Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CQhyG9UCGN6KfZJcx7EUszafWtk.roa
File: CQhyG9UCGN6KfZJcx7EUszafWtk.roa (raw, json)
Hash identifier: gkDeb7WS2YuOBlFT260ybUXvu5Zr4Uf9w6vUKWsR7Dk=
Subject key identifier: 09:08:72:1B:D5:02:18:DE:8A:7D:92:5C:C7:B1:14:B3:36:9F:5A:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0A0ECDA3295FFAE5F3029C820B124931
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CQhyG9UCGN6KfZJcx7EUszafWtk.roa
Signing time: Sat 07 Oct 2023 12:13:44 +0000
ROA not before: Sat 07 Oct 2023 12:13:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:0e:cd:a3:29:5f:fa:e5:f3:02:9c:82:0b:12:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 12:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0908721bd50218de8a7d925cc7b114b3369f5ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:af:f7:bd:38:20:55:88:0c:80:d5:09:23:
03:ea:7f:54:81:19:fd:4b:33:86:56:ed:1c:18:50:
e5:67:2c:c4:28:78:2a:e6:e7:09:e0:bf:70:3a:86:
c1:68:9e:45:10:9a:5c:ba:ed:b3:ee:f2:65:1a:c0:
cd:35:dd:a5:40:5e:d9:13:cd:9f:32:a2:34:3f:c1:
be:dc:a3:5f:16:75:0f:a5:9d:56:18:1e:52:9f:02:
49:4c:1e:94:ae:96:d2:2d:81:29:d6:a7:a4:0b:d1:
d0:71:3d:c3:91:6c:1f:08:a9:d9:dc:bf:47:6b:d9:
f2:f1:55:a4:4e:c5:32:44:b7:a9:0e:8d:f6:11:f9:
c9:fc:0c:4c:44:b9:c8:25:83:de:c4:38:a2:48:16:
e7:ad:7a:66:cc:70:3b:3b:b6:3c:be:3e:94:cc:c9:
2e:14:e9:5a:30:c6:3e:e2:47:1d:6e:6c:04:fb:be:
a2:e4:e5:84:e4:86:f9:b9:21:e8:fd:03:28:a4:ce:
b4:8d:5f:dd:47:f4:1e:9d:53:0f:f5:74:27:5d:ea:
36:c3:33:43:04:c2:b2:bb:c6:24:b8:8e:19:23:8b:
30:72:f9:72:bc:f4:4d:38:8a:a6:93:f1:a6:e6:b7:
f5:13:1a:0c:29:ab:71:92:16:ea:2a:4a:5a:a3:3a:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:72:1B:D5:02:18:DE:8A:7D:92:5C:C7:B1:14:B3:36:9F:5A:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CQhyG9UCGN6KfZJcx7EUszafWtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e5:47:28:dd:5c:f3:4f:33:f4:12:82:e2:54:16:07:0c:72:
b1:41:7c:27:65:64:03:58:59:ad:f4:fc:50:72:ea:ab:ee:9c:
5f:fe:ae:1f:89:25:c3:9e:4b:09:31:5b:35:f0:b4:e0:d8:f9:
5c:fa:f4:ae:49:fc:3e:7e:06:19:8c:22:ce:1c:e9:52:a9:90:
ae:03:8b:d4:26:77:7c:aa:9c:2c:b0:9d:dc:cf:49:ea:a3:67:
1f:8e:4e:db:14:3c:a6:ad:93:9e:55:5a:63:38:b6:cb:8e:f8:
ef:23:16:22:2f:89:a8:51:a3:ab:2d:29:b0:6a:2c:9e:e8:d6:
97:79:31:cd:cf:e5:80:e2:41:56:bc:5e:de:99:34:c2:70:3e:
81:c6:ae:64:e1:5d:e8:59:7c:66:9f:fe:6e:f7:fe:40:1a:f3:
7a:d0:9f:22:30:4e:66:0c:20:b0:b3:6e:b3:02:50:c1:37:20:
12:41:23:9b:b3:a8:8c:07:cb:f4:b0:e8:1e:f9:2d:fd:bd:e4:
75:44:1d:2a:5c:ca:c9:2d:ff:57:19:c3:d6:20:b2:4c:d8:90:
02:77:f3:17:89:90:6f:83:c1:af:d6:94:02:2c:4a:c2:1f:42:
56:45:29:a0:bd:28:f0:b7:6b:51:83:84:3a:4c:37:37:6c:77:
9f:87:db:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsKDs2jKV/65fMCnIILEkkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA3MTIxMzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTA4NzIxYmQ1MDIxOGRlOGE3ZDkyNWNjN2IxMTRiMzM2OWY1YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D+v9704IFWIDIDVCSMD6n9UgRn9
SzOGVu0cGFDlZyzEKHgq5ucJ4L9wOobBaJ5FEJpcuu2z7vJlGsDNNd2lQF7ZE82f
MqI0P8G+3KNfFnUPpZ1WGB5SnwJJTB6UrpbSLYEp1qekC9HQcT3DkWwfCKnZ3L9H
a9ny8VWkTsUyRLepDo32EfnJ/AxMRLnIJYPexDiiSBbnrXpmzHA7O7Y8vj6UzMku
FOlaMMY+4kcdbmwE+76i5OWE5Ib5uSHo/QMopM60jV/dR/QenVMP9XQnXeo2wzND
BMKyu8YkuI4ZI4swcvlyvPRNOIqmk/Gm5rf1ExoMKatxkhbqKkpaozqzswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAkIchvVAhjein2SXMexFLM2n1rZMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ1FoeUc5VUNHTjZLZlpKY3g3RVVzemFmV3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE7lRyjdXPNPM/QSguJU
FgcMcrFBfCdlZANYWa30/FBy6qvunF/+rh+JJcOeSwkxWzXwtODY+Vz69K5J/D5+
BhmMIs4c6VKpkK4Di9Qmd3yqnCywndzPSeqjZx+OTtsUPKatk55VWmM4tsuO+O8j
FiIviahRo6stKbBqLJ7o1pd5Mc3P5YDiQVa8Xt6ZNMJwPoHGrmThXehZfGaf/m73
/kAa83rQnyIwTmYMILCzbrMCUME3IBJBI5uzqIwHy/Sw6B75Lf295HVEHSpcyskt
/1cZw9YgskzYkAJ38xeJkG+Dwa/WlAIsSsIfQlZFKaC9KPC3a1GDhDpMNzdsd5+H
29I=
-----END CERTIFICATE-----
Generated at Sat May 10 22:44:46 2025 by rpki-client