Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Vx9CKvE6sglNYgEz9PxTQQp9_A.roa
File: 1-Vx9CKvE6sglNYgEz9PxTQQp9_A.roa (raw, json)
Hash identifier: GXY4ID/oGtuJmDhM/vwJp9Xhyyuec5l3Yo/PBpOxhiU=
Subject key identifier: F9:5C:7D:08:AB:C4:EA:C8:25:35:88:04:CF:D3:F1:4D:04:29:F7:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C45EA4415BFACA3E325A15858E443C195
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Vx9CKvE6sglNYgEz9PxTQQp9_A.roa
Signing time: Thu 07 Dec 2023 20:13:49 +0000
ROA not before: Thu 07 Dec 2023 20:13:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:ea:44:15:bf:ac:a3:e3:25:a1:58:58:e4:43:c1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 20:13:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f95c7d08abc4eac825358804cfd3f14d0429f7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:68:a6:8c:d2:2c:e6:3a:b6:8a:2a:ac:0b:
5e:54:20:36:8d:a2:dd:88:71:5e:ad:25:35:cc:b1:
cf:c5:ce:fe:0f:32:d5:46:32:fa:7e:96:64:68:01:
31:5e:ce:5e:40:7f:b2:ce:31:fa:d8:c5:6c:c3:65:
b6:20:fc:7b:8e:bc:89:f7:b1:68:0b:16:55:fd:5c:
fe:17:90:d8:bd:a6:2c:89:d5:4a:87:a5:38:a7:a0:
26:ad:d5:43:2e:ac:e1:c4:23:8e:73:b2:36:d2:92:
b6:6c:2e:68:2c:a2:a9:bb:86:94:e9:ad:a5:8d:76:
3c:a2:45:ed:c8:d3:3a:6b:aa:49:d5:7f:90:d3:57:
8c:81:55:ae:f6:5c:8c:49:00:f4:5d:d9:13:2e:a5:
ad:8a:2e:d3:77:64:2f:81:61:d1:84:9a:22:1f:b8:
ca:73:ed:29:7c:9f:7a:83:da:87:af:e3:93:a6:58:
cd:04:b1:2f:26:aa:eb:c8:bd:0f:4c:40:5c:6c:31:
03:0f:4d:10:7e:03:09:35:80:38:40:42:50:c0:3e:
46:6d:28:e1:aa:7a:a2:00:34:04:71:e1:fd:a2:c4:
f7:7b:77:e2:05:c7:68:cf:e2:64:7b:6b:49:96:47:
cc:0b:5b:c5:80:02:35:4a:ec:1b:62:9d:00:49:de:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:7D:08:AB:C4:EA:C8:25:35:88:04:CF:D3:F1:4D:04:29:F7:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Vx9CKvE6sglNYgEz9PxTQQp9_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:9e:73:80:1e:70:2c:f9:5e:4d:11:54:cf:90:02:a3:27:53:
84:d7:60:3e:76:23:bb:81:28:f7:e8:fb:ce:b5:39:02:63:f1:
23:f2:f7:ce:d5:53:19:65:6c:fb:ec:7e:0b:69:86:5c:7e:9b:
ce:49:7f:40:04:2c:8f:c5:4f:a3:bc:41:54:23:bf:27:b6:f0:
a7:78:a2:4e:69:29:32:fa:a3:91:7a:32:47:ea:d9:7e:9f:53:
ce:37:44:e1:97:c1:b7:01:68:e4:23:68:1f:8f:df:68:3f:31:
1a:f3:cb:2a:e4:3d:a0:89:e5:96:51:c0:04:55:0e:c4:c2:04:
66:53:ac:b6:ec:53:68:47:16:90:d8:dc:dc:0d:82:be:02:ec:
18:38:9f:3c:62:b9:a6:4f:d5:89:bb:48:c0:8d:fe:39:cf:d3:
46:c6:e0:e2:54:c7:bb:d9:da:05:6c:44:66:40:36:67:9d:98:
e0:49:58:03:11:d2:35:da:29:be:55:d9:54:7e:5d:8f:f1:a5:
a5:bb:35:b1:b0:ba:db:9d:82:f1:b5:13:db:72:fd:15:3e:19:
cb:16:10:9d:de:2e:72:cc:c3:1b:9f:ea:4f:47:d9:61:94:b3:
96:d1:01:fd:4a:04:48:16:85:42:66:19:dc:96:1c:07:04:b2:
f2:39:ad:c5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxF6kQVv6yj4yWhWFjkQ8GVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA3MjAxMzQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVjN2QwOGFiYzRlYWM4MjUzNTg4MDRjZmQzZjE0ZDA0MjlmN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxxopozSLOY6tooqrAteVCA2jaLd
iHFerSU1zLHPxc7+DzLVRjL6fpZkaAExXs5eQH+yzjH62MVsw2W2IPx7jryJ97Fo
CxZV/Vz+F5DYvaYsidVKh6U4p6AmrdVDLqzhxCOOc7I20pK2bC5oLKKpu4aU6a2l
jXY8okXtyNM6a6pJ1X+Q01eMgVWu9lyMSQD0XdkTLqWtii7Td2QvgWHRhJoiH7jK
c+0pfJ96g9qHr+OTpljNBLEvJqrryL0PTEBcbDEDD00QfgMJNYA4QEJQwD5GbSjh
qnqiADQEceH9osT3e3fiBcdoz+Jke2tJlkfMC1vFgAI1SuwbYp0ASd5/nwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPlcfQirxOrIJTWIBM/T8U0EKffwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1WeDlDS3ZFNnNnbE5ZZ0V6OVB4VFFRcDlfQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAfnnOAHnAs+V5NEVTP
kAKjJ1OE12A+diO7gSj36PvOtTkCY/Ej8vfO1VMZZWz77H4LaYZcfpvOSX9ABCyP
xU+jvEFUI78ntvCneKJOaSky+qORejJH6tl+n1PON0Thl8G3AWjkI2gfj99oPzEa
88sq5D2gieWWUcAEVQ7EwgRmU6y27FNoRxaQ2NzcDYK+AuwYOJ88YrmmT9WJu0jA
jf45z9NGxuDiVMe72doFbERmQDZnnZjgSVgDEdI12im+VdlUfl2P8aWluzWxsLrb
nYLxtRPbcv0VPhnLFhCd3i5yzMMbn+pPR9lhlLOW0QH9SgRIFoVCZhnclhwHBLLy
Oa3F
-----END CERTIFICATE-----
Generated at Tue May 13 19:28:45 2025 by rpki-client