Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yzynYYd2rFiTO-sOPq0zvAu9-E.roa
File: 0yzynYYd2rFiTO-sOPq0zvAu9-E.roa (raw, json)
Hash identifier: tsZgS5V15PMwSs9HfglCWob9oCzVqjG8RQ+wwKEmKzw=
Subject key identifier: D3:2C:F2:9D:86:1D:DA:B1:62:4C:EF:AC:38:FA:B4:CE:F0:2E:F7:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAB6A151AE51399B6F4E8CBD7387C2FA2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yzynYYd2rFiTO-sOPq0zvAu9-E.roa
Signing time: Tue 07 Nov 2023 20:12:18 +0000
ROA not before: Tue 07 Nov 2023 20:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:6a:15:1a:e5:13:99:b6:f4:e8:cb:d7:38:7c:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 20:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d32cf29d861ddab1624cefac38fab4cef02ef7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:de:a8:d9:af:ae:2b:60:57:f7:0f:a7:51:
bf:20:7c:2a:c1:a7:a9:ff:8f:34:1f:fc:7e:fd:b6:
1f:df:5f:53:d7:a3:d9:f3:c7:4c:70:db:c8:f9:c9:
01:0b:95:23:8f:be:32:df:bf:2c:c2:76:5f:5f:6f:
ed:10:6e:b1:2f:ec:1e:f5:81:ec:1b:f3:7d:5a:c2:
67:3c:81:41:e8:9d:03:2a:9a:2e:d1:9f:1a:7a:fe:
c5:b2:ef:6c:92:30:2e:d9:c4:0b:42:35:f6:2d:46:
f1:a2:fc:14:1b:19:55:e0:ea:1d:5f:a5:9f:3a:ad:
6b:9d:ea:ca:95:75:a1:16:9e:0e:f4:03:24:f1:02:
e2:c4:c3:cb:a8:3c:34:6d:a9:39:da:6a:e3:5b:a7:
02:31:5b:ef:6d:14:12:a5:f2:3c:b4:e3:0d:51:3d:
4a:45:28:8b:a7:04:35:0a:2a:1e:df:34:ef:ed:04:
5f:b9:f9:db:26:a2:cf:dc:95:e1:0d:49:a5:ee:40:
be:e7:75:bb:f9:89:85:da:f5:c0:5f:1d:a7:1a:e4:
69:d4:6f:b6:ca:f1:e4:63:4d:5b:b0:ce:45:f2:49:
6b:e9:bc:ef:bb:72:ec:5f:e4:3d:e7:23:4c:4d:8a:
e4:ea:dc:64:0c:fb:83:b6:fd:78:f1:d2:f8:ff:2a:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:F2:9D:86:1D:DA:B1:62:4C:EF:AC:38:FA:B4:CE:F0:2E:F7:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0yzynYYd2rFiTO-sOPq0zvAu9-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:5f:15:e4:ae:d1:6e:7c:2f:7b:ee:c8:71:ef:c0:73:48:df:
06:04:39:43:07:c8:f1:f1:74:da:0c:8e:e7:06:bd:12:24:1f:
91:ef:cd:35:48:cf:c3:82:3b:1b:01:7a:a1:51:95:e0:35:5b:
96:a9:22:a9:fd:b2:18:d8:68:3a:af:dd:eb:c8:38:cb:2a:39:
7c:83:e1:4e:11:9d:d7:3c:5e:26:f4:5b:66:a4:22:84:48:0d:
b1:e6:5e:88:33:39:4f:c8:33:f0:50:56:40:fe:e0:67:46:90:
4d:ea:e3:75:80:a8:25:31:fd:03:87:cf:e1:42:0a:9b:eb:4e:
fd:d1:0d:e2:81:0a:d4:91:eb:fa:d0:b0:4e:c9:cb:6a:ff:fb:
a9:dd:9b:a7:e7:ac:b0:e5:27:c0:64:c8:b1:ad:2a:8d:17:ea:
af:33:8f:e9:e8:94:47:a1:15:07:5d:13:e5:3e:1f:2f:e3:04:
63:93:c0:04:04:80:8d:24:3a:cc:e1:be:6d:ac:94:05:44:b3:
46:ab:02:c2:3a:f6:42:08:20:43:9b:66:a5:09:f9:b6:da:9b:
88:28:59:b0:65:3f:f5:05:a9:af:84:16:17:73:d1:7e:4c:e0:
ea:7f:eb:19:d5:c5:0e:87:6e:a0:f9:05:89:00:8d:7d:9d:97:
00:ce:41:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYurahUa5ROZtvToy9c4fC+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA3MjAxMjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzJjZjI5ZDg2MWRkYWIxNjI0Y2VmYWMzOGZhYjRjZWYwMmVmN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfreqNmvritgV/cPp1G/IHwqwaep
/480H/x+/bYf319T16PZ88dMcNvI+ckBC5Ujj74y378swnZfX2/tEG6xL+we9YHs
G/N9WsJnPIFB6J0DKpou0Z8aev7Fsu9skjAu2cQLQjX2LUbxovwUGxlV4OodX6Wf
Oq1rnerKlXWhFp4O9AMk8QLixMPLqDw0bak52mrjW6cCMVvvbRQSpfI8tOMNUT1K
RSiLpwQ1Cioe3zTv7QRfufnbJqLP3JXhDUml7kC+53W7+YmF2vXAXx2nGuRp1G+2
yvHkY01bsM5F8klr6bzvu3LsX+Q95yNMTYrk6txkDPuDtv148dL4/yoGHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNMs8p2GHdqxYkzvrDj6tM7wLvfhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMHl6eW5ZWWQyckZpVE8tc09QcTB6dkF1OS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVfFeSu0W58L3vuyHHv
wHNI3wYEOUMHyPHxdNoMjucGvRIkH5HvzTVIz8OCOxsBeqFRleA1W5apIqn9shjY
aDqv3evIOMsqOXyD4U4Rndc8Xib0W2akIoRIDbHmXogzOU/IM/BQVkD+4GdGkE3q
43WAqCUx/QOHz+FCCpvrTv3RDeKBCtSR6/rQsE7Jy2r/+6ndm6fnrLDlJ8BkyLGt
Ko0X6q8zj+nolEehFQddE+U+Hy/jBGOTwAQEgI0kOszhvm2slAVEs0arAsI69kII
IEObZqUJ+bbam4goWbBlP/UFqa+EFhdz0X5M4Op/6xnVxQ6HbqD5BYkAjX2dlwDO
QaU=
-----END CERTIFICATE-----
Generated at Tue May 13 22:58:24 2025 by rpki-client