Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_plaNyLY7QJ9KUqoGFOHWAeUWM.roa
File: 0_plaNyLY7QJ9KUqoGFOHWAeUWM.roa (raw, json)
Hash identifier: 5tQ/3J1vzCywV/LxgJUWiDO/4l+UKJ9GIRmjbgsOUkI=
Subject key identifier: D3:FA:65:68:DC:8B:63:B4:09:F4:A5:2A:A0:61:4E:1D:60:1E:51:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1F833B272BABEC7D336F57E5C06AAA2B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_plaNyLY7QJ9KUqoGFOHWAeUWM.roa
Signing time: Wed 11 Oct 2023 16:12:55 +0000
ROA not before: Wed 11 Oct 2023 16:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:83:3b:27:2b:ab:ec:7d:33:6f:57:e5:c0:6a:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 16:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3fa6568dc8b63b409f4a52aa0614e1d601e5163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:bf:23:c0:1c:69:37:29:6c:af:e2:ec:8e:
4f:01:eb:67:00:f9:5b:44:16:70:8b:9d:f6:31:05:
f7:ad:e1:d4:4f:6e:97:98:29:26:93:a6:2a:84:89:
18:02:b9:90:9a:70:07:6c:0e:e8:c7:30:56:32:01:
4b:86:21:a3:c0:c1:21:9b:19:ee:6b:12:bf:83:ac:
37:43:4e:3d:8b:75:8f:68:50:7d:35:43:2a:93:34:
c7:34:71:12:3b:4b:5c:d6:a8:d1:28:76:9d:33:3e:
46:e0:69:d9:97:7a:57:85:53:13:8d:05:06:cb:6a:
2c:ce:28:3f:59:27:36:8e:24:03:9d:ac:cd:df:10:
45:be:9e:4a:80:f7:08:4b:ae:d2:bb:c4:c7:85:96:
02:d2:16:a2:60:81:c5:e2:5a:36:c0:3a:85:34:91:
33:2a:ff:c8:fc:eb:86:5a:89:52:07:4a:27:68:69:
ec:d1:2a:01:98:80:0e:ea:33:88:e5:ab:1f:8f:55:
91:02:0d:28:75:9c:ca:65:62:42:1b:74:fe:45:f1:
da:46:be:72:18:dd:ff:dc:e2:4a:de:c7:24:4d:e3:
dc:c2:1d:ab:8d:c4:2e:55:6d:fd:e8:74:04:31:48:
42:0c:76:cf:13:04:37:98:72:3f:37:1f:32:a9:c7:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:65:68:DC:8B:63:B4:09:F4:A5:2A:A0:61:4E:1D:60:1E:51:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_plaNyLY7QJ9KUqoGFOHWAeUWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:5c:37:2a:bc:27:4b:a6:fb:53:96:70:14:8d:81:34:3f:cc:
3c:85:09:35:28:4f:5c:d1:35:60:48:02:30:4f:69:f8:1b:c6:
c8:ef:db:e5:69:b7:81:28:b4:ee:7d:ac:23:c5:a0:5c:8c:15:
3a:93:f7:b5:ec:44:e6:d6:26:40:21:bd:c3:5e:15:82:78:1e:
15:75:6e:e7:66:cd:5a:06:eb:fd:7c:85:09:46:39:cb:9f:ee:
0a:6f:85:3c:24:c3:30:ff:16:d3:ff:11:f5:fa:b3:f5:6e:0d:
32:d5:35:a6:25:a8:7c:95:16:0c:cc:5f:e1:d3:c8:b7:bd:a8:
43:48:f9:83:47:a3:95:94:72:b3:36:3e:44:21:4c:dd:db:58:
8b:86:bd:62:01:61:af:88:97:2c:ea:eb:d3:13:5d:62:22:7f:
49:71:9f:67:e7:32:01:91:76:e6:d1:c7:f2:b0:77:c6:66:5d:
49:ad:3b:84:ec:62:25:23:3d:38:de:5f:52:72:5c:87:15:37:
78:72:d5:bb:19:da:e7:c2:cd:0c:ba:b4:ed:fd:5e:09:b0:e4:
a0:fa:38:56:47:8c:c3:56:0c:6a:d0:c2:94:e8:dd:90:01:16:
8e:25:fb:48:15:c3:ea:4f:0b:e4:e3:0b:37:be:ab:09:d3:64:
90:aa:24:27
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsfgzsnK6vsfTNvV+XAaqorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMTYxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2ZhNjU2OGRjOGI2M2I0MDlmNGE1MmFhMDYxNGUxZDYwMWU1MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurC/I8AcaTcpbK/i7I5PAetnAPlb
RBZwi532MQX3reHUT26XmCkmk6YqhIkYArmQmnAHbA7oxzBWMgFLhiGjwMEhmxnu
axK/g6w3Q049i3WPaFB9NUMqkzTHNHESO0tc1qjRKHadMz5G4GnZl3pXhVMTjQUG
y2oszig/WSc2jiQDnazN3xBFvp5KgPcIS67Su8THhZYC0haiYIHF4lo2wDqFNJEz
Kv/I/OuGWolSB0onaGns0SoBmIAO6jOI5asfj1WRAg0odZzKZWJCG3T+RfHaRr5y
GN3/3OJK3sckTePcwh2rjcQuVW396HQEMUhCDHbPEwQ3mHI/Nx8yqceIRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNP6ZWjci2O0CfSlKqBhTh1gHlFjMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMF9wbGFOeUxZN1FKOUtVcW9HRk9IV0FlVVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHFcNyq8J0um+1OWcBSN
gTQ/zDyFCTUoT1zRNWBIAjBPafgbxsjv2+Vpt4EotO59rCPFoFyMFTqT97XsRObW
JkAhvcNeFYJ4HhV1budmzVoG6/18hQlGOcuf7gpvhTwkwzD/FtP/EfX6s/VuDTLV
NaYlqHyVFgzMX+HTyLe9qENI+YNHo5WUcrM2PkQhTN3bWIuGvWIBYa+Ilyzq69MT
XWIif0lxn2fnMgGRdubRx/Kwd8ZmXUmtO4TsYiUjPTjeX1JyXIcVN3hy1bsZ2ufC
zQy6tO39Xgmw5KD6OFZHjMNWDGrQwpTo3ZABFo4l+0gVw+pPC+TjCze+qwnTZJCq
JCc=
-----END CERTIFICATE-----
Generated at Tue May 13 11:43:56 2025 by rpki-client