Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-rDxF-9VvKup6az3ep-hYz9AqOE.roa
File: 1-rDxF-9VvKup6az3ep-hYz9AqOE.roa (raw, json)
Hash identifier: EOe+vQaEFOYyDFG9dlh3VzR7mAezbuBysZ5Iw79/DOE=
Subject key identifier: FA:B0:F1:17:EF:55:BC:AB:A9:E9:AC:F7:7A:9F:A1:63:3F:40:A8:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA1C4E02BF036DCA094F191A87E26B1D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-rDxF-9VvKup6az3ep-hYz9AqOE.roa
Signing time: Sun 05 Nov 2023 23:15:16 +0000
ROA not before: Sun 05 Nov 2023 23:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:c4:e0:2b:f0:36:dc:a0:94:f1:91:a8:7e:26:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 23:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab0f117ef55bcaba9e9acf77a9fa1633f40a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:20:90:7c:89:76:09:b4:e2:19:99:a8:a0:
b3:e0:9b:3a:b1:d0:96:94:2a:f5:87:41:97:52:f6:
a9:3c:23:7c:cd:6e:8b:3f:0c:30:ee:3a:7e:06:2a:
df:71:28:aa:f5:49:0e:0d:f6:fa:16:6d:8d:2d:e8:
56:34:4c:b5:06:41:27:88:53:74:c7:89:4b:3b:bf:
13:b1:41:db:d9:f0:83:38:d6:14:29:63:35:ab:68:
33:c6:50:c7:a2:63:8f:52:0c:ad:d5:07:85:52:93:
f7:11:6b:5a:8c:db:26:a7:c7:d6:7e:43:bb:8b:f3:
b8:14:2c:02:14:ab:3e:7d:a2:7c:1c:3d:63:4c:b7:
c6:80:7a:a4:57:84:37:d7:da:49:3a:f2:35:a9:72:
1e:5b:48:fe:b8:c3:a6:10:0e:61:05:bb:b1:f4:77:
3e:bb:89:22:d5:5c:bc:dd:77:5b:49:22:f8:a9:97:
62:a8:a3:b7:39:0e:3a:ec:00:c5:77:9f:d9:ef:67:
87:07:8c:68:7d:42:18:7f:61:8f:b3:77:0d:c0:69:
15:8a:89:e5:10:60:88:4c:ab:c8:6c:39:2c:a6:69:
cf:42:0e:6b:41:4a:d7:ba:c8:a4:f8:be:30:cc:1a:
31:0d:ae:3c:9c:3b:d0:b8:f1:92:88:41:c0:85:9e:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:F1:17:EF:55:BC:AB:A9:E9:AC:F7:7A:9F:A1:63:3F:40:A8:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-rDxF-9VvKup6az3ep-hYz9AqOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:55:2c:08:0b:d8:02:79:d0:50:db:3f:8e:32:58:ae:5f:44:
d2:b7:39:7d:79:1d:97:f9:25:c7:e5:dd:be:19:f3:2f:be:dc:
b9:8c:64:59:b1:1e:78:9f:4e:00:35:51:07:13:67:82:4f:a7:
07:71:17:1b:a8:d1:c8:4d:01:c2:9f:cf:53:72:fc:fe:4b:d1:
ea:0e:a4:31:65:0b:70:9a:7c:14:62:e5:4c:4a:8b:46:6a:74:
4d:2f:c1:bd:47:a9:83:6b:3e:a4:df:a1:03:db:99:d3:c7:14:
7d:2b:12:60:a6:9e:b3:7e:7b:57:95:f4:18:15:c6:69:92:07:
07:90:8f:70:c2:4b:d1:af:8d:08:39:15:d9:d0:80:26:fd:a7:
40:f9:a8:c1:9e:2f:8b:77:d9:70:e6:78:2f:c7:c1:3d:64:f6:
c6:3d:5c:65:6e:11:43:9b:61:78:2d:0a:f8:2e:9a:87:08:bb:
e4:b0:7b:8c:97:20:3e:09:58:76:9d:59:c0:13:76:c9:7c:fe:
c2:39:80:ef:f7:91:41:e1:37:8e:3a:07:37:a3:71:24:8f:1f:
ef:25:b7:7b:0d:e8:e9:41:0a:b9:1e:f1:2f:36:b9:02:97:59:
02:76:1a:54:0d:92:bb:7c:76:bd:00:4a:80:af:6e:01:49:a9:
c8:27:9b:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYuhxOAr8DbcoJTxkah+JrHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA1MjMxNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWIwZjExN2VmNTViY2FiYTllOWFjZjc3YTlmYTE2MzNmNDBhOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3YgkHyJdgm04hmZqKCz4Js6sdCW
lCr1h0GXUvapPCN8zW6LPwww7jp+BirfcSiq9UkODfb6Fm2NLehWNEy1BkEniFN0
x4lLO78TsUHb2fCDONYUKWM1q2gzxlDHomOPUgyt1QeFUpP3EWtajNsmp8fWfkO7
i/O4FCwCFKs+faJ8HD1jTLfGgHqkV4Q319pJOvI1qXIeW0j+uMOmEA5hBbux9Hc+
u4ki1Vy83XdbSSL4qZdiqKO3OQ467ADFd5/Z72eHB4xofUIYf2GPs3cNwGkVionl
EGCITKvIbDkspmnPQg5rQUrXusik+L4wzBoxDa48nDvQuPGSiEHAhZ6BDwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPqw8RfvVbyrqems93qfoWM/QKjhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1yRHhGLTlWdkt1cDZhejNlcC1oWXo5QXFPRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQC/VSwIC9gCedBQ2z+O
MliuX0TStzl9eR2X+SXH5d2+GfMvvty5jGRZsR54n04ANVEHE2eCT6cHcRcbqNHI
TQHCn89Tcvz+S9HqDqQxZQtwmnwUYuVMSotGanRNL8G9R6mDaz6k36ED25nTxxR9
KxJgpp6zfntXlfQYFcZpkgcHkI9wwkvRr40IORXZ0IAm/adA+ajBni+Ld9lw5ngv
x8E9ZPbGPVxlbhFDm2F4LQr4LpqHCLvksHuMlyA+CVh2nVnAE3bJfP7COYDv95FB
4TeOOgc3o3Ekjx/vJbd7DejpQQq5HvEvNrkCl1kCdhpUDZK7fHa9AEqAr24BSanI
J5sf
-----END CERTIFICATE-----
Generated at Mon May 12 16:09:49 2025 by rpki-client