Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9wlopu1mQ2SNoSXD7zIpQhQL-WM.roa
File: 9wlopu1mQ2SNoSXD7zIpQhQL-WM.roa (raw, json)
Hash identifier: XRFnPhYSJsKs7tvRI5GnrP/9ugc5R6y/UGWlf23/xzU=
Subject key identifier: F7:09:68:A6:ED:66:43:64:8D:A1:25:C3:EF:32:29:42:14:0B:F9:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE520007A11A63DE0B22280AA3D556BF7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9wlopu1mQ2SNoSXD7zIpQhQL-WM.roa
Signing time: Sun 19 Nov 2023 01:09:21 +0000
ROA not before: Sun 19 Nov 2023 01:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:20:00:7a:11:a6:3d:e0:b2:22:80:aa:3d:55:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 01:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70968a6ed6643648da125c3ef322942140bf963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:83:8c:42:d8:29:ed:7d:12:27:fb:96:42:
91:fb:2a:d2:32:d7:6b:67:50:46:8e:b6:d3:b8:ab:
03:f9:f9:aa:03:1a:0d:8a:1a:f3:79:1f:9a:8e:bd:
7d:cd:ba:e0:e3:21:fd:2e:89:2a:56:a0:37:fd:00:
9e:32:24:15:a1:8a:14:ba:10:4a:7b:7c:71:71:9f:
9c:dd:62:f9:e5:a7:23:34:08:4d:3c:2c:ad:49:f9:
51:fc:87:10:72:6e:e7:bb:bc:f4:d2:88:f3:32:f3:
c8:f0:97:78:20:f1:9e:77:f4:45:f0:25:c6:12:1e:
05:29:19:66:8a:61:6a:43:d0:89:fa:0b:49:1e:93:
68:62:39:de:3c:63:16:2b:5d:53:bf:17:34:9e:b6:
23:c0:cf:39:5e:69:7d:6f:30:db:4a:47:f6:55:b6:
2e:9c:34:cb:75:70:e0:28:79:f4:1e:b1:60:89:09:
9c:51:d0:21:ee:48:94:6f:aa:24:7b:bb:f8:70:f6:
32:dc:f1:8e:95:22:cc:14:1c:08:dc:29:40:24:06:
71:87:34:43:ec:a7:33:a3:7b:7d:49:91:d4:06:18:
f6:df:14:ff:60:4a:17:69:56:f4:4f:ab:af:53:68:
89:b1:d9:3e:89:8b:16:e6:4c:d5:28:0e:86:5c:e6:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:68:A6:ED:66:43:64:8D:A1:25:C3:EF:32:29:42:14:0B:F9:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9wlopu1mQ2SNoSXD7zIpQhQL-WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:41:33:dd:1b:c3:a9:41:41:1c:f2:9f:76:d2:6d:08:71:cd:
4d:1e:a0:3c:ff:f4:8e:28:d5:0e:e3:ab:21:c1:e7:81:35:12:
c3:09:b9:e7:64:f4:e8:51:05:fe:96:a0:52:ee:71:18:9a:f4:
7a:99:a4:8f:c4:6b:bb:23:b5:c7:4a:4a:cb:58:1a:1c:ea:5b:
a0:64:86:61:63:9f:bd:0f:3a:48:86:6e:bf:25:32:bf:98:16:
30:31:cc:2d:34:c3:a9:c0:87:8d:1d:8c:0d:4e:57:af:d8:30:
2b:ad:ec:a2:67:91:4a:f4:f3:b7:22:6b:1d:5a:ed:21:41:84:
66:b5:8b:7f:50:91:19:2a:72:d9:dd:4e:12:71:58:9e:ba:15:
f3:35:d8:1f:17:4a:23:4a:a8:04:ae:41:12:1e:a2:ea:1c:07:
5a:57:3c:ee:1a:bf:83:69:50:d9:a7:c8:87:61:0a:e4:1e:f2:
4a:2d:e3:0b:33:bb:8c:00:f6:ad:81:ef:5e:9b:2d:64:37:ef:
cd:8f:83:d2:49:3f:d0:49:5b:5d:bc:20:71:d9:fb:11:07:f5:
82:5d:fb:bb:05:0e:eb:2a:eb:15:5d:20:c8:bc:9b:b5:17:35:
cb:08:12:f4:20:3d:01:32:0d:c6:5a:c0:e7:38:e9:6d:34:02:
06:92:9f:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvlIAB6EaY94LIigKo9VWv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE5MDEwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzA5NjhhNmVkNjY0MzY0OGRhMTI1YzNlZjMyMjk0MjE0MGJmOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnKDjELYKe19Eif7lkKR+yrSMtdr
Z1BGjrbTuKsD+fmqAxoNihrzeR+ajr19zbrg4yH9LokqVqA3/QCeMiQVoYoUuhBK
e3xxcZ+c3WL55acjNAhNPCytSflR/IcQcm7nu7z00ojzMvPI8Jd4IPGed/RF8CXG
Eh4FKRlmimFqQ9CJ+gtJHpNoYjnePGMWK11Tvxc0nrYjwM85Xml9bzDbSkf2VbYu
nDTLdXDgKHn0HrFgiQmcUdAh7kiUb6oke7v4cPYy3PGOlSLMFBwI3ClAJAZxhzRD
7Kczo3t9SZHUBhj23xT/YEoXaVb0T6uvU2iJsdk+iYsW5kzVKA6GXOZUOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPcJaKbtZkNkjaElw+8yKUIUC/ljMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOXdsb3B1MW1RMlNOb1NYRDd6SXBRaFFMLVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEpBM90bw6lBQRzyn3bS
bQhxzU0eoDz/9I4o1Q7jqyHB54E1EsMJuedk9OhRBf6WoFLucRia9HqZpI/Ea7sj
tcdKSstYGhzqW6BkhmFjn70POkiGbr8lMr+YFjAxzC00w6nAh40djA1OV6/YMCut
7KJnkUr087ciax1a7SFBhGa1i39QkRkqctndThJxWJ66FfM12B8XSiNKqASuQRIe
ouocB1pXPO4av4NpUNmnyIdhCuQe8kot4wszu4wA9q2B716bLWQ3782Pg9JJP9BJ
W128IHHZ+xEH9YJd+7sFDusq6xVdIMi8m7UXNcsIEvQgPQEyDcZawOc46W00AgaS
n6U=
-----END CERTIFICATE-----
Generated at Sun May 11 22:23:57 2025 by rpki-client