7oBd1/CQEK6HslOXh
/N4t94H6tj28gRJ1BE0ianeycSSlY6sRFEcx0kxt0Kk/QjbMHkF9X6Jzei2bgn2X
NMGmMy2vbeQgg5jTPBIaLpBYWOk++AkuLN162oYYYwyzj3pq3RKkpKCWkfArigvp
Yn67ZQNXVCO6U6tpJ7zl17qgYJpdOa4kQ4EgXnFcvGW7FqfNJ19B6jTabKUw5QLw
BwHIeRiZ9ZTVMhnLRHF+Sx2vj6id87K0g3Xoc1Mpk6p9Z72enuYVqAMRWWsMMuKc
ipFQ9y6jJToXBJak11ygUjWtQbV6IroUNUZGRvNVjNklmFzq+hUkhsjLvf3deOUl
33E=
-----END CERTIFICATE-----
Generated at Tue May 13 02:19:25 2025 by rpki-client