Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8UUwqz4GyHkcQ37OTtV60N8CN3A.roa
File: 8UUwqz4GyHkcQ37OTtV60N8CN3A.roa (raw, json)
Hash identifier: TlNzKdrh3ZbqCvuCZ88fL63TDGX13HaiYCMW/apiMtI=
Subject key identifier: F1:45:30:AB:3E:06:C8:79:1C:43:7E:CE:4E:D5:7A:D0:DF:02:37:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB6FF282B71DA3C345D92110ECCFD2219
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8UUwqz4GyHkcQ37OTtV60N8CN3A.roa
Signing time: Fri 10 Nov 2023 02:10:57 +0000
ROA not before: Fri 10 Nov 2023 02:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b6:ff:28:2b:71:da:3c:34:5d:92:11:0e:cc:fd:22:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 02:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14530ab3e06c8791c437ece4ed57ad0df023770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:24:87:56:ab:4e:e4:3e:fc:2a:9a:7d:d8:
a6:c7:66:39:cc:5c:1d:43:98:e3:b8:8b:77:a8:8d:
94:77:9e:43:34:20:ca:ec:6d:2f:d4:d4:cc:79:e8:
4b:e7:77:0a:61:8a:82:98:b1:c1:99:6e:03:78:be:
84:8f:df:16:56:6f:b9:75:24:43:b9:61:da:d9:e6:
1c:3e:36:87:e8:48:4c:61:71:84:17:59:2d:2c:f9:
d1:dd:c6:29:ef:49:49:c8:f5:b4:14:5a:80:dc:7c:
08:7a:86:fe:42:e1:1d:55:50:ea:32:43:c9:b0:06:
9d:ca:a7:30:b9:43:e8:b7:47:48:17:d0:71:e0:bd:
b6:f0:28:bd:ee:39:e3:e5:16:a0:67:3e:7f:bb:eb:
26:52:04:02:cb:7d:cf:19:11:f6:8d:79:ba:06:52:
f1:26:85:18:2f:66:2e:fc:65:0e:2d:90:1c:43:dc:
f8:bf:05:ab:64:06:bf:a4:52:8c:db:1b:da:27:e8:
47:e3:29:ac:e9:ea:77:53:14:8c:31:30:56:02:cf:
ea:57:82:7d:70:e9:74:c4:a5:06:12:36:c0:ba:b4:
7d:6d:84:7b:a0:0e:3f:99:00:29:0e:46:2c:52:8c:
b1:a1:16:8f:43:c3:c9:56:df:96:66:70:c4:38:07:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:30:AB:3E:06:C8:79:1C:43:7E:CE:4E:D5:7A:D0:DF:02:37:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8UUwqz4GyHkcQ37OTtV60N8CN3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:25:42:47:82:a0:60:d2:3a:f0:80:23:d8:3d:ad:97:dd:ff:
fe:23:28:40:2a:b1:d1:42:ff:b6:34:cd:c0:5c:64:db:bd:f2:
2d:97:00:7e:53:78:39:e7:27:0f:8d:82:3b:95:6c:55:ab:5a:
a0:43:c0:69:9a:70:12:2e:50:83:d5:92:b7:4e:59:b8:60:c0:
64:1d:2f:18:be:b1:ca:cb:ff:60:3b:95:c4:af:0b:f8:c0:b7:
71:d7:8c:a4:5f:2b:7e:7e:d5:dd:73:fe:4a:50:68:96:4c:7e:
b2:ba:2f:64:9d:00:01:0a:68:2c:85:09:ef:b3:29:a7:8d:5b:
34:2a:cb:8c:5d:77:5e:a3:f9:69:ff:97:cd:78:b7:5b:3f:4a:
ff:85:aa:1f:4c:37:64:52:70:1e:b3:ff:3c:15:89:80:31:49:
d9:99:47:fb:7a:f8:a7:e7:96:f7:d9:f8:c7:5f:d3:51:f3:44:
2e:50:30:79:2c:80:2d:70:b2:9f:68:bf:7e:e4:7e:40:3d:05:
65:6b:dd:c5:4d:5b:4e:26:72:d3:fe:39:c6:e2:5e:97:f5:73:
76:da:9f:15:ef:80:74:a2:ab:c1:d8:3c:0c:8f:53:57:d1:0c:
4e:76:1f:f9:b5:b2:0a:26:66:7c:3a:76:81:0c:7f:4d:4f:0a:
15:5d:f8:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu2/ygrcdo8NF2SEQ7M/SIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDIxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ1MzBhYjNlMDZjODc5MWM0MzdlY2U0ZWQ1N2FkMGRmMDIzNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPAkh1arTuQ+/Cqafdimx2Y5zFwd
Q5jjuIt3qI2Ud55DNCDK7G0v1NTMeehL53cKYYqCmLHBmW4DeL6Ej98WVm+5dSRD
uWHa2eYcPjaH6EhMYXGEF1ktLPnR3cYp70lJyPW0FFqA3HwIeob+QuEdVVDqMkPJ
sAadyqcwuUPot0dIF9Bx4L228Ci97jnj5RagZz5/u+smUgQCy33PGRH2jXm6BlLx
JoUYL2Yu/GUOLZAcQ9z4vwWrZAa/pFKM2xvaJ+hH4yms6ep3UxSMMTBWAs/qV4J9
cOl0xKUGEjbAurR9bYR7oA4/mQApDkYsUoyxoRaPQ8PJVt+WZnDEOAcRBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPFFMKs+Bsh5HEN+zk7VetDfAjdwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOFVVd3F6NEd5SGtjUTM3T1R0VjYwTjhDTjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFMlQkeCoGDSOvCAI9g9
rZfd//4jKEAqsdFC/7Y0zcBcZNu98i2XAH5TeDnnJw+NgjuVbFWrWqBDwGmacBIu
UIPVkrdOWbhgwGQdLxi+scrL/2A7lcSvC/jAt3HXjKRfK35+1d1z/kpQaJZMfrK6
L2SdAAEKaCyFCe+zKaeNWzQqy4xdd16j+Wn/l814t1s/Sv+Fqh9MN2RScB6z/zwV
iYAxSdmZR/t6+KfnlvfZ+Mdf01HzRC5QMHksgC1wsp9ov37kfkA9BWVr3cVNW04m
ctP+OcbiXpf1c3banxXvgHSiq8HYPAyPU1fRDE52H/m1sgomZnw6doEMf01PChVd
+Jg=
-----END CERTIFICATE-----
Generated at Thu May 15 13:29:47 2025 by rpki-client