Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ASUcegsi6HeKgP3hIbWWIvHHBM.roa
File: 1ASUcegsi6HeKgP3hIbWWIvHHBM.roa (raw, json)
Hash identifier: MBhJK06Zqgo8L3dc/l62ND0QeHXoTtsjRlOkavSsXp0=
Subject key identifier: D4:04:94:71:E8:2C:8B:A1:DE:2A:03:F7:84:86:D6:58:8B:C7:1C:13
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4B4BFDFA311F983F46806255F7B9CF11
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ASUcegsi6HeKgP3hIbWWIvHHBM.roa
Signing time: Fri 08 Dec 2023 21:18:40 +0000
ROA not before: Fri 08 Dec 2023 21:18:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:4b:fd:fa:31:1f:98:3f:46:80:62:55:f7:b9:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 21:18:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4049471e82c8ba1de2a03f78486d6588bc71c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:c4:de:aa:b1:b6:6e:e9:d6:cb:96:54:81:
3e:67:55:47:e0:6a:62:eb:52:9c:bf:a0:b9:78:1d:
7d:72:2f:b3:42:55:1c:d9:18:c8:74:a3:cc:2c:c2:
6d:f1:bf:08:f8:69:0e:26:9c:8b:35:e1:94:d9:0d:
bd:2f:ea:74:f4:02:d9:e7:25:3e:ae:81:c6:cc:8f:
53:42:05:34:09:c5:80:85:38:3f:24:80:9e:38:7a:
ff:bc:d6:96:f0:f0:ff:ac:dd:41:73:60:50:c9:1e:
60:9a:f0:b8:9a:e9:f1:72:b9:53:7a:36:bc:ce:dd:
38:36:71:03:ba:5f:ef:a8:c2:89:24:75:8f:64:f5:
19:64:d8:78:99:08:23:1e:87:9d:5d:10:af:8e:bb:
67:3e:e6:fb:7d:2c:d9:71:b5:c3:1e:c1:31:ec:cd:
33:9b:c9:74:41:b1:9a:ce:f9:66:31:41:a9:1d:be:
bb:34:7e:e5:9c:25:81:b1:c1:b8:d4:97:44:36:e7:
25:12:3d:48:c4:f2:9b:ed:54:13:61:c8:30:ce:10:
78:d1:bf:50:08:8a:e6:a4:1a:41:5a:70:c2:b9:22:
d4:0c:b7:2d:aa:0a:54:db:da:ae:9c:d2:65:7b:49:
69:b1:06:4c:91:02:e0:24:ab:77:16:90:88:b7:e5:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:94:71:E8:2C:8B:A1:DE:2A:03:F7:84:86:D6:58:8B:C7:1C:13
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ASUcegsi6HeKgP3hIbWWIvHHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:4f:39:84:b7:3c:b4:60:95:db:7f:fe:a1:83:e9:ac:9a:d6:
81:f6:2f:d5:1a:6a:6e:48:39:8d:9a:79:a8:67:24:42:5c:5f:
0c:fe:4b:ba:90:b4:ac:05:ea:aa:b0:39:dd:30:18:40:49:de:
2e:b6:92:eb:30:e1:82:9b:0d:45:d9:a1:d6:ff:a9:bb:d8:44:
54:d1:f4:f2:bd:e7:f5:1f:50:75:ed:b8:07:84:3a:36:77:93:
86:eb:f3:c1:a6:57:b1:f0:83:c5:33:ee:6d:3d:3e:55:2b:c9:
dc:4e:a6:79:5c:c6:e7:7e:b4:22:2c:6d:a0:f0:5b:95:5c:80:
dd:7f:d0:b7:89:5c:cb:0c:65:98:5b:33:7e:b4:19:d4:9b:3d:
02:99:ed:1f:fc:84:e3:43:25:90:12:3c:57:fa:76:a0:4d:4f:
96:fc:6f:10:2e:3d:18:c7:ed:f2:a1:15:83:55:f9:38:6e:ea:
76:d3:e8:5d:8f:2d:fa:99:8f:e1:0c:42:11:08:1e:01:90:32:
03:e3:20:0d:22:7c:93:b2:94:b6:8b:d8:ac:ce:93:a7:03:9d:
7c:7d:87:6a:86:32:5c:38:b8:00:49:76:71:11:ca:a8:1e:ec:
7b:33:16:26:94:d5:5b:c7:c4:ba:4f:34:c5:e3:7c:bc:c9:c0:
4a:b6:37:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxLS/36MR+YP0aAYlX3uc8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MjExODQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDA0OTQ3MWU4MmM4YmExZGUyYTAzZjc4NDg2ZDY1ODhiYzcxYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/7E3qqxtm7p1suWVIE+Z1VH4Gpi
61Kcv6C5eB19ci+zQlUc2RjIdKPMLMJt8b8I+GkOJpyLNeGU2Q29L+p09ALZ5yU+
roHGzI9TQgU0CcWAhTg/JICeOHr/vNaW8PD/rN1Bc2BQyR5gmvC4munxcrlTeja8
zt04NnEDul/vqMKJJHWPZPUZZNh4mQgjHoedXRCvjrtnPub7fSzZcbXDHsEx7M0z
m8l0QbGazvlmMUGpHb67NH7lnCWBscG41JdENuclEj1IxPKb7VQTYcgwzhB40b9Q
CIrmpBpBWnDCuSLUDLctqgpU29qunNJle0lpsQZMkQLgJKt3FpCIt+VzzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNQElHHoLIuh3ioD94SG1liLxxwTMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMUFTVWNlZ3NpNkhlS2dQM2hJYldXSXZISEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEZPOYS3PLRgldt//qGD
6aya1oH2L9Uaam5IOY2aeahnJEJcXwz+S7qQtKwF6qqwOd0wGEBJ3i62kusw4YKb
DUXZodb/qbvYRFTR9PK95/UfUHXtuAeEOjZ3k4br88GmV7Hwg8Uz7m09PlUrydxO
pnlcxud+tCIsbaDwW5VcgN1/0LeJXMsMZZhbM360GdSbPQKZ7R/8hONDJZASPFf6
dqBNT5b8bxAuPRjH7fKhFYNV+Thu6nbT6F2PLfqZj+EMQhEIHgGQMgPjIA0ifJOy
lLaL2KzOk6cDnXx9h2qGMlw4uABJdnERyqge7HszFiaU1VvHxLpPNMXjfLzJwEq2
N/A=
-----END CERTIFICATE-----
Generated at Sat May 10 12:22:40 2025 by rpki-client