Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9VJO3NdW-lpgpQXR10CNUtrA4Uc.roa
File: 9VJO3NdW-lpgpQXR10CNUtrA4Uc.roa (raw, json)
Hash identifier: qSJHSVUNibciuNFWu5kdnn5ZNlHYVaQr9/wiSHXxZgY=
Subject key identifier: F5:52:4E:DC:D7:56:FA:5A:60:A5:05:D1:D7:40:8D:52:DA:C0:E1:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B83ECCDFC36C21BCC74C3F5114BE288CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9VJO3NdW-lpgpQXR10CNUtrA4Uc.roa
Signing time: Tue 31 Oct 2023 04:10:16 +0000
ROA not before: Tue 31 Oct 2023 04:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:83:ec:cd:fc:36:c2:1b:cc:74:c3:f5:11:4b:e2:88:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 04:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5524edcd756fa5a60a505d1d7408d52dac0e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:6b:20:c9:14:b6:86:2c:fd:f7:3d:cf:be:
d4:4d:5b:f4:fa:56:3d:02:0f:92:9a:bf:22:30:01:
1d:79:19:9c:3a:5a:ca:fd:ed:1a:bc:b8:1e:e9:94:
c6:bb:dc:37:8c:fe:8c:9b:07:15:43:37:0a:dd:2b:
27:35:e6:ee:d9:55:ed:b1:85:d5:7b:95:fb:b4:1d:
1c:e7:bd:ef:d8:48:d2:fd:04:5a:7e:af:9a:77:91:
c8:f0:d9:20:b5:ce:04:5d:52:a6:20:1b:0a:08:e6:
fc:98:46:94:9e:b8:78:cf:a2:52:ab:45:cc:38:5f:
40:67:34:9a:3e:04:d8:2e:07:f8:ef:8f:16:9c:07:
ae:a3:86:42:de:0a:29:69:15:c4:ce:02:b4:b3:ac:
19:40:7c:e5:83:b5:34:09:36:ed:97:db:7a:29:1c:
d2:da:13:18:48:34:e1:44:6a:3d:c9:2a:19:47:96:
7d:1a:b4:d8:17:7b:86:39:3b:f1:9d:f3:8d:60:1c:
62:37:e3:75:c8:82:2a:03:bd:2a:b5:1c:f5:f2:08:
e2:ab:3d:41:d7:79:73:d3:3c:e4:24:1a:d7:6a:71:
bb:34:cc:e2:40:01:af:33:24:b2:f8:88:48:f9:3d:
5f:f8:8f:0a:81:f0:4d:9d:18:01:7d:dc:8b:ee:ec:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:52:4E:DC:D7:56:FA:5A:60:A5:05:D1:D7:40:8D:52:DA:C0:E1:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9VJO3NdW-lpgpQXR10CNUtrA4Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9d:e9:e4:34:9e:eb:e8:4b:92:be:b2:f1:39:20:9d:e1:11:
67:a8:b9:96:4d:5a:96:11:81:36:44:3d:5d:65:29:d0:25:6e:
0a:0a:97:a8:a3:36:81:2f:08:92:f0:fb:99:b8:33:b1:b5:60:
93:4a:fe:c7:35:a1:5b:8f:93:ef:8d:8b:53:38:99:af:23:56:
92:26:01:70:2c:cb:89:11:65:e6:70:91:6c:fe:fc:b7:45:88:
a1:3d:3f:50:bf:e4:a2:d6:f1:83:a7:90:7f:7f:73:80:48:18:
4a:97:49:ed:66:bb:67:c8:24:13:a2:6f:48:50:e1:2e:f6:35:
2f:ca:81:56:7b:e8:a0:54:69:0f:22:88:fb:d7:4c:6f:a0:fa:
30:06:40:f9:61:c8:36:8d:ea:5d:da:77:f4:24:f8:33:73:2e:
a5:6a:2e:00:59:1c:eb:43:d5:d0:02:dd:e5:92:0a:b8:0f:5f:
c8:f9:a8:c2:fe:9a:5b:9f:f2:5e:1d:6c:58:5c:6d:32:f1:c9:
3f:f7:29:cb:57:ad:24:fb:37:93:a7:c4:17:d9:5f:fb:fc:08:
50:66:aa:cd:86:fa:e3:76:80:9e:7f:4d:91:2a:2e:db:6b:eb:
b5:98:b7:c5:27:d8:ae:92:3f:47:81:62:b8:4c:c3:75:41:9d:
19:94:02:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuD7M38NsIbzHTD9RFL4ojOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMDQxMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTUyNGVkY2Q3NTZmYTVhNjBhNTA1ZDFkNzQwOGQ1MmRhYzBlMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs9rIMkUtoYs/fc9z77UTVv0+lY9
Ag+Smr8iMAEdeRmcOlrK/e0avLge6ZTGu9w3jP6MmwcVQzcK3SsnNebu2VXtsYXV
e5X7tB0c573v2EjS/QRafq+ad5HI8Nkgtc4EXVKmIBsKCOb8mEaUnrh4z6JSq0XM
OF9AZzSaPgTYLgf4748WnAeuo4ZC3gopaRXEzgK0s6wZQHzlg7U0CTbtl9t6KRzS
2hMYSDThRGo9ySoZR5Z9GrTYF3uGOTvxnfONYBxiN+N1yIIqA70qtRz18gjiqz1B
13lz0zzkJBrXanG7NMziQAGvMySy+IhI+T1f+I8KgfBNnRgBfdyL7uw+BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPVSTtzXVvpaYKUF0ddAjVLawOFHMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOVZKTzNOZFctbHBncFFYUjEwQ05VdHJBNFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF6d6eQ0nuvoS5K+svE5
IJ3hEWeouZZNWpYRgTZEPV1lKdAlbgoKl6ijNoEvCJLw+5m4M7G1YJNK/sc1oVuP
k++Ni1M4ma8jVpImAXAsy4kRZeZwkWz+/LdFiKE9P1C/5KLW8YOnkH9/c4BIGEqX
Se1mu2fIJBOib0hQ4S72NS/KgVZ76KBUaQ8iiPvXTG+g+jAGQPlhyDaN6l3ad/Qk
+DNzLqVqLgBZHOtD1dAC3eWSCrgPX8j5qML+mluf8l4dbFhcbTLxyT/3KctXrST7
N5OnxBfZX/v8CFBmqs2G+uN2gJ5/TZEqLttr67WYt8Un2K6SP0eBYrhMw3VBnRmU
Aqc=
-----END CERTIFICATE-----
Generated at Tue May 13 04:29:13 2025 by rpki-client