Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1hj-NmSDu-v7-Hnits0RTJLT47M.roa
File: 1hj-NmSDu-v7-Hnits0RTJLT47M.roa (raw, json)
Hash identifier: 2Ko8WgOy3odmeEpLQrVD2Zc1VO6QY6dbQNcy8pj2vgI=
Subject key identifier: D6:18:FE:36:64:83:BB:EB:FB:F8:79:E2:B6:CD:11:4C:92:D3:E3:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE9A85B2499105FA8BF5F0456EC710BEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1hj-NmSDu-v7-Hnits0RTJLT47M.roa
Signing time: Sun 19 Nov 2023 22:16:46 +0000
ROA not before: Sun 19 Nov 2023 22:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:a8:5b:24:99:10:5f:a8:bf:5f:04:56:ec:71:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 22:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d618fe366483bbebfbf879e2b6cd114c92d3e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:88:01:df:ec:13:e6:78:3e:d2:60:d4:6c:
76:a5:6d:9a:67:fb:2a:e5:26:50:1c:66:41:23:8a:
3e:b7:42:a4:58:ca:ea:f9:34:53:ea:d5:b6:17:9c:
54:22:c4:07:4f:b4:d1:c4:98:19:0d:80:fc:9d:41:
95:27:40:c2:bd:7b:52:f3:0e:5f:32:a9:f6:67:f8:
d1:63:a7:1e:70:99:da:9c:a7:15:b7:2b:e8:fe:c8:
bf:a6:26:bf:3f:5d:de:68:c1:a0:b9:e1:8b:1e:ca:
f4:eb:a2:15:18:f7:c8:43:7d:f7:e6:28:e6:b1:0b:
44:32:1e:47:b4:9a:2a:d9:45:b5:78:88:8e:b0:bb:
1b:92:a0:bc:83:f3:b0:8a:ca:e9:4b:83:df:3f:ee:
57:64:40:4b:04:f1:6c:d1:8b:59:da:9f:c0:43:9d:
af:9e:98:ed:5d:77:dd:8b:82:c5:d4:31:64:c3:91:
c9:ac:ba:40:6a:cc:2a:14:ff:8c:77:b4:6b:34:01:
d2:34:44:14:37:ac:f3:42:ae:fa:04:8d:e6:91:da:
aa:51:fb:ed:01:85:75:bc:6a:46:28:20:db:b9:13:
b3:33:2e:12:23:60:69:91:73:bc:31:67:ac:8c:d4:
96:25:13:2d:d4:ca:31:2d:ef:b2:58:11:c1:8a:5a:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:FE:36:64:83:BB:EB:FB:F8:79:E2:B6:CD:11:4C:92:D3:E3:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1hj-NmSDu-v7-Hnits0RTJLT47M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:26:45:a5:08:77:85:d1:7f:b6:2a:59:a8:09:96:66:3b:6b:
e6:f9:4b:ac:79:9a:e6:61:11:cd:b8:09:56:19:cd:d8:84:85:
8a:bc:12:60:97:a7:1e:ca:0e:95:a1:b0:c5:17:cb:48:06:96:
f7:a8:b5:cc:f9:e9:41:13:10:0b:12:84:56:ef:8e:ca:cd:21:
63:2e:77:8a:ce:d4:2f:95:4f:1a:2e:a5:c3:83:5d:38:3e:51:
01:99:da:cc:87:79:50:08:6c:e4:68:91:21:7f:4c:d4:eb:91:
2f:18:70:11:76:d9:f5:29:19:2f:c3:9b:16:a0:6f:91:2d:29:
cc:cc:bc:fa:b5:9e:3a:3d:d7:82:58:6f:bf:b4:b8:cc:84:9d:
be:a0:4a:4c:7a:d0:45:ed:c3:db:9a:93:81:5e:24:75:64:a0:
36:1c:cc:32:92:d6:87:06:8a:d9:1b:60:ad:52:42:10:2d:9c:
76:a3:97:f8:1b:da:c7:f1:0e:ff:1b:6c:8a:bd:fd:86:b8:62:
ae:47:e2:76:05:4e:73:97:42:21:f1:85:7a:84:7e:e5:46:ad:
fe:df:28:e5:10:38:ee:8a:23:e4:a1:72:31:46:f9:f4:f5:52:
83:ec:4c:3c:ac:a1:60:5d:79:96:46:e5:d5:7b:20:1c:c0:80:
e6:50:4d:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvpqFskmRBfqL9fBFbscQvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE5MjIxNjQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjE4ZmUzNjY0ODNiYmViZmJmODc5ZTJiNmNkMTE0YzkyZDNlM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR6IAd/sE+Z4PtJg1Gx2pW2aZ/sq
5SZQHGZBI4o+t0KkWMrq+TRT6tW2F5xUIsQHT7TRxJgZDYD8nUGVJ0DCvXtS8w5f
Mqn2Z/jRY6cecJnanKcVtyvo/si/pia/P13eaMGgueGLHsr066IVGPfIQ3335ijm
sQtEMh5HtJoq2UW1eIiOsLsbkqC8g/OwisrpS4PfP+5XZEBLBPFs0YtZ2p/AQ52v
npjtXXfdi4LF1DFkw5HJrLpAaswqFP+Md7RrNAHSNEQUN6zzQq76BI3mkdqqUfvt
AYV1vGpGKCDbuROzMy4SI2BpkXO8MWesjNSWJRMt1MoxLe+yWBHBilp1xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNYY/jZkg7vr+/h54rbNEUyS0+OzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMWhqLU5tU0R1LXY3LUhuaXRzMFJUSkxUNDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIMmRaUId4XRf7YqWagJ
lmY7a+b5S6x5muZhEc24CVYZzdiEhYq8EmCXpx7KDpWhsMUXy0gGlveotcz56UET
EAsShFbvjsrNIWMud4rO1C+VTxoupcODXTg+UQGZ2syHeVAIbORokSF/TNTrkS8Y
cBF22fUpGS/Dmxagb5EtKczMvPq1njo914JYb7+0uMyEnb6gSkx60EXtw9uak4Fe
JHVkoDYczDKS1ocGitkbYK1SQhAtnHajl/gb2sfxDv8bbIq9/Ya4Yq5H4nYFTnOX
QiHxhXqEfuVGrf7fKOUQOO6KI+ShcjFG+fT1UoPsTDysoWBdeZZG5dV7IBzAgOZQ
TQs=
-----END CERTIFICATE-----
Generated at Sun May 11 22:00:48 2025 by rpki-client