Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bz5SZcMJZboUwQ-JluqvBcq6Atc.roa
File: Bz5SZcMJZboUwQ-JluqvBcq6Atc.roa (raw, json)
Hash identifier: gteTCB+G04EyPMbtBYx8i2a/zza1a1AJb9fg+Q/kvxU=
Subject key identifier: 07:3E:52:65:C3:09:65:BA:14:C1:0F:89:96:EA:AF:05:CA:BA:02:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB8B11F36BE8E6D9180A15D93EC012B39
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bz5SZcMJZboUwQ-JluqvBcq6Atc.roa
Signing time: Fri 10 Nov 2023 10:04:57 +0000
ROA not before: Fri 10 Nov 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:b8b0:dc4b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:b1:1f:36:be:8e:6d:91:80:a1:5d:93:ec:01:2b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073e5265c30965ba14c10f8996eaaf05caba02d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:f0:4f:64:a5:74:e8:28:5f:40:77:3f:61:
bc:66:a1:09:0a:fd:97:a2:80:8e:de:1f:3b:3b:d0:
1a:54:be:f8:bb:9c:eb:1d:23:80:48:66:0a:c3:1f:
4d:16:ab:39:ad:ef:ac:51:c9:55:d1:97:a0:5e:58:
b6:25:c4:b9:15:d7:3b:3d:84:15:23:88:e7:0f:43:
2d:88:51:88:d1:13:04:c4:56:b6:94:3c:3b:c6:93:
8d:18:91:89:e4:76:d3:94:3a:83:62:c2:7f:3e:8e:
2a:33:38:b5:8b:ea:25:c7:61:53:9a:17:a9:f7:74:
9e:94:96:31:12:17:e2:29:c0:e9:28:81:4e:cc:b5:
a4:0f:63:5e:e2:27:0c:f5:bf:41:0a:4a:32:13:bf:
df:82:40:76:7a:62:9a:0e:e3:3c:7e:18:a3:b2:28:
cd:d3:25:90:35:a0:56:cb:03:0f:14:6c:43:f9:06:
fb:b5:c9:f8:ef:bb:9b:5d:4a:ae:ec:2a:85:70:55:
0a:19:66:a1:24:5d:f0:da:ca:cc:75:c2:2e:e5:dd:
8e:ab:f7:fc:9a:59:e5:2c:24:48:86:8d:7e:f4:4b:
95:e6:68:d5:b0:a2:d5:48:fc:ea:fd:a2:3b:2e:08:
e1:ac:fe:0c:74:8a:0f:fe:c6:2a:e2:10:98:f1:97:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:52:65:C3:09:65:BA:14:C1:0F:89:96:EA:AF:05:CA:BA:02:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Bz5SZcMJZboUwQ-JluqvBcq6Atc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f3:c4:be:c1:72:a0:a4:ca:90:96:93:5a:ba:39:91:8a:bd:
df:74:79:05:1a:43:93:4b:8a:8f:a5:13:75:d6:30:2b:48:85:
79:fc:b9:19:8f:dc:5e:ca:30:e2:1f:a7:0d:67:61:e8:2f:3a:
b0:80:cf:65:e2:72:ef:d8:ee:6d:24:c6:43:14:36:ea:81:b8:
95:cb:bf:bb:6f:e6:55:54:8c:89:5e:63:ba:0d:b8:14:ce:30:
c1:bd:f4:05:d3:41:96:fd:6f:6f:0f:07:10:43:f1:0d:3e:d2:
4a:bb:23:19:d6:83:d9:1c:85:9b:24:84:66:38:4f:02:47:ed:
3d:68:25:cb:e8:b9:b7:94:98:f5:ce:4f:07:2b:8e:73:7a:cc:
35:e1:96:06:73:dc:cc:bd:15:0d:c9:3c:c6:5b:4f:a0:a6:ff:
a3:61:ea:db:e4:8b:e4:eb:ae:a3:ab:aa:95:40:5f:04:cb:dc:
7d:5b:c9:b4:97:ba:c8:88:45:ee:66:e5:86:b3:ce:3a:10:ad:
b8:f2:8f:12:1a:eb:12:1d:32:60:3a:1c:ec:ff:0d:59:92:c0:
7d:fa:05:00:44:81:8f:c3:16:4a:e5:1a:02:9f:8d:74:63:ee:
3e:93:83:d4:3a:6e:10:37:08:1a:9d:88:b6:fc:6c:92:8b:7e:
dd:17:d8:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu4sR82vo5tkYChXZPsASs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMTAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzNlNTI2NWMzMDk2NWJhMTRjMTBmODk5NmVhYWYwNWNhYmEwMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbrwT2SldOgoX0B3P2G8ZqEJCv2X
ooCO3h87O9AaVL74u5zrHSOASGYKwx9NFqs5re+sUclV0ZegXli2JcS5Fdc7PYQV
I4jnD0MtiFGI0RMExFa2lDw7xpONGJGJ5HbTlDqDYsJ/Po4qMzi1i+olx2FTmhep
93SelJYxEhfiKcDpKIFOzLWkD2Ne4icM9b9BCkoyE7/fgkB2emKaDuM8fhijsijN
0yWQNaBWywMPFGxD+Qb7tcn477ubXUqu7CqFcFUKGWahJF3w2srMdcIu5d2Oq/f8
mlnlLCRIho1+9EuV5mjVsKLVSPzq/aI7LgjhrP4MdIoP/sYq4hCY8ZdEOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAc+UmXDCWW6FMEPiZbqrwXKugLXMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQno1U1pjTUpaYm9Vd1EtSmx1cXZCY3E2QXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK7zxL7BcqCkypCWk1q6
OZGKvd90eQUaQ5NLio+lE3XWMCtIhXn8uRmP3F7KMOIfpw1nYegvOrCAz2Xicu/Y
7m0kxkMUNuqBuJXLv7tv5lVUjIleY7oNuBTOMMG99AXTQZb9b28PBxBD8Q0+0kq7
IxnWg9kchZskhGY4TwJH7T1oJcvoubeUmPXOTwcrjnN6zDXhlgZz3My9FQ3JPMZb
T6Cm/6Nh6tvki+TrrqOrqpVAXwTL3H1bybSXusiIRe5m5YazzjoQrbjyjxIa6xId
MmA6HOz/DVmSwH36BQBEgY/DFkrlGgKfjXRj7j6Tg9Q6bhA3CBqdiLb8bJKLft0X
2AE=
-----END CERTIFICATE-----
Generated at Mon May 12 22:45:26 2025 by rpki-client