Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ACouYS6_uFTJcJRgC9NHWYIx94.roa
File: 7ACouYS6_uFTJcJRgC9NHWYIx94.roa (raw, json)
Hash identifier: 240JxAkOSHSBem0TNGAWV5n5UttM3n7WNFFI0Quv4G4=
Subject key identifier: EC:00:A8:B9:84:BA:FE:E1:53:25:C2:51:80:2F:4D:1D:66:08:C7:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8DC713FDA0E54C41A82C878A39F3A3DC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ACouYS6_uFTJcJRgC9NHWYIx94.roa
Signing time: Thu 02 Nov 2023 02:05:16 +0000
ROA not before: Thu 02 Nov 2023 02:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8dc6:a48a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:c7:13:fd:a0:e5:4c:41:a8:2c:87:8a:39:f3:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 02:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec00a8b984bafee15325c251802f4d1d6608c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:a2:fc:b7:62:76:e4:95:e5:25:fe:05:09:
9e:ec:60:ad:37:2b:b7:fe:97:57:58:ad:35:db:a8:
9f:60:2f:f9:96:41:b3:76:5c:aa:4a:61:c0:61:1a:
e7:e7:cd:22:4a:eb:4b:c2:5a:23:bb:bd:ee:32:41:
e6:2d:d8:30:60:7d:5d:12:9f:07:ff:b1:2c:12:32:
8e:bf:3a:f6:c9:eb:c9:65:f0:8d:35:72:df:0c:0f:
6f:f5:d9:2e:2c:ea:55:68:fa:b0:f2:0f:a9:78:81:
ca:c4:77:14:15:d0:4b:af:05:ff:f7:b4:9f:ef:51:
94:5f:92:89:34:16:58:52:61:c1:20:63:9e:55:14:
19:a1:56:68:23:2c:47:7b:a3:97:53:88:df:86:ba:
39:25:80:59:3c:a5:5e:0e:80:b2:15:b9:e1:38:c9:
a0:d3:2f:a9:76:f9:0e:da:0b:ff:d4:0f:e7:0e:2c:
dd:94:e9:cd:ab:61:af:5d:cb:7e:e5:e2:29:38:78:
f7:75:63:b0:cd:81:e6:18:a3:c0:0e:45:b0:ad:76:
52:0d:58:ae:47:aa:c4:f9:6a:38:15:68:50:c1:16:
7f:4c:17:9a:91:de:ec:15:f1:10:a8:46:44:14:cc:
78:c0:89:a0:3c:f5:81:0f:43:4a:41:eb:a6:08:63:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:A8:B9:84:BA:FE:E1:53:25:C2:51:80:2F:4D:1D:66:08:C7:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ACouYS6_uFTJcJRgC9NHWYIx94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:19:21:99:95:a5:43:29:ab:57:fb:6e:0a:85:d4:dd:e3:61:
75:cf:c2:91:c0:3d:e4:00:4b:2d:54:ff:44:21:b9:36:ba:47:
f7:ea:ac:72:30:ed:95:69:0a:b9:4c:1c:8f:a4:12:a9:cc:ab:
f1:b0:2f:73:93:71:c3:34:8c:f9:b4:7a:21:de:cd:7c:46:55:
4c:f5:97:79:9f:ce:03:75:31:ce:ce:0f:a2:13:f0:8f:13:c3:
42:ee:04:21:6f:fb:3d:64:bb:36:c4:12:82:c2:3f:b5:83:f3:
4c:2b:79:00:41:8f:ec:35:f0:27:8d:ec:c6:bc:b3:40:50:47:
10:9a:d9:91:63:97:d3:03:2f:6c:b5:32:f2:75:63:7b:40:24:
70:ba:10:c4:d9:92:6f:63:fd:74:0f:45:ab:c0:02:35:cf:14:
c4:fd:ca:07:c8:94:36:3b:c5:95:9a:43:e9:7b:ee:8d:b6:b3:
5f:fe:64:69:7e:36:a8:82:19:2f:16:2e:53:53:32:d6:51:68:
7e:0a:1e:3e:75:c1:14:b7:35:48:99:ab:bd:b5:2c:8a:06:5e:
b1:a9:b6:f1:f4:2a:2f:b3:e5:4f:86:28:a2:c5:eb:0f:a0:14:
e6:38:e4:1a:38:17:4d:d5:82:fb:f5:b4:21:15:df:c0:5f:00:
84:49:7d:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuNxxP9oOVMQagsh4o586PcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAyMDIwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzAwYThiOTg0YmFmZWUxNTMyNWMyNTE4MDJmNGQxZDY2MDhjN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0Oi/LdiduSV5SX+BQme7GCtNyu3
/pdXWK0126ifYC/5lkGzdlyqSmHAYRrn580iSutLwloju73uMkHmLdgwYH1dEp8H
/7EsEjKOvzr2yevJZfCNNXLfDA9v9dkuLOpVaPqw8g+peIHKxHcUFdBLrwX/97Sf
71GUX5KJNBZYUmHBIGOeVRQZoVZoIyxHe6OXU4jfhro5JYBZPKVeDoCyFbnhOMmg
0y+pdvkO2gv/1A/nDizdlOnNq2GvXct+5eIpOHj3dWOwzYHmGKPADkWwrXZSDViu
R6rE+Wo4FWhQwRZ/TBeakd7sFfEQqEZEFMx4wImgPPWBD0NKQeumCGOVNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOwAqLmEuv7hUyXCUYAvTR1mCMfeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvN0FDb3VZUzZfdUZUSmNKUmdDOU5IV1lJeDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADIZIZmVpUMpq1f7bgqF
1N3jYXXPwpHAPeQASy1U/0QhuTa6R/fqrHIw7ZVpCrlMHI+kEqnMq/GwL3OTccM0
jPm0eiHezXxGVUz1l3mfzgN1Mc7OD6IT8I8Tw0LuBCFv+z1kuzbEEoLCP7WD80wr
eQBBj+w18CeN7Ma8s0BQRxCa2ZFjl9MDL2y1MvJ1Y3tAJHC6EMTZkm9j/XQPRavA
AjXPFMT9ygfIlDY7xZWaQ+l77o22s1/+ZGl+NqiCGS8WLlNTMtZRaH4KHj51wRS3
NUiZq721LIoGXrGptvH0Ki+z5U+GKKLF6w+gFOY45Bo4F03Vgvv1tCEV38BfAIRJ
fd8=
-----END CERTIFICATE-----
Generated at Sat May 10 19:08:04 2025 by rpki-client