Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AT85L6S4PRlTpzPY0jLQog54rM4.roa
File: AT85L6S4PRlTpzPY0jLQog54rM4.roa (raw, json)
Hash identifier: 3gSsxjX6UH1X5m90xHDPiTgsYns9jnqUxIF8oG1G+m4=
Subject key identifier: 01:3F:39:2F:A4:B8:3D:19:53:A7:33:D8:D2:32:D0:A2:0E:78:AC:CE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4B424F3427599C213C2830EC4AAEA5DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AT85L6S4PRlTpzPY0jLQog54rM4.roa
Signing time: Fri 08 Dec 2023 21:08:05 +0000
ROA not before: Fri 08 Dec 2023 21:08:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4b3e:df70/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:42:4f:34:27:59:9c:21:3c:28:30:ec:4a:ae:a5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 21:08:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013f392fa4b83d1953a733d8d232d0a20e78acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:02:e5:3b:0f:c6:e4:df:0d:26:c4:97:fb:
77:ce:6b:ba:93:58:9e:d8:e3:bf:18:38:6d:aa:a8:
06:45:6a:e7:25:22:67:7b:62:d2:0b:55:62:04:62:
d6:d4:09:c0:9e:f1:da:48:5f:82:5f:25:7e:1a:e3:
dd:15:58:d4:cd:96:93:00:c8:3b:b8:07:c6:9a:ef:
1e:e9:ce:b3:98:a4:95:9c:92:61:f1:b4:e6:62:d4:
f6:76:f5:96:05:73:af:72:ec:65:b5:a7:ab:99:d3:
cd:f6:bb:75:7c:e3:ef:94:d7:51:52:dc:c9:d2:0f:
2c:33:ba:dd:15:10:d7:c3:e2:52:3b:23:a6:69:ab:
1b:bb:3b:08:52:72:71:8a:3b:d0:ad:16:50:53:77:
67:61:30:24:b6:99:ba:19:29:3b:f7:7b:3a:d6:a2:
c2:e4:ec:d9:c0:56:ac:0a:bf:e7:74:72:a8:61:c2:
fa:80:24:d7:45:83:70:09:cb:51:fe:db:d3:36:f6:
6a:96:3b:ba:cb:8d:ee:19:6e:7f:59:f6:6d:ba:03:
34:f7:7e:8a:a4:17:ec:e9:64:6f:e5:7d:e9:17:cc:
6b:4d:a9:29:3b:97:24:0e:fb:4f:30:bc:e3:cc:9a:
75:f8:bc:95:77:10:53:ed:e4:03:b3:a6:58:bd:67:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3F:39:2F:A4:B8:3D:19:53:A7:33:D8:D2:32:D0:A2:0E:78:AC:CE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AT85L6S4PRlTpzPY0jLQog54rM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:4c:84:f8:3f:44:60:43:2e:2d:4a:2b:e2:cc:da:9b:76:9b:
6b:05:89:d3:80:1b:a8:53:e8:04:a6:ee:29:37:3c:ac:2b:20:
b3:d3:b1:00:b6:5e:2e:68:e7:b1:10:9a:12:8b:42:eb:2b:16:
65:f8:a2:50:7b:4e:5e:be:cc:c7:b6:56:e9:81:e1:36:28:ab:
bd:2c:0c:74:93:8b:1e:f1:3a:b4:a7:70:69:fe:cc:d5:b4:59:
22:42:66:83:fe:4c:ad:1d:99:90:69:25:77:ec:12:68:d2:21:
23:49:9a:e2:ad:88:16:fc:71:28:d3:05:84:d7:0b:55:23:16:
ff:45:cd:a7:97:1b:44:30:e8:df:9c:54:8c:54:a8:99:09:fb:
53:eb:4e:68:54:37:a8:e6:7f:6b:62:07:2b:03:78:d1:bb:d1:
2a:68:60:db:fa:58:37:2a:dd:2a:dc:a2:e4:ee:29:97:6d:44:
94:19:c5:d7:b1:2e:1c:19:7b:90:b1:52:38:69:5a:8a:fb:66:
9a:b9:f1:b2:31:59:82:7b:17:40:cc:7d:ce:26:ec:fa:a8:74:
3e:7a:40:db:37:38:23:ca:6a:c9:7e:d3:96:f6:3f:41:c1:5f:
76:f9:cb:5d:dd:9c:81:16:08:8c:e7:c7:f2:e7:c4:de:03:ef:
87:7d:3f:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxLQk80J1mcITwoMOxKrqXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MjEwODA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTNmMzkyZmE0YjgzZDE5NTNhNzMzZDhkMjMyZDBhMjBlNzhhY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwIC5TsPxuTfDSbEl/t3zmu6k1ie
2OO/GDhtqqgGRWrnJSJne2LSC1ViBGLW1AnAnvHaSF+CXyV+GuPdFVjUzZaTAMg7
uAfGmu8e6c6zmKSVnJJh8bTmYtT2dvWWBXOvcuxltaermdPN9rt1fOPvlNdRUtzJ
0g8sM7rdFRDXw+JSOyOmaasbuzsIUnJxijvQrRZQU3dnYTAktpm6GSk793s61qLC
5OzZwFasCr/ndHKoYcL6gCTXRYNwCctR/tvTNvZqlju6y43uGW5/WfZtugM0936K
pBfs6WRv5X3pF8xrTakpO5ckDvtPMLzjzJp1+LyVdxBT7eQDs6ZYvWcw8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAE/OS+kuD0ZU6cz2NIy0KIOeKzOMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQVQ4NUw2UzRQUmxUcHpQWTBqTFFvZzU0ck00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAENMhPg/RGBDLi1KK+LM
2pt2m2sFidOAG6hT6ASm7ik3PKwrILPTsQC2Xi5o57EQmhKLQusrFmX4olB7Tl6+
zMe2VumB4TYoq70sDHSTix7xOrSncGn+zNW0WSJCZoP+TK0dmZBpJXfsEmjSISNJ
muKtiBb8cSjTBYTXC1UjFv9FzaeXG0Qw6N+cVIxUqJkJ+1PrTmhUN6jmf2tiBysD
eNG70SpoYNv6WDcq3SrcouTuKZdtRJQZxdexLhwZe5CxUjhpWor7Zpq58bIxWYJ7
F0DMfc4m7PqodD56QNs3OCPKasl+05b2P0HBX3b5y13dnIEWCIznx/LnxN4D74d9
Pwg=
-----END CERTIFICATE-----
Generated at Mon May 12 16:53:50 2025 by rpki-client