Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8SlxzVaCliJ1MO7zj5oEQ_n9Iog.roa
File: 8SlxzVaCliJ1MO7zj5oEQ_n9Iog.roa (raw, json)
Hash identifier: 32oqGpDkntyb1w3x1C5pUmqRrUcsKzsnFp0gM0gha3I=
Subject key identifier: F1:29:71:CD:56:82:96:22:75:30:EE:F3:8F:9A:04:43:F9:FD:22:88
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAC7F7CF097334F328AFEE2EB75C8FE50
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8SlxzVaCliJ1MO7zj5oEQ_n9Iog.roa
Signing time: Wed 08 Nov 2023 01:15:17 +0000
ROA not before: Wed 08 Nov 2023 01:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:7f:7c:f0:97:33:4f:32:8a:fe:e2:eb:75:c8:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 01:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12971cd568296227530eef38f9a0443f9fd2288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:45:45:16:ab:2a:87:d4:a4:29:c6:c5:1a:
2f:80:b8:e2:dd:8b:1a:38:d9:fc:68:10:9e:41:7e:
d0:29:bf:a6:e4:c7:f0:8a:df:c4:46:a6:7e:1e:2d:
cd:cc:fa:b3:eb:6f:96:4f:35:98:64:eb:69:4d:f4:
34:82:98:98:4c:29:23:21:cc:6b:1e:8b:41:38:60:
56:fd:8d:14:ff:c7:e6:2f:fa:92:c7:45:f2:96:50:
c8:7e:0f:7d:00:a8:8d:91:d0:fa:16:60:71:e6:5d:
5b:d6:08:51:30:cb:06:c1:7a:0e:6e:ab:e1:b4:da:
3e:09:e9:4c:4b:15:51:a3:d6:bf:1e:a8:ad:f9:08:
35:06:7b:10:b0:53:89:21:46:6f:f7:27:45:05:a5:
cb:28:df:4d:cc:5b:a2:4e:02:b0:27:54:c9:47:61:
ba:e8:58:93:51:d8:e4:7e:72:d2:71:0d:cb:cf:5b:
17:22:bf:1e:75:0c:1b:d0:6d:ff:7b:1b:78:e5:a8:
bc:49:92:8c:f6:1d:97:28:91:ed:58:34:35:93:ac:
57:6a:9d:3b:51:97:98:a9:7b:a0:88:f1:e3:8f:a7:
e8:80:a2:bd:db:e9:cc:bd:f8:fb:e4:36:f6:b7:37:
6f:c1:52:bd:43:07:42:36:bc:db:9a:fc:ee:cc:07:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:71:CD:56:82:96:22:75:30:EE:F3:8F:9A:04:43:F9:FD:22:88
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8SlxzVaCliJ1MO7zj5oEQ_n9Iog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:79:e5:e7:68:17:ac:85:a1:66:8c:cd:e5:70:54:cb:23:71:
38:5d:57:2a:15:1a:8f:cf:19:17:7c:53:1c:75:6a:6f:2a:ab:
33:5c:f6:8e:36:82:f3:bc:d8:9b:c9:a4:ee:56:a2:c3:61:32:
74:13:b1:f7:19:95:e6:89:51:59:ae:96:03:44:56:e3:d3:fd:
b2:40:34:22:dd:de:b5:83:35:c6:d7:55:28:43:da:5e:dd:06:
9f:a6:9b:f8:a0:be:dc:ea:be:26:cc:8b:26:8a:d1:40:54:7a:
13:b9:9c:a4:8e:72:fc:92:97:f9:d5:8d:b4:b1:68:53:0c:ff:
7d:05:ca:46:0c:9f:e1:55:23:81:ce:0a:b5:d9:fd:cd:2b:83:
c4:39:c4:9d:6a:09:68:7c:28:ec:8c:4d:9b:1c:54:e2:43:92:
c0:48:f1:ad:4c:a5:f0:dc:2c:1f:e6:80:2d:27:87:5b:e3:9e:
1f:c7:48:01:80:ed:4a:63:40:e1:6c:b3:fb:ac:8c:6c:52:1f:
1e:d2:43:11:81:af:51:15:4a:0c:70:61:e9:61:98:e0:2a:bd:
aa:d1:3b:d0:8b:51:1c:2f:aa:23:95:d3:8c:1b:2a:92:29:d6:
14:b1:27:0d:7f:6b:73:06:53:0b:cd:c0:67:c0:c2:5d:84:a7:
42:8a:f3:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYusf3zwlzNPMor+4ut1yP5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MDExNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTI5NzFjZDU2ODI5NjIyNzUzMGVlZjM4ZjlhMDQ0M2Y5ZmQyMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss1FRRarKofUpCnGxRovgLji3Ysa
ONn8aBCeQX7QKb+m5Mfwit/ERqZ+Hi3NzPqz62+WTzWYZOtpTfQ0gpiYTCkjIcxr
HotBOGBW/Y0U/8fmL/qSx0XyllDIfg99AKiNkdD6FmBx5l1b1ghRMMsGwXoObqvh
tNo+CelMSxVRo9a/Hqit+Qg1BnsQsFOJIUZv9ydFBaXLKN9NzFuiTgKwJ1TJR2G6
6FiTUdjkfnLScQ3Lz1sXIr8edQwb0G3/ext45ai8SZKM9h2XKJHtWDQ1k6xXap07
UZeYqXugiPHjj6fogKK92+nMvfj75Db2tzdvwVK9QwdCNrzbmvzuzAfEaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPEpcc1WgpYidTDu84+aBEP5/SKIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOFNseHpWYUNsaUoxTU83emo1b0VRX245SW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKN55edoF6yFoWaMzeVw
VMsjcThdVyoVGo/PGRd8Uxx1am8qqzNc9o42gvO82JvJpO5WosNhMnQTsfcZleaJ
UVmulgNEVuPT/bJANCLd3rWDNcbXVShD2l7dBp+mm/igvtzqvibMiyaK0UBUehO5
nKSOcvySl/nVjbSxaFMM/30FykYMn+FVI4HOCrXZ/c0rg8Q5xJ1qCWh8KOyMTZsc
VOJDksBI8a1MpfDcLB/mgC0nh1vjnh/HSAGA7UpjQOFss/usjGxSHx7SQxGBr1EV
SgxwYelhmOAqvarRO9CLURwvqiOV04wbKpIp1hSxJw1/a3MGUwvNwGfAwl2Ep0KK
8+g=
-----END CERTIFICATE-----
Generated at Sun May 11 09:32:03 2025 by rpki-client