Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DIjm58F0bEmejOMjEi2bvg3Kbbo.roa
File: DIjm58F0bEmejOMjEi2bvg3Kbbo.roa (raw, json)
Hash identifier: GZvqiBOfoa6ZTyHpasL0L2aC/nVKJtosikMOXktxVeQ=
Subject key identifier: 0C:88:E6:E7:C1:74:6C:49:9E:8C:E3:23:12:2D:9B:BE:0D:CA:6D:BA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B99D0BD758FA3ADC8245823DD322047C5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DIjm58F0bEmejOMjEi2bvg3Kbbo.roa
Signing time: Sat 04 Nov 2023 10:11:15 +0000
ROA not before: Sat 04 Nov 2023 10:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:d0:bd:75:8f:a3:ad:c8:24:58:23:dd:32:20:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 10:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c88e6e7c1746c499e8ce323122d9bbe0dca6dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:47:40:03:8f:bf:e4:e8:aa:19:5c:b4:48:
74:5a:52:31:64:5b:f7:b1:6a:e8:88:c4:35:c2:6f:
4c:fb:13:a3:16:38:c4:08:b8:29:4b:a7:e7:82:fc:
43:bb:f7:94:61:b4:ac:dc:5a:55:aa:2e:78:e1:75:
76:23:62:5d:5e:0a:37:52:b5:f5:41:7a:fd:4b:68:
ec:d9:bf:76:6d:f2:b1:6f:8f:ad:5f:21:2f:fc:5c:
87:88:c6:4e:60:fd:fd:4f:ff:12:5d:85:77:cd:ba:
70:a8:5d:c3:6b:f8:c1:bc:c6:29:20:e3:7d:1b:14:
5c:0c:56:91:ee:b5:52:9c:6a:07:df:a6:b5:d0:8f:
11:63:6e:a9:16:e8:61:e8:5a:ec:3b:b7:5f:7d:6c:
36:75:ee:b5:6e:3e:16:14:cd:ae:dd:27:2f:c3:bc:
78:e9:12:ff:5d:2c:0d:b4:71:93:76:66:4c:26:78:
07:b7:f9:2b:0a:37:15:85:dc:54:3d:d1:18:e9:8b:
f9:6d:c9:70:e7:f7:67:fa:f2:fb:b5:b4:96:d0:80:
c6:78:c0:15:d4:6f:86:8a:56:3e:9a:aa:14:0d:6b:
64:78:48:fa:d1:c0:52:c4:3d:f0:da:25:80:37:73:
e3:4f:a1:d4:f4:80:e0:94:12:9f:b4:38:c0:61:71:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:E6:E7:C1:74:6C:49:9E:8C:E3:23:12:2D:9B:BE:0D:CA:6D:BA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DIjm58F0bEmejOMjEi2bvg3Kbbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:af:84:6a:8d:e0:0c:cb:e1:21:57:79:a4:30:ce:0b:50:1c:
a5:eb:0f:72:80:4a:77:d6:b3:e7:b6:05:05:f7:6f:91:9f:e9:
01:e8:4d:e5:0f:57:c9:bb:75:d5:f9:b7:a7:c3:d3:43:b1:a3:
72:84:e5:4a:33:bc:46:2a:1d:28:da:9f:c5:d8:f1:f5:8d:d9:
a8:fa:c0:15:98:4b:85:f4:7c:07:b0:c4:b1:1a:71:b2:c3:96:
9f:72:1e:73:61:4b:e2:3b:05:ac:f9:fc:ca:db:21:d8:ff:79:
47:3d:96:cc:b7:05:84:03:2e:25:1b:d6:b6:74:b6:fd:f3:d0:
10:d2:07:a3:d4:93:65:8d:cd:aa:ea:08:a9:d4:ef:f8:5a:e7:
54:ac:72:aa:c7:00:10:27:90:83:ec:14:57:80:19:70:fb:ca:
8c:67:fc:1e:5f:22:15:94:73:a1:da:f7:09:9f:62:45:61:75:
2f:51:8a:b7:7f:1e:6a:5f:9b:8e:8f:8a:a6:46:65:0c:3d:d1:
3e:72:cd:4c:cc:22:80:6e:bb:da:0b:67:de:a3:3e:de:77:85:
4d:56:bb:4d:74:6b:c6:4a:8c:19:f8:7f:7d:39:b3:c5:e6:db:
fd:e2:3c:5e:bc:c3:ae:b1:31:3e:61:4a:e3:b5:49:df:92:a9:
b8:a0:11:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuZ0L11j6OtyCRYI90yIEfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MTAxMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzg4ZTZlN2MxNzQ2YzQ5OWU4Y2UzMjMxMjJkOWJiZTBkY2E2ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ9HQAOPv+ToqhlctEh0WlIxZFv3
sWroiMQ1wm9M+xOjFjjECLgpS6fngvxDu/eUYbSs3FpVqi544XV2I2JdXgo3UrX1
QXr9S2js2b92bfKxb4+tXyEv/FyHiMZOYP39T/8SXYV3zbpwqF3Da/jBvMYpION9
GxRcDFaR7rVSnGoH36a10I8RY26pFuhh6FrsO7dffWw2de61bj4WFM2u3Scvw7x4
6RL/XSwNtHGTdmZMJngHt/krCjcVhdxUPdEY6Yv5bclw5/dn+vL7tbSW0IDGeMAV
1G+GilY+mqoUDWtkeEj60cBSxD3w2iWAN3PjT6HU9IDglBKftDjAYXFIlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAyI5ufBdGxJnozjIxItm74Nym26MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRElqbTU4RjBiRW1lak9NakVpMmJ2ZzNLYmJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMyvhGqN4AzL4SFXeaQw
zgtQHKXrD3KASnfWs+e2BQX3b5Gf6QHoTeUPV8m7ddX5t6fD00Oxo3KE5UozvEYq
HSjan8XY8fWN2aj6wBWYS4X0fAewxLEacbLDlp9yHnNhS+I7Baz5/MrbIdj/eUc9
lsy3BYQDLiUb1rZ0tv3z0BDSB6PUk2WNzarqCKnU7/ha51SscqrHABAnkIPsFFeA
GXD7yoxn/B5fIhWUc6Ha9wmfYkVhdS9Rird/Hmpfm46PiqZGZQw90T5yzUzMIoBu
u9oLZ96jPt53hU1Wu010a8ZKjBn4f305s8Xm2/3iPF68w66xMT5hSuO1Sd+Sqbig
Efc=
-----END CERTIFICATE-----
Generated at Sat May 10 19:19:38 2025 by rpki-client