Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Axbbz9J-VFKEXbACDsRXI1WpGo8.roa
File: Axbbz9J-VFKEXbACDsRXI1WpGo8.roa (raw, json)
Hash identifier: 3wfSbQNZPvGEptOlhvg4DsDdcHO1jICbgAND6RXykDk=
Subject key identifier: 03:16:DB:CF:D2:7E:54:52:84:5D:B0:02:0E:C4:57:23:55:A9:1A:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD5EB11FEAC76A67F809321C4FEA659E4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Axbbz9J-VFKEXbACDsRXI1WpGo8.roa
Signing time: Wed 27 Sep 2023 09:14:27 +0000
ROA not before: Wed 27 Sep 2023 09:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:eb:11:fe:ac:76:a6:7f:80:93:21:c4:fe:a6:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 09:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0316dbcfd27e5452845db0020ec4572355a91a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:c9:34:bc:8e:3f:1d:aa:7a:7b:8c:2d:14:
57:0d:72:5d:aa:dd:4e:22:82:8c:6d:32:88:9f:f7:
b2:32:16:39:44:d2:b8:54:66:ae:38:a8:57:68:5a:
0e:15:80:1d:c0:72:31:9b:fd:7e:9f:62:07:63:a2:
04:f9:7f:5d:df:6c:c8:75:2f:fd:82:01:8d:b2:09:
df:85:9d:6d:18:f0:7f:a9:64:48:7c:82:af:1e:0f:
87:f8:3b:5b:4f:5e:fc:49:b3:a1:5d:ce:24:ac:2f:
17:c5:a8:05:2f:81:97:dc:49:64:35:90:ee:3b:d4:
d3:c7:c4:6f:ef:6e:9d:f9:f3:dd:1c:c9:93:a6:5f:
0e:6d:21:0e:58:9d:b3:63:80:d5:f5:ab:13:6d:29:
7a:c7:0d:d6:30:ed:bf:2c:0c:20:43:f5:3b:36:2f:
70:3c:1c:aa:3d:81:18:0a:bb:02:8d:44:9d:f6:a2:
6f:20:20:40:5e:24:6b:dd:2d:cf:a9:65:ba:8a:15:
2d:dc:16:7f:f0:a9:cf:8f:10:23:e9:78:81:9d:98:
2c:09:d8:58:a2:a5:3a:97:c4:31:9c:57:8d:1b:3a:
08:eb:e7:25:b5:db:5c:1e:33:a9:df:93:39:f5:69:
5b:8e:3f:5d:9f:6e:02:07:74:81:0b:b4:83:81:e0:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:DB:CF:D2:7E:54:52:84:5D:B0:02:0E:C4:57:23:55:A9:1A:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Axbbz9J-VFKEXbACDsRXI1WpGo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:fc:74:67:17:0a:87:15:ef:50:2c:5b:bf:52:da:9a:2d:b1:
50:3e:b3:22:97:1c:58:11:68:5c:c7:aa:5d:78:44:a2:e9:6f:
39:1f:c8:5d:65:75:82:02:ab:6a:5e:d4:10:b3:2b:ef:93:18:
eb:fa:47:b8:e3:5f:60:ac:a6:24:9e:18:31:60:98:c2:54:99:
35:a2:83:13:5f:9a:e4:f1:b1:0e:ae:7c:c1:54:35:c6:5f:da:
76:e5:e0:d5:1d:01:15:73:10:0b:91:c5:93:3d:eb:0c:2f:fa:
d0:b8:18:35:d3:22:9a:92:d7:fc:d9:ca:d4:ce:77:ec:44:d6:
7c:01:3d:07:ec:5e:97:b9:ed:cd:1c:7d:18:11:7e:61:eb:ff:
02:2c:b4:a0:7c:e6:8e:3b:82:20:8e:77:c5:17:69:a6:ce:92:
b3:c7:31:6f:58:5b:d1:c1:f2:ce:01:dc:12:21:e1:b8:37:2c:
04:03:9c:2c:8d:1c:48:f8:60:39:3a:24:f2:02:b9:90:32:35:
16:66:a3:74:80:b6:77:82:3e:62:c9:59:cf:6f:86:6a:19:96:
1a:e1:44:1b:d8:73:73:fc:c7:4a:99:d1:53:42:74:ee:25:aa:
50:64:f5:6f:6c:cc:66:55:e8:04:cb:94:b8:9e:33:fb:cb:17:
40:fa:a9:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrV6xH+rHamf4CTIcT+plnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI3MDkxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzE2ZGJjZmQyN2U1NDUyODQ1ZGIwMDIwZWM0NTcyMzU1YTkxYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj3JNLyOPx2qenuMLRRXDXJdqt1O
IoKMbTKIn/eyMhY5RNK4VGauOKhXaFoOFYAdwHIxm/1+n2IHY6IE+X9d32zIdS/9
ggGNsgnfhZ1tGPB/qWRIfIKvHg+H+DtbT178SbOhXc4krC8XxagFL4GX3ElkNZDu
O9TTx8Rv726d+fPdHMmTpl8ObSEOWJ2zY4DV9asTbSl6xw3WMO2/LAwgQ/U7Ni9w
PByqPYEYCrsCjUSd9qJvICBAXiRr3S3PqWW6ihUt3BZ/8KnPjxAj6XiBnZgsCdhY
oqU6l8QxnFeNGzoI6+cltdtcHjOp35M59Wlbjj9dn24CB3SBC7SDgeBYZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAMW28/SflRShF2wAg7EVyNVqRqPMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQXhiYno5Si1WRktFWGJBQ0RzUlhJMVdwR284LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEv8dGcXCocV71AsW79S
2potsVA+syKXHFgRaFzHql14RKLpbzkfyF1ldYICq2pe1BCzK++TGOv6R7jjX2Cs
piSeGDFgmMJUmTWigxNfmuTxsQ6ufMFUNcZf2nbl4NUdARVzEAuRxZM96wwv+tC4
GDXTIpqS1/zZytTOd+xE1nwBPQfsXpe57c0cfRgRfmHr/wIstKB85o47giCOd8UX
aabOkrPHMW9YW9HB8s4B3BIh4bg3LAQDnCyNHEj4YDk6JPICuZAyNRZmo3SAtneC
PmLJWc9vhmoZlhrhRBvYc3P8x0qZ0VNCdO4lqlBk9W9szGZV6ATLlLieM/vLF0D6
qbU=
-----END CERTIFICATE-----
Generated at Sat May 10 20:03:27 2025 by rpki-client