Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4toZiZ1RJokrZIjbXSp3BFlrnjw.roa
File: 4toZiZ1RJokrZIjbXSp3BFlrnjw.roa (raw, json)
Hash identifier: aLBSO+r2ImQQiZ5EEMq8ix4dDxYgpWtZzH6cHfBzOOI=
Subject key identifier: E2:DA:19:89:9D:51:26:89:2B:64:88:DB:5D:2A:77:04:59:6B:9E:3C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5E97A783AD4CC86601A7A6EE599D73BD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4toZiZ1RJokrZIjbXSp3BFlrnjw.roa
Signing time: Tue 12 Dec 2023 15:14:06 +0000
ROA not before: Tue 12 Dec 2023 15:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:97:a7:83:ad:4c:c8:66:01:a7:a6:ee:59:9d:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 15:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2da19899d5126892b6488db5d2a7704596b9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:5d:c3:e3:69:bf:6f:5e:cd:b5:36:4e:b7:
ec:7d:a5:f1:fb:a1:ae:f1:28:16:fd:a5:13:06:db:
8c:1b:74:a9:ea:73:92:3b:f9:5f:e8:0a:fa:b5:5d:
16:94:e6:aa:69:1d:5b:5a:46:bd:17:a8:31:ed:ce:
54:65:70:93:03:7b:df:39:ec:e5:21:12:b6:20:55:
1c:f4:c4:14:b9:59:d6:cd:90:a2:e4:bb:de:30:a0:
3c:e9:d6:b7:ff:31:53:32:d2:b3:a1:95:4c:72:92:
1a:f3:1e:36:15:f4:71:5b:85:30:fb:0f:d7:51:92:
c0:4e:1d:6e:8c:df:d0:f9:42:b5:01:1e:5b:3a:5f:
11:db:34:ca:c4:49:76:ea:a1:62:7d:32:ac:3a:20:
cc:9e:37:16:16:7b:16:92:23:8f:ec:8d:01:f7:40:
3c:80:9e:90:c0:b9:cd:4d:2c:60:27:96:a1:6f:06:
b9:8a:dd:be:1e:b1:8f:41:31:20:8d:13:dc:16:b5:
c2:4a:00:af:c9:be:0a:d8:6d:a9:61:64:b1:c9:9a:
82:12:c0:63:c3:32:b5:c0:6a:4c:f2:77:5b:c8:27:
aa:c1:27:4e:69:f7:20:5e:13:73:01:bc:35:a9:ec:
88:b6:72:54:94:d0:e3:e5:b1:f9:2d:ee:90:68:67:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:19:89:9D:51:26:89:2B:64:88:DB:5D:2A:77:04:59:6B:9E:3C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4toZiZ1RJokrZIjbXSp3BFlrnjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:b8:7b:82:33:27:07:19:8a:34:8a:a3:48:ac:d0:7a:3e:fb:
ca:6f:28:87:34:b8:49:8a:67:49:14:a5:5d:fb:46:bf:1d:89:
4e:06:fb:c3:1c:5d:80:a1:9d:a8:88:91:2b:f0:8e:5a:a8:20:
fe:21:71:a9:41:ae:f5:fb:8a:39:f8:65:ca:11:77:d7:bf:61:
76:33:2e:b1:48:a0:01:eb:59:50:ed:f8:c4:61:8e:9c:7a:46:
0c:2d:b7:4d:f9:12:38:62:36:49:1e:97:80:6c:17:21:cf:7a:
d2:dd:e9:31:34:80:30:41:07:0e:6e:d0:15:f5:20:1c:75:dd:
f2:37:72:5e:4f:e7:fc:9c:b8:6d:4f:35:28:2b:c1:8b:1f:3a:
87:90:89:1a:bf:31:a3:f7:04:23:92:5b:7d:68:77:c7:bf:6b:
55:57:3b:3e:8a:96:40:f6:80:12:a0:ec:2d:35:15:52:62:2b:
a0:e9:99:36:36:f4:24:c4:81:f5:c9:81:94:6b:81:a3:88:59:
6d:53:e7:fe:35:d5:94:53:a6:4f:55:0f:a2:7c:f6:c6:2c:97:
81:a8:3f:fe:00:8e:b0:ae:aa:6a:6a:b5:1d:02:14:25:86:8d:
b0:54:25:54:f0:04:96:ac:0f:81:05:ca:83:10:50:50:af:df:
a0:c3:ec:16
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxel6eDrUzIZgGnpu5ZnXO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEyMTUxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRhMTk4OTlkNTEyNjg5MmI2NDg4ZGI1ZDJhNzcwNDU5NmI5ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA5dw+Npv29ezbU2TrfsfaXx+6Gu
8SgW/aUTBtuMG3Sp6nOSO/lf6Ar6tV0WlOaqaR1bWka9F6gx7c5UZXCTA3vfOezl
IRK2IFUc9MQUuVnWzZCi5LveMKA86da3/zFTMtKzoZVMcpIa8x42FfRxW4Uw+w/X
UZLATh1ujN/Q+UK1AR5bOl8R2zTKxEl26qFifTKsOiDMnjcWFnsWkiOP7I0B90A8
gJ6QwLnNTSxgJ5ahbwa5it2+HrGPQTEgjRPcFrXCSgCvyb4K2G2pYWSxyZqCEsBj
wzK1wGpM8ndbyCeqwSdOafcgXhNzAbw1qeyItnJUlNDj5bH5Le6QaGeXsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOLaGYmdUSaJK2SI210qdwRZa548MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNHRvWmlaMVJKb2tyWklqYlhTcDNCRmxybmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHC4e4IzJwcZijSKo0is
0Ho++8pvKIc0uEmKZ0kUpV37Rr8diU4G+8McXYChnaiIkSvwjlqoIP4hcalBrvX7
ijn4ZcoRd9e/YXYzLrFIoAHrWVDt+MRhjpx6Rgwtt035EjhiNkkel4BsFyHPetLd
6TE0gDBBBw5u0BX1IBx13fI3cl5P5/ycuG1PNSgrwYsfOoeQiRq/MaP3BCOSW31o
d8e/a1VXOz6KlkD2gBKg7C01FVJiK6DpmTY29CTEgfXJgZRrgaOIWW1T5/411ZRT
pk9VD6J89sYsl4GoP/4AjrCuqmpqtR0CFCWGjbBUJVTwBJasD4EFyoMQUFCv36DD
7BY=
-----END CERTIFICATE-----
Generated at Wed May 14 23:26:38 2025 by rpki-client