Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EdQX0z4K5cZDPdwtX4HKKRC_zLM.roa
File: EdQX0z4K5cZDPdwtX4HKKRC_zLM.roa (raw, json)
Hash identifier: gg4LqEIlRLIeAVJj0bJSR9Jk9DcOB/oINAfcJjJ5BTs=
Subject key identifier: 11:D4:17:D3:3E:0A:E5:C6:43:3D:DC:2D:5F:81:CA:29:10:BF:CC:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEBFFA4A90E5F2485B0F6FC9AC687DF09
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EdQX0z4K5cZDPdwtX4HKKRC_zLM.roa
Signing time: Mon 20 Nov 2023 09:11:21 +0000
ROA not before: Mon 20 Nov 2023 09:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:ff:a4:a9:0e:5f:24:85:b0:f6:fc:9a:c6:87:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 09:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d417d33e0ae5c6433ddc2d5f81ca2910bfccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:19:b8:1f:41:4f:13:d9:05:38:fe:b7:4e:
18:2e:4b:48:b3:0a:86:14:19:c5:0e:03:25:eb:28:
18:ac:78:36:10:60:15:c7:1a:c8:09:51:54:e8:29:
1b:2b:c8:94:40:dc:db:70:03:9b:aa:70:97:8d:a5:
17:96:aa:8a:9d:bb:75:c0:c0:9f:6a:7f:2d:5e:cf:
6b:5d:25:d6:1f:1a:d9:24:66:84:ec:15:a2:7f:3c:
0a:f7:e6:14:ea:df:6a:16:08:18:29:36:92:25:4f:
36:39:81:6d:c9:3e:ab:ca:37:4a:ce:86:e2:fb:0b:
a8:3c:22:44:64:ea:b7:54:e8:e8:af:fc:2d:4a:7c:
bb:c1:8e:b3:96:a8:84:8e:7c:f0:6b:06:6e:24:96:
64:0f:f9:2f:3a:42:cb:ee:48:28:df:71:91:e0:02:
22:90:99:93:da:a7:0a:55:0a:49:67:06:5d:21:8f:
e3:44:3f:4d:25:53:32:55:09:87:64:51:12:93:fc:
e2:e2:9c:81:7c:f5:e6:bc:80:00:f8:be:40:49:08:
f8:f1:6d:79:7c:63:2c:42:03:c3:8d:2f:14:39:0e:
58:60:8c:42:92:c7:ab:46:ff:a1:6e:cc:55:c4:a9:
85:c7:52:9b:3c:18:27:58:17:0d:cc:43:d5:98:ed:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:17:D3:3E:0A:E5:C6:43:3D:DC:2D:5F:81:CA:29:10:BF:CC:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EdQX0z4K5cZDPdwtX4HKKRC_zLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:69:e0:e5:d8:7d:5a:9b:c0:03:8a:2a:f3:b9:70:e9:38:3f:
70:89:87:b0:87:d2:2e:0f:3e:d6:1d:99:e4:60:fd:f2:33:04:
ac:6f:f5:a4:24:1c:7d:d5:11:95:b6:77:a7:2c:eb:db:a8:bb:
4f:ea:90:00:e6:fe:5d:73:d0:b9:f6:ba:b8:7c:2d:7a:79:dc:
57:8a:2a:a9:65:84:02:a9:9c:c6:a6:92:bd:52:57:96:0f:f2:
86:2c:ee:46:a7:21:31:04:56:90:56:a4:2f:fa:fd:d3:df:07:
9d:dd:df:7d:de:90:9b:58:d4:84:7c:22:c0:a3:c2:ae:66:e8:
b1:3a:78:30:f0:e6:23:cb:cb:d3:9f:71:44:f9:6d:cb:68:f2:
53:c9:d8:57:e7:ea:8e:b2:07:6b:f0:e5:52:a9:10:9d:2c:6a:
85:0c:91:87:23:e3:55:66:27:ef:85:89:e7:74:9f:82:c3:b6:
59:1b:bc:51:26:54:94:73:e7:5c:01:e4:b9:17:7e:bc:ac:03:
37:81:91:5b:e0:a1:64:47:85:ce:4d:87:8a:95:12:4e:fc:fe:
0e:40:8a:57:ea:ca:86:66:32:97:3b:fc:21:ba:09:7b:37:b4:
30:26:e5:2b:6b:2b:01:cf:17:c6:06:74:9a:f4:7e:71:62:f5:
67:ec:50:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvr/6SpDl8khbD2/JrGh98JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIwMDkxMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQ0MTdkMzNlMGFlNWM2NDMzZGRjMmQ1ZjgxY2EyOTEwYmZjY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PkZuB9BTxPZBTj+t04YLktIswqG
FBnFDgMl6ygYrHg2EGAVxxrICVFU6CkbK8iUQNzbcAObqnCXjaUXlqqKnbt1wMCf
an8tXs9rXSXWHxrZJGaE7BWifzwK9+YU6t9qFggYKTaSJU82OYFtyT6ryjdKzobi
+wuoPCJEZOq3VOjor/wtSny7wY6zlqiEjnzwawZuJJZkD/kvOkLL7kgo33GR4AIi
kJmT2qcKVQpJZwZdIY/jRD9NJVMyVQmHZFESk/zi4pyBfPXmvIAA+L5ASQj48W15
fGMsQgPDjS8UOQ5YYIxCkserRv+hbsxVxKmFx1KbPBgnWBcNzEPVmO2TAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBHUF9M+CuXGQz3cLV+ByikQv8yzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRWRRWDB6NEs1Y1pEUGR3dFg0SEtLUkNfekxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKFp4OXYfVqbwAOKKvO5
cOk4P3CJh7CH0i4PPtYdmeRg/fIzBKxv9aQkHH3VEZW2d6cs69uou0/qkADm/l1z
0Ln2urh8LXp53FeKKqllhAKpnMamkr1SV5YP8oYs7kanITEEVpBWpC/6/dPfB53d
333ekJtY1IR8IsCjwq5m6LE6eDDw5iPLy9OfcUT5bcto8lPJ2Ffn6o6yB2vw5VKp
EJ0saoUMkYcj41VmJ++Fied0n4LDtlkbvFEmVJRz51wB5LkXfrysAzeBkVvgoWRH
hc5Nh4qVEk78/g5AilfqyoZmMpc7/CG6CXs3tDAm5StrKwHPF8YGdJr0fnFi9Wfs
UNk=
-----END CERTIFICATE-----
Generated at Sat May 10 11:38:30 2025 by rpki-client