Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DaiJeQGFrOMNkYn_keZ9I8jMyp4.roa
File: DaiJeQGFrOMNkYn_keZ9I8jMyp4.roa (raw, json)
Hash identifier: AVTixV/8ryV1lg0tT3gYLFyk/bXjsom2TynZVJTaJx4=
Subject key identifier: 0D:A8:89:79:01:85:AC:E3:0D:91:89:FF:91:E6:7D:23:C8:CC:CA:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEDBC1169BA7E8E20396157D068727D5B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DaiJeQGFrOMNkYn_keZ9I8jMyp4.roa
Signing time: Mon 02 Oct 2023 00:13:59 +0000
ROA not before: Mon 02 Oct 2023 00:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:bc:11:69:ba:7e:8e:20:39:61:57:d0:68:72:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 00:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0da889790185ace30d9189ff91e67d23c8ccca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:44:93:56:84:32:3a:1a:1c:a0:16:dd:13:
7e:25:92:fa:fd:6d:0d:64:1f:b8:b6:a5:13:97:6d:
75:bc:5d:5c:54:63:d8:f4:42:3a:bb:d5:e9:6e:24:
ff:3d:ce:b2:6f:74:2c:76:e0:54:d3:49:61:3b:dc:
ad:46:05:2d:19:9e:b6:b5:86:ea:0a:22:65:38:12:
2b:2f:66:7a:44:c0:42:f8:c1:6d:05:6f:7f:1f:b8:
10:7c:7b:64:1b:eb:a1:3f:3a:d5:1d:04:96:44:3f:
d7:a8:aa:44:3f:b2:37:c9:e7:5f:da:fe:82:2c:bd:
c5:a5:3f:78:44:68:8d:92:ec:96:c0:b4:1e:54:0d:
d4:79:3a:5a:94:cd:4f:5c:72:7b:7c:bb:b5:70:03:
12:8a:27:c6:3b:f1:2a:49:8b:20:99:f2:5a:a2:f2:
6c:d6:c6:6f:da:b1:42:84:d8:98:f8:b8:83:be:dc:
89:7d:6f:e8:1a:01:41:00:0b:a5:4b:a3:1e:b6:08:
c1:36:8d:43:64:93:e6:24:f3:80:18:9a:6c:29:32:
7d:2e:cf:97:68:3a:76:35:7a:32:b8:e7:3f:97:95:
b0:1f:28:c0:42:e3:d2:98:95:a5:67:24:34:70:26:
00:3b:0c:67:e4:84:30:81:85:b1:b6:f9:e0:db:56:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:89:79:01:85:AC:E3:0D:91:89:FF:91:E6:7D:23:C8:CC:CA:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DaiJeQGFrOMNkYn_keZ9I8jMyp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:bb:68:8a:dd:77:c6:e5:ee:de:56:62:a5:64:18:81:86:46:
01:03:b5:d6:bd:cb:52:dd:89:1b:b0:14:8e:eb:c6:4f:04:8b:
35:a9:48:2a:9d:b2:23:a3:8c:cb:b2:f6:f7:b8:1b:46:34:7d:
cb:03:0d:c4:99:40:6f:b7:87:c4:8e:49:8b:70:4b:b7:e6:97:
74:37:c2:44:c7:ee:bd:eb:69:27:89:3d:6e:ac:28:6a:a2:c8:
e0:7a:04:75:cc:2a:35:a2:29:1f:9d:4d:43:cb:16:ba:0d:a5:
6f:97:73:28:f2:2a:46:f6:b5:74:6f:0a:7f:e3:f4:a9:0f:db:
28:17:0f:21:e0:4d:ad:87:9d:00:d9:54:45:24:1b:b8:55:f5:
79:60:29:63:55:d9:6d:8f:50:11:53:9e:f9:29:27:b5:e3:46:
f2:dc:80:5f:b7:bb:a7:d9:06:25:60:39:81:29:ad:ca:c4:39:
53:8e:81:9d:97:6a:2c:0e:07:17:df:24:02:28:5d:b9:52:21:
cf:bb:1c:0a:42:b1:7f:7d:5c:0c:59:fd:68:fd:a0:f3:0a:92:
bf:98:6d:53:1d:5f:ec:a5:8d:b1:76:7b:43:cf:14:1e:01:51:
ac:76:4e:f8:41:71:13:85:d7:ce:26:c8:4f:8d:02:6e:1f:73:
43:86:6c:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrtvBFpun6OIDlhV9Bocn1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMDAxMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGE4ODk3OTAxODVhY2UzMGQ5MTg5ZmY5MWU2N2QyM2M4Y2NjYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO9Ek1aEMjoaHKAW3RN+JZL6/W0N
ZB+4tqUTl211vF1cVGPY9EI6u9XpbiT/Pc6yb3QsduBU00lhO9ytRgUtGZ62tYbq
CiJlOBIrL2Z6RMBC+MFtBW9/H7gQfHtkG+uhPzrVHQSWRD/XqKpEP7I3yedf2v6C
LL3FpT94RGiNkuyWwLQeVA3UeTpalM1PXHJ7fLu1cAMSiifGO/EqSYsgmfJaovJs
1sZv2rFChNiY+LiDvtyJfW/oGgFBAAulS6MetgjBNo1DZJPmJPOAGJpsKTJ9Ls+X
aDp2NXoyuOc/l5WwHyjAQuPSmJWlZyQ0cCYAOwxn5IQwgYWxtvng21bP7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA2oiXkBhazjDZGJ/5HmfSPIzMqeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRGFpSmVRR0ZyT01Oa1luX2tlWjlJOGpNeXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACa7aIrdd8bl7t5WYqVk
GIGGRgEDtda9y1LdiRuwFI7rxk8EizWpSCqdsiOjjMuy9ve4G0Y0fcsDDcSZQG+3
h8SOSYtwS7fml3Q3wkTH7r3raSeJPW6sKGqiyOB6BHXMKjWiKR+dTUPLFroNpW+X
cyjyKkb2tXRvCn/j9KkP2ygXDyHgTa2HnQDZVEUkG7hV9XlgKWNV2W2PUBFTnvkp
J7XjRvLcgF+3u6fZBiVgOYEprcrEOVOOgZ2XaiwOBxffJAIoXblSIc+7HApCsX99
XAxZ/Wj9oPMKkr+YbVMdX+yljbF2e0PPFB4BUax2TvhBcROF184myE+NAm4fc0OG
bDI=
-----END CERTIFICATE-----
Generated at Mon May 12 22:58:04 2025 by rpki-client