Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RqxfeUG7kz3BZpjbs0Z7YPMzBw.roa
File: 5RqxfeUG7kz3BZpjbs0Z7YPMzBw.roa (raw, json)
Hash identifier: LUqOqO72XRWgMXEmxKhiIn7ag1R1ManT/XA/0+wHhac=
Subject key identifier: E5:1A:B1:7D:E5:06:EE:4C:F7:05:9A:63:6E:CD:19:ED:83:CC:CC:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDF1D00D389D764F4B393D3D29DD7EE14
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RqxfeUG7kz3BZpjbs0Z7YPMzBw.roa
Signing time: Fri 17 Nov 2023 21:08:21 +0000
ROA not before: Fri 17 Nov 2023 21:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:1d:00:d3:89:d7:64:f4:b3:93:d3:d2:9d:d7:ee:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 21:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51ab17de506ee4cf7059a636ecd19ed83cccc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:35:b4:e0:10:b2:27:01:78:02:54:e7:5a:
e4:bd:d5:bc:91:9b:ac:1b:ec:fa:6c:b5:67:b9:bb:
b6:04:0e:fb:cb:6e:fa:89:bb:24:b2:f3:42:f9:89:
7e:ff:6f:4d:e2:cd:41:a3:18:94:07:a1:4c:a0:bc:
94:26:7b:d9:e8:25:f5:1f:1f:36:45:63:de:0e:99:
55:ea:0a:7f:b6:e3:ab:f0:5f:d8:47:5f:d5:cc:82:
4a:bd:47:f1:81:b8:df:27:e0:81:cc:bd:fe:ef:b7:
55:f0:23:fa:6a:db:4c:c7:03:45:3c:cf:ae:a1:68:
d7:78:20:8a:c0:1c:3d:9d:a3:00:33:ce:6b:3a:a4:
19:a4:45:a1:e3:f7:09:39:e8:d1:0b:13:32:a5:df:
0b:59:f6:48:20:7f:22:df:95:02:0a:d8:ae:4a:92:
2d:23:8b:8b:9f:41:95:09:3d:de:d4:4a:d1:e0:c3:
22:9d:2b:44:7e:83:f9:88:94:82:3f:3b:53:44:f2:
cc:a4:83:1b:9e:2f:13:43:ad:7e:8a:10:8e:0a:36:
26:ee:aa:f5:09:95:8a:77:96:f5:c6:9b:20:cf:09:
5f:ba:47:4e:60:c2:56:1b:1b:6f:27:a2:5a:ee:26:
f3:2f:09:f3:b0:1d:d5:55:bb:aa:79:4e:3e:26:42:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:B1:7D:E5:06:EE:4C:F7:05:9A:63:6E:CD:19:ED:83:CC:CC:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RqxfeUG7kz3BZpjbs0Z7YPMzBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:19:04:89:ad:96:72:b0:ff:04:4d:ae:0f:a5:65:98:70:59:
27:b1:b2:4f:54:d1:55:67:d1:03:d2:4a:8c:d6:5b:45:01:80:
9a:c2:e8:34:89:8c:64:ef:ac:89:de:41:8e:c2:fb:17:0a:21:
0d:f1:22:0f:a2:dd:2e:0a:f8:90:f1:d4:27:e7:a7:64:f0:c1:
1b:87:4b:50:a2:fb:08:2a:e2:25:4c:c7:d8:f2:40:79:64:75:
c5:d8:8a:81:e1:fe:9b:b1:59:58:a0:90:63:13:a3:17:13:97:
53:fa:e0:82:94:48:c1:90:1c:8f:3c:bf:2e:31:4b:45:d9:15:
a6:d3:c6:91:87:0c:e2:33:58:5b:32:7b:34:2d:dc:fb:d1:02:
ac:0e:fe:a3:7f:a7:60:b0:6b:64:d1:20:3c:e5:d8:e8:1b:9b:
70:c8:b7:fd:f3:f7:72:55:90:29:27:b6:15:14:71:6d:d7:1e:
5b:49:9f:3c:2c:aa:39:6a:ea:b6:9e:fd:46:af:dc:9c:09:1a:
9a:89:56:e0:b9:31:a0:7a:77:e0:60:27:8a:8c:a8:bc:19:f8:
53:47:26:5c:62:8a:19:fc:41:6c:78:0d:b8:ec:ca:b0:3d:8e:
65:38:b5:b6:c4:2b:bd:a0:ef:a5:40:c9:ff:0e:f8:30:7f:24:
da:63:35:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvfHQDTiddk9LOT09Kd1+4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE3MjEwODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTFhYjE3ZGU1MDZlZTRjZjcwNTlhNjM2ZWNkMTllZDgzY2NjYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIY1tOAQsicBeAJU51rkvdW8kZus
G+z6bLVnubu2BA77y276ibsksvNC+Yl+/29N4s1BoxiUB6FMoLyUJnvZ6CX1Hx82
RWPeDplV6gp/tuOr8F/YR1/VzIJKvUfxgbjfJ+CBzL3+77dV8CP6attMxwNFPM+u
oWjXeCCKwBw9naMAM85rOqQZpEWh4/cJOejRCxMypd8LWfZIIH8i35UCCtiuSpIt
I4uLn0GVCT3e1ErR4MMinStEfoP5iJSCPztTRPLMpIMbni8TQ61+ihCOCjYm7qr1
CZWKd5b1xpsgzwlfukdOYMJWGxtvJ6Ja7ibzLwnzsB3VVbuqeU4+JkKr/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOUasX3lBu5M9wWaY27NGe2DzMwcMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNVJxeGZlVUc3a3ozQlpwamJzMFo3WVBNekJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA4ZBImtlnKw/wRNrg+l
ZZhwWSexsk9U0VVn0QPSSozWW0UBgJrC6DSJjGTvrIneQY7C+xcKIQ3xIg+i3S4K
+JDx1Cfnp2TwwRuHS1Ci+wgq4iVMx9jyQHlkdcXYioHh/puxWVigkGMToxcTl1P6
4IKUSMGQHI88vy4xS0XZFabTxpGHDOIzWFsyezQt3PvRAqwO/qN/p2Cwa2TRIDzl
2Ogbm3DIt/3z93JVkCknthUUcW3XHltJnzwsqjlq6rae/Uav3JwJGpqJVuC5MaB6
d+BgJ4qMqLwZ+FNHJlxiihn8QWx4DbjsyrA9jmU4tbbEK72g76VAyf8O+DB/JNpj
NZ8=
-----END CERTIFICATE-----
Generated at Mon May 12 13:28:06 2025 by rpki-client