Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2bA4mEWrmzAPP2z5R-5hWuJ7kUs.roa
File: 2bA4mEWrmzAPP2z5R-5hWuJ7kUs.roa (raw, json)
Hash identifier: teQOtv44wU64USXqJOJP9x3QI8m4Ure9MrTmstecAjc=
Subject key identifier: D9:B0:38:98:45:AB:9B:30:0F:3F:6C:F9:47:EE:61:5A:E2:7B:91:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8CF0D7BB6AF3CA20F127C0E078FB18D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2bA4mEWrmzAPP2z5R-5hWuJ7kUs.roa
Signing time: Wed 01 Nov 2023 22:11:15 +0000
ROA not before: Wed 01 Nov 2023 22:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:f0:d7:bb:6a:f3:ca:20:f1:27:c0:e0:78:fb:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 22:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9b0389845ab9b300f3f6cf947ee615ae27b914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:3d:76:16:6c:53:d7:f4:ee:ef:cf:76:97:
1b:a4:fe:ff:8d:4a:f1:ab:7a:b3:e4:3c:91:75:a9:
9c:9b:51:30:1d:4e:f0:f5:b8:9c:ff:12:57:97:4a:
3f:63:a9:ba:26:b7:f0:24:f4:c9:26:af:c7:fe:97:
ae:c9:83:44:bc:8c:52:ef:a4:9c:b3:f6:55:06:e5:
4a:81:69:22:fa:63:c7:69:e2:3c:81:66:b1:b2:2c:
ec:96:a6:49:14:2a:d3:af:fb:a5:87:65:3d:1b:eb:
ba:69:68:3c:76:89:36:b1:23:42:96:e1:c1:0a:a9:
be:63:78:32:b6:87:ef:fb:fc:ad:c4:c3:ad:dd:c4:
a7:ca:49:ef:ef:03:21:45:0c:75:9d:d4:24:9b:14:
86:bc:30:f3:43:6f:e4:b7:39:68:d5:2c:0d:84:a5:
fb:cb:5e:37:9f:b4:b7:da:01:72:5b:15:2a:e6:f8:
7e:ce:e7:a0:de:f3:13:42:5d:98:f5:b1:00:7b:b0:
aa:11:ce:1c:9b:26:79:99:8a:45:7c:e7:51:b2:9c:
a6:68:db:d3:f1:08:44:62:c5:90:aa:34:7f:1d:e0:
3a:9e:44:ea:e8:5b:27:6c:e7:e0:42:2c:64:ec:d2:
57:36:43:4e:66:54:8b:76:ac:e0:c9:10:fe:43:f8:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:38:98:45:AB:9B:30:0F:3F:6C:F9:47:EE:61:5A:E2:7B:91:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2bA4mEWrmzAPP2z5R-5hWuJ7kUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:66:4b:9f:15:24:9b:8b:f9:1a:89:66:49:9c:f7:ba:4c:f6:
05:b6:e9:45:19:ed:55:07:73:5c:90:e4:33:62:ab:0e:1c:cf:
5f:f4:8b:89:69:99:55:0d:3a:b2:2c:43:bd:12:7f:b3:03:b3:
6c:89:0a:4a:81:8c:34:e0:10:fe:98:a3:3f:95:6f:0e:f0:b1:
c6:33:ca:0d:f8:5a:a6:7a:fb:55:d9:8b:ad:a0:fa:9b:95:20:
e0:24:00:d5:20:7e:c0:a8:2f:63:f9:41:87:3b:91:28:47:c4:
61:fd:4a:c7:be:03:d8:c7:30:5b:ba:72:8c:f3:cc:d2:96:86:
c8:59:dc:12:95:a1:cc:fa:ea:df:83:11:77:6b:d3:c8:e6:4e:
6a:76:3e:16:5d:e3:c9:09:d7:73:f5:e9:1b:35:80:9e:d1:1b:
9b:59:3e:19:0c:9a:db:66:c9:44:80:3d:ba:00:7f:70:0e:82:
bb:b7:da:d2:4d:84:29:bd:48:71:b1:22:01:32:07:a1:97:96:
1a:21:9f:ca:4b:62:5c:55:2c:51:da:b5:81:24:f9:dd:b5:06:
ae:51:9b:96:ee:b1:0c:4f:21:ef:e2:11:97:f6:87:62:c2:9e:
bc:9d:60:29:97:3f:9c:f4:1e:bf:9e:8a:d8:ac:13:41:f8:5a:
cf:ad:73:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuM8Ne7avPKIPEnwOB4+xjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAxMjIxMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWIwMzg5ODQ1YWI5YjMwMGYzZjZjZjk0N2VlNjE1YWUyN2I5MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SY9dhZsU9f07u/PdpcbpP7/jUrx
q3qz5DyRdamcm1EwHU7w9bic/xJXl0o/Y6m6JrfwJPTJJq/H/peuyYNEvIxS76Sc
s/ZVBuVKgWki+mPHaeI8gWaxsizslqZJFCrTr/ulh2U9G+u6aWg8dok2sSNCluHB
Cqm+Y3gytofv+/ytxMOt3cSnyknv7wMhRQx1ndQkmxSGvDDzQ2/ktzlo1SwNhKX7
y143n7S32gFyWxUq5vh+zueg3vMTQl2Y9bEAe7CqEc4cmyZ5mYpFfOdRspymaNvT
8QhEYsWQqjR/HeA6nkTq6FsnbOfgQixk7NJXNkNOZlSLdqzgyRD+Q/gfpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNmwOJhFq5swDz9s+UfuYVrie5FLMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMmJBNG1FV3JtekFQUDJ6NVItNWhXdUo3a1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKxmS58VJJuL+RqJZkmc
97pM9gW26UUZ7VUHc1yQ5DNiqw4cz1/0i4lpmVUNOrIsQ70Sf7MDs2yJCkqBjDTg
EP6Yoz+Vbw7wscYzyg34WqZ6+1XZi62g+puVIOAkANUgfsCoL2P5QYc7kShHxGH9
Sse+A9jHMFu6cozzzNKWhshZ3BKVocz66t+DEXdr08jmTmp2PhZd48kJ13P16Rs1
gJ7RG5tZPhkMmttmyUSAPboAf3AOgru32tJNhCm9SHGxIgEyB6GXlhohn8pLYlxV
LFHatYEk+d21Bq5Rm5busQxPIe/iEZf2h2LCnrydYCmXP5z0Hr+eitisE0H4Ws+t
c6o=
-----END CERTIFICATE-----
Generated at Mon May 12 13:35:14 2025 by rpki-client