Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36hUGSwOO6jzDt7wcTQfm55bBtA.roa
File: 36hUGSwOO6jzDt7wcTQfm55bBtA.roa (raw, json)
Hash identifier: TXH92DE5IWRL36EEXCJf00F2EhIoSmpZI0zu6xfIB/0=
Subject key identifier: DF:A8:54:19:2C:0E:3B:A8:F3:0E:DE:F0:71:34:1F:9B:9E:5B:06:D0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0438839A5C51F883A78A04F074829636
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36hUGSwOO6jzDt7wcTQfm55bBtA.roa
Signing time: Sat 25 Nov 2023 02:04:21 +0000
ROA not before: Sat 25 Nov 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:438:41b0/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:04:38:83:9a:5c:51:f8:83:a7:8a:04:f0:74:82:96:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa854192c0e3ba8f30edef071341f9b9e5b06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:58:63:22:d8:6f:1d:90:b2:b7:f7:34:f8:
37:af:d7:b2:e1:57:d7:e8:2c:75:e3:ee:6c:86:28:
55:f3:30:e5:f6:c5:3f:ad:d6:25:2f:84:d3:0a:ed:
c7:ab:3c:be:a4:02:f9:9e:6e:d3:c5:12:08:af:9c:
28:a1:85:58:c8:7b:01:9e:13:40:cf:75:2b:e5:ce:
28:f6:fe:34:5f:fc:27:db:9b:74:cd:09:39:9d:46:
1b:d2:dc:be:e7:af:35:c2:86:dc:29:fb:2a:a0:b9:
64:4a:3a:ab:6a:02:c1:0e:57:85:6a:9c:d9:9b:4e:
4f:08:1e:2f:37:2e:d6:db:48:e4:f9:18:5a:57:ef:
2e:a7:80:e1:d5:1f:fb:05:c7:97:ac:1b:74:7e:dd:
d1:12:d9:4b:b9:37:09:70:8e:5b:c7:64:a9:16:85:
de:87:4d:77:40:f9:db:52:6f:60:68:dd:01:d4:94:
8c:ad:c9:51:77:bd:04:2e:a9:11:d5:3e:0e:06:39:
6c:48:e4:a1:f4:61:1d:74:b5:18:8b:c2:c0:a4:35:
92:6f:db:06:e1:8e:3a:6f:00:c0:e4:58:9a:04:42:
09:fe:59:31:ae:bc:60:7d:10:9d:d2:9d:f4:2d:25:
2a:fa:c6:c2:94:a4:f0:66:82:11:e1:65:0b:8f:e6:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A8:54:19:2C:0E:3B:A8:F3:0E:DE:F0:71:34:1F:9B:9E:5B:06:D0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36hUGSwOO6jzDt7wcTQfm55bBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:f2:ba:20:0f:32:97:03:a8:a7:8d:ac:30:2e:b2:c2:21:0d:
93:f4:a8:22:5a:62:40:1b:c6:4c:bf:37:94:ef:5a:13:d2:85:
e1:15:fa:c4:75:2d:3a:85:5f:0a:43:4f:8e:21:f5:ac:1a:f3:
42:cf:0f:13:a0:0e:9f:67:4e:77:d4:36:ae:81:07:c2:46:20:
0a:1b:31:2b:4a:9d:bd:56:6d:0c:66:42:89:9e:04:35:5a:d6:
d7:ce:93:f1:31:ae:cf:c0:97:7a:ba:9e:97:a8:e4:dd:5e:b0:
4b:d8:ac:d6:b1:49:3b:9e:d5:bf:ad:fa:be:d5:4d:eb:21:88:
19:b0:af:ec:30:5e:af:c8:af:0c:1c:a9:62:5d:1e:bd:cc:b2:
da:ab:c3:bd:1d:7e:d2:08:10:f3:55:3e:5f:2c:f6:04:e1:8e:
78:16:a1:5c:c1:13:8b:b6:27:8e:78:8d:85:6e:9f:26:99:d4:
f0:f2:45:1d:11:c3:cd:88:3d:5f:35:4a:e6:fb:ca:f8:a7:ff:
8d:b7:15:e3:de:44:4d:b6:90:64:ad:47:12:9c:b8:52:2a:a7:
5a:4c:85:59:d4:50:e0:1f:aa:82:2d:60:e0:ae:00:aa:24:77:
30:dd:65:0a:be:27:86:92:89:a9:9e:30:51:f9:f1:cb:59:b9:
24:12:26:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwEOIOaXFH4g6eKBPB0gpY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI1MDIwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmE4NTQxOTJjMGUzYmE4ZjMwZWRlZjA3MTM0MWY5YjllNWIwNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4tYYyLYbx2Qsrf3NPg3r9ey4VfX
6Cx14+5shihV8zDl9sU/rdYlL4TTCu3Hqzy+pAL5nm7TxRIIr5wooYVYyHsBnhNA
z3Ur5c4o9v40X/wn25t0zQk5nUYb0ty+5681wobcKfsqoLlkSjqragLBDleFapzZ
m05PCB4vNy7W20jk+RhaV+8up4Dh1R/7BceXrBt0ft3REtlLuTcJcI5bx2SpFoXe
h013QPnbUm9gaN0B1JSMrclRd70ELqkR1T4OBjlsSOSh9GEddLUYi8LApDWSb9sG
4Y46bwDA5FiaBEIJ/lkxrrxgfRCd0p30LSUq+sbClKTwZoIR4WULj+axDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN+oVBksDjuo8w7e8HE0H5ueWwbQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMzZoVUdTd09PNmp6RHQ3d2NUUWZtNTViQnRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALfyuiAPMpcDqKeNrDAu
ssIhDZP0qCJaYkAbxky/N5TvWhPSheEV+sR1LTqFXwpDT44h9awa80LPDxOgDp9n
TnfUNq6BB8JGIAobMStKnb1WbQxmQomeBDVa1tfOk/Exrs/Al3q6npeo5N1esEvY
rNaxSTue1b+t+r7VTeshiBmwr+wwXq/IrwwcqWJdHr3Mstqrw70dftIIEPNVPl8s
9gThjngWoVzBE4u2J454jYVunyaZ1PDyRR0Rw82IPV81Sub7yvin/423FePeRE22
kGStRxKcuFIqp1pMhVnUUOAfqoItYOCuAKokdzDdZQq+J4aSiameMFH58ctZuSQS
Ji8=
-----END CERTIFICATE-----
Generated at Sun May 11 15:30:06 2025 by rpki-client