Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DyUJGgK5jXrr4ec--Ff3jees67k.roa
File: DyUJGgK5jXrr4ec--Ff3jees67k.roa (raw, json)
Hash identifier: xQBpRs3Veove7mOfVyBj+FHhETlQmxEjWlqUd/xeHPw=
Subject key identifier: 0F:25:09:1A:02:B9:8D:7A:EB:E1:E7:3E:F8:57:F7:8D:E7:AC:EB:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C172605DC6D1E305D758DB32CE8B3A0AD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DyUJGgK5jXrr4ec--Ff3jees67k.roa
Signing time: Tue 28 Nov 2023 18:16:57 +0000
ROA not before: Tue 28 Nov 2023 18:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:26:05:dc:6d:1e:30:5d:75:8d:b3:2c:e8:b3:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 18:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f25091a02b98d7aebe1e73ef857f78de7acebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:92:c9:dd:14:d7:6a:81:5c:49:60:c1:05:
f6:8c:d1:cc:f2:c3:29:4f:7b:c0:71:12:07:78:ad:
0c:11:74:56:4e:d0:38:f5:fa:ba:3f:6a:09:33:0b:
37:b9:11:88:69:44:34:15:81:7b:97:52:12:80:04:
ec:d6:93:a6:6b:46:b5:88:f0:b0:2b:d4:fc:ea:78:
8d:64:ea:fd:a3:d1:9f:bc:01:2a:4b:2f:b7:94:fa:
a8:7e:01:52:32:44:3f:df:52:30:b2:cb:68:ff:5e:
91:13:62:e0:eb:0f:3d:0a:27:ac:27:ab:1f:01:75:
db:40:01:de:72:8b:57:ea:94:16:32:e9:47:a5:7d:
cb:c9:1d:a1:e4:2d:3a:f8:55:72:e7:af:1a:c8:b4:
94:09:c4:03:ea:27:2b:6b:a1:55:7f:87:63:69:c4:
51:87:65:36:6e:6e:7d:0f:f8:ff:f8:16:02:8e:61:
b7:7c:db:1e:ff:d5:32:23:01:a0:38:f4:5e:8e:5f:
4b:8e:7d:77:0b:8b:92:28:a9:e7:b6:cf:40:fb:79:
9d:1d:6f:06:00:7b:97:12:4f:5d:ee:a5:91:99:f5:
4d:ee:32:a1:2c:b9:24:a1:0b:be:9a:a2:75:74:e4:
f4:74:58:4a:0d:cf:4f:64:96:29:b1:d9:1a:01:1b:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:09:1A:02:B9:8D:7A:EB:E1:E7:3E:F8:57:F7:8D:E7:AC:EB:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DyUJGgK5jXrr4ec--Ff3jees67k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:31:4b:a3:26:66:b6:69:d3:89:d6:7d:84:77:42:d9:4b:e6:
a1:4c:10:b4:ff:bd:65:57:43:b1:3b:b4:1e:ca:92:48:23:a1:
e9:af:d7:05:d8:9d:6b:cb:7f:2d:61:c1:60:a5:e6:52:c7:a8:
3e:ce:16:45:24:43:eb:30:22:27:5a:42:e3:3b:b6:42:34:33:
b2:e2:d2:bc:21:19:be:41:05:8c:b7:10:10:af:ab:6e:8e:88:
2d:90:45:8f:6a:ae:7e:c1:d3:60:d1:b0:14:26:9e:1e:4f:75:
75:0a:e4:40:fa:fb:65:5e:85:d0:f4:ba:09:08:69:c1:03:d6:
27:3a:0c:38:9e:3d:de:99:1f:1e:7d:23:b2:61:63:83:6c:bb:
fe:2d:27:fb:48:e8:b3:46:b0:8a:80:39:06:e8:ad:b7:b7:d1:
10:ef:a0:86:a7:ed:6a:c8:3b:c2:33:ca:27:d5:16:33:be:03:
21:6f:98:2e:66:cc:18:85:6a:73:b4:14:53:69:16:a0:34:2c:
cc:50:67:ad:47:2d:93:9c:38:5e:62:6d:ef:d8:58:66:c9:7f:
20:38:fa:98:14:3d:dd:6a:6e:19:2b:ec:47:ed:44:30:05:d1:
65:33:f4:2e:04:48:2e:1b:84:c6:1d:85:8f:e7:0e:e5:64:93:
33:30:73:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwXJgXcbR4wXXWNsyzos6CtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MTgxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjI1MDkxYTAyYjk4ZDdhZWJlMWU3M2VmODU3Zjc4ZGU3YWNlYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEySyd0U12qBXElgwQX2jNHM8sMp
T3vAcRIHeK0MEXRWTtA49fq6P2oJMws3uRGIaUQ0FYF7l1ISgATs1pOma0a1iPCw
K9T86niNZOr9o9GfvAEqSy+3lPqofgFSMkQ/31Iwssto/16RE2Lg6w89CiesJ6sf
AXXbQAHecotX6pQWMulHpX3LyR2h5C06+FVy568ayLSUCcQD6icra6FVf4djacRR
h2U2bm59D/j/+BYCjmG3fNse/9UyIwGgOPRejl9Ljn13C4uSKKnnts9A+3mdHW8G
AHuXEk9d7qWRmfVN7jKhLLkkoQu+mqJ1dOT0dFhKDc9PZJYpsdkaARvfSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA8lCRoCuY166+HnPvhX943nrOu5MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRHlVSkdnSzVqWHJyNGVjLS1GZjNqZWVzNjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA8xS6MmZrZp04nWfYR3
QtlL5qFMELT/vWVXQ7E7tB7Kkkgjoemv1wXYnWvLfy1hwWCl5lLHqD7OFkUkQ+sw
IidaQuM7tkI0M7Li0rwhGb5BBYy3EBCvq26OiC2QRY9qrn7B02DRsBQmnh5PdXUK
5ED6+2VehdD0ugkIacED1ic6DDiePd6ZHx59I7JhY4Nsu/4tJ/tI6LNGsIqAOQbo
rbe30RDvoIan7WrIO8IzyifVFjO+AyFvmC5mzBiFanO0FFNpFqA0LMxQZ61HLZOc
OF5ibe/YWGbJfyA4+pgUPd1qbhkr7EftRDAF0WUz9C4ESC4bhMYdhY/nDuVkkzMw
c3c=
-----END CERTIFICATE-----
Generated at Sun May 11 17:03:46 2025 by rpki-client