Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GEyyTgo5NBt081VYM55NMAR1aI.roa
File: 5GEyyTgo5NBt081VYM55NMAR1aI.roa (raw, json)
Hash identifier: 80uoOcF1L8Sb4mCzajMDpj1J3b8Jwr6ppM043e7wG4k=
Subject key identifier: E4:61:32:C9:38:28:E4:D0:6D:D3:CD:55:60:CE:79:34:C0:11:D5:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5A1A9F2534463E572004CF10B30E7BF3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GEyyTgo5NBt081VYM55NMAR1aI.roa
Signing time: Mon 23 Oct 2023 01:16:15 +0000
ROA not before: Mon 23 Oct 2023 01:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:1a:9f:25:34:46:3e:57:20:04:cf:10:b3:0e:7b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 01:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e46132c93828e4d06dd3cd5560ce7934c011d5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:c7:96:6e:92:3c:76:69:01:2f:c0:10:5b:
5a:21:ae:27:bc:65:34:d2:39:a1:b2:91:05:08:cc:
e1:20:bb:b8:e8:be:4c:1c:b5:35:f7:a1:40:39:03:
49:98:85:ae:74:bc:86:82:4e:78:fd:bd:a3:23:be:
00:1d:06:d5:88:46:ce:93:1f:4a:25:ad:3e:7f:ff:
c5:a8:f3:e7:29:00:bd:f0:db:60:4a:c7:7e:bb:ae:
a9:22:70:7d:97:f8:a9:d1:2b:3d:30:6d:14:2a:a4:
c0:a8:fb:be:c1:bf:2a:cd:18:5e:47:d0:a6:97:bc:
f0:14:64:5c:d3:09:16:b7:a0:01:78:a0:35:07:d3:
ef:27:63:94:51:37:d1:a2:b8:e8:0d:40:c9:a7:88:
2e:03:4f:73:48:4b:79:ef:47:7a:c0:d8:de:be:74:
18:23:85:76:71:9f:f6:68:bc:47:5a:63:b0:5d:7d:
52:8c:d7:91:2d:73:29:b0:75:af:e7:69:61:34:a6:
bb:10:f3:9d:ca:09:83:d6:78:6a:11:d6:cb:f0:c3:
ee:a2:b5:0f:8d:2b:5e:b6:30:96:ed:17:c9:05:8f:
d3:64:3d:5f:33:6b:ad:c9:ef:0f:96:a9:76:42:02:
8b:75:e0:6c:c7:bf:2e:e1:55:a9:b0:d6:f7:aa:41:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:32:C9:38:28:E4:D0:6D:D3:CD:55:60:CE:79:34:C0:11:D5:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GEyyTgo5NBt081VYM55NMAR1aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:18:1f:3f:01:ff:10:f9:6f:3e:d0:eb:13:95:8f:d2:ab:3b:
79:ed:18:a3:eb:4a:c1:15:8a:5e:92:de:7b:d7:9b:6e:fa:fc:
f2:77:bd:22:b3:b8:fa:7f:70:46:6a:a8:0d:d7:cb:40:2a:9b:
fa:55:24:86:99:fd:8c:f0:de:68:ae:59:47:2b:b5:b6:6b:83:
47:23:98:e8:6b:93:48:6b:2d:56:ff:73:c8:ea:aa:0c:cc:e2:
23:f1:9f:1b:60:08:a3:a1:9a:13:3d:49:70:d5:51:cb:6f:4e:
ca:52:aa:88:03:18:7a:d6:53:af:de:f5:19:26:4c:4f:12:58:
70:6c:d5:19:3b:ee:32:5c:88:a9:29:75:89:64:4b:95:01:ce:
6d:83:50:70:c2:3a:0f:f2:ff:c9:82:84:2e:02:67:39:b4:66:
1d:56:84:f7:7a:f9:75:73:33:1b:c0:6c:a3:89:e0:1f:56:95:
f1:2a:8e:60:91:6e:a5:ba:1c:83:cf:4b:55:c9:eb:c9:59:e0:
4c:84:02:30:fb:1f:a4:97:d7:a1:ad:ae:04:50:e9:44:9b:92:
fb:bd:1d:22:1d:1a:37:ee:24:dd:70:5a:79:9e:a0:dc:0f:1d:
ec:dd:02:68:ec:a5:2f:12:b8:a3:ca:df:27:cc:2f:16:3f:50:
ce:ab:57:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtaGp8lNEY+VyAEzxCzDnvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIzMDExNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDYxMzJjOTM4MjhlNGQwNmRkM2NkNTU2MGNlNzkzNGMwMTFkNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjDHlm6SPHZpAS/AEFtaIa4nvGU0
0jmhspEFCMzhILu46L5MHLU196FAOQNJmIWudLyGgk54/b2jI74AHQbViEbOkx9K
Ja0+f//FqPPnKQC98NtgSsd+u66pInB9l/ip0Ss9MG0UKqTAqPu+wb8qzRheR9Cm
l7zwFGRc0wkWt6ABeKA1B9PvJ2OUUTfRorjoDUDJp4guA09zSEt570d6wNjevnQY
I4V2cZ/2aLxHWmOwXX1SjNeRLXMpsHWv52lhNKa7EPOdygmD1nhqEdbL8MPuorUP
jStetjCW7RfJBY/TZD1fM2utye8Plql2QgKLdeBsx78u4VWpsNb3qkEezwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFORhMsk4KOTQbdPNVWDOeTTAEdWiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNUdFeXlUZ281TkJ0MDgxVllNNTVOTUFSMWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMIYHz8B/xD5bz7Q6xOV
j9KrO3ntGKPrSsEVil6S3nvXm276/PJ3vSKzuPp/cEZqqA3Xy0Aqm/pVJIaZ/Yzw
3miuWUcrtbZrg0cjmOhrk0hrLVb/c8jqqgzM4iPxnxtgCKOhmhM9SXDVUctvTspS
qogDGHrWU6/e9RkmTE8SWHBs1Rk77jJciKkpdYlkS5UBzm2DUHDCOg/y/8mChC4C
Zzm0Zh1WhPd6+XVzMxvAbKOJ4B9WlfEqjmCRbqW6HIPPS1XJ68lZ4EyEAjD7H6SX
16GtrgRQ6USbkvu9HSIdGjfuJN1wWnmeoNwPHezdAmjspS8SuKPK3yfMLxY/UM6r
V4E=
-----END CERTIFICATE-----
Generated at Mon May 12 18:43:30 2025 by rpki-client