Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G3JZu0GlG-OnP8WB2k_hrp0Qi6E.roa
File: G3JZu0GlG-OnP8WB2k_hrp0Qi6E.roa (raw, json)
Hash identifier: omzneuWfLDBvTV8otesVrf5PrIrzlO4sr11GEiOiKYM=
Subject key identifier: 1B:72:59:BB:41:A5:1B:E3:A7:3F:C5:81:DA:4F:E1:AE:9D:10:8B:A1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3FE66C8FB0B3C240B54C2A4AE6840433
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G3JZu0GlG-OnP8WB2k_hrp0Qi6E.roa
Signing time: Wed 06 Dec 2023 16:11:54 +0000
ROA not before: Wed 06 Dec 2023 16:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:e6:6c:8f:b0:b3:c2:40:b5:4c:2a:4a:e6:84:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 16:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b7259bb41a51be3a73fc581da4fe1ae9d108ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:36:99:99:70:7b:e4:a9:99:2c:09:77:7b:
93:c7:6f:12:c2:61:b7:94:fa:1b:2d:ed:9c:aa:cf:
21:f8:1a:b8:77:42:3d:59:37:11:ce:aa:b0:80:38:
4c:28:03:c7:09:38:be:f8:c2:14:01:69:7b:4b:70:
06:a2:df:cb:a5:6d:24:87:ff:ac:54:ac:47:43:75:
72:cf:5a:83:ca:76:17:eb:42:bf:72:fc:4a:e2:fb:
70:9d:47:39:03:bd:4a:e2:26:55:1d:19:99:69:c8:
af:0c:15:d4:b0:5f:56:62:e4:c5:e4:49:f9:58:39:
85:31:30:f9:e2:ab:f0:08:31:7b:c9:cf:af:76:50:
51:5f:7e:64:66:53:96:f1:e5:8b:4c:db:6c:12:08:
e1:d8:1a:83:2d:0f:1f:61:b0:c3:8f:24:b3:5f:a0:
8a:72:98:3e:41:fb:8d:58:31:e8:5e:c6:1b:88:43:
1f:7a:5b:db:c1:cd:70:d7:bc:d0:c4:f3:07:25:56:
92:6b:1f:8a:b1:c6:d3:b5:e0:a2:84:b9:cd:ef:fe:
1f:7b:ac:4f:29:59:fa:25:a9:68:fa:8d:f2:8a:b2:
d4:72:b8:f6:fb:95:50:c1:97:cf:0f:40:f0:be:d0:
aa:3b:7d:25:20:c2:b1:10:1d:78:d1:aa:c7:49:87:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:59:BB:41:A5:1B:E3:A7:3F:C5:81:DA:4F:E1:AE:9D:10:8B:A1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G3JZu0GlG-OnP8WB2k_hrp0Qi6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ce:b3:24:ff:46:e0:cc:93:37:5c:0c:6f:b5:1c:66:d8:6d:
7d:5c:95:06:77:66:70:b7:cb:bc:61:c3:45:7e:d3:fe:47:a8:
cc:58:4b:ce:32:6d:33:b6:db:5e:66:0c:2b:e3:66:29:95:9b:
69:ab:c0:d4:eb:3a:85:b7:aa:06:59:cb:46:2d:68:5e:7e:ad:
96:ff:12:b4:14:5a:40:c3:38:8a:4f:dc:0b:1b:77:bb:f7:41:
44:87:a2:90:18:6a:5b:3b:2c:b9:b3:3f:f8:3d:82:36:55:16:
dc:28:3d:0e:66:01:ce:ce:69:54:97:95:da:7b:28:38:de:d3:
b0:a5:b6:b9:26:44:bf:e9:3e:e6:df:b9:25:14:89:30:c8:18:
88:39:9f:c8:93:c7:81:90:3f:ba:52:9b:48:51:d6:30:5d:87:
d1:07:74:24:c0:30:cd:df:0c:f5:98:07:d2:a3:42:e2:6d:33:
66:a3:a2:03:01:4b:7a:c8:42:82:1b:d4:17:c0:45:9b:6c:0a:
3c:2d:75:89:c0:aa:38:4b:1e:42:2d:bb:b7:58:84:50:f6:46:
a8:34:7f:d8:68:67:07:f8:c0:d8:f9:87:5e:7b:ff:ca:36:09:
bc:f5:86:54:c9:87:48:dd:ec:63:3a:50:30:e5:ee:31:4a:c7:
66:d3:ac:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw/5myPsLPCQLVMKkrmhAQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTYxMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjcyNTliYjQxYTUxYmUzYTczZmM1ODFkYTRmZTFhZTlkMTA4YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUU2mZlwe+SpmSwJd3uTx28SwmG3
lPobLe2cqs8h+Bq4d0I9WTcRzqqwgDhMKAPHCTi++MIUAWl7S3AGot/LpW0kh/+s
VKxHQ3Vyz1qDynYX60K/cvxK4vtwnUc5A71K4iZVHRmZacivDBXUsF9WYuTF5En5
WDmFMTD54qvwCDF7yc+vdlBRX35kZlOW8eWLTNtsEgjh2BqDLQ8fYbDDjySzX6CK
cpg+QfuNWDHoXsYbiEMfelvbwc1w17zQxPMHJVaSax+KscbTteCihLnN7/4fe6xP
KVn6Jalo+o3yirLUcrj2+5VQwZfPD0DwvtCqO30lIMKxEB140arHSYfrlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBtyWbtBpRvjpz/FgdpP4a6dEIuhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRzNKWnUwR2xHLU9uUDhXQjJrX2hycDBRaTZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJHOsyT/RuDMkzdcDG+1
HGbYbX1clQZ3ZnC3y7xhw0V+0/5HqMxYS84ybTO2215mDCvjZimVm2mrwNTrOoW3
qgZZy0YtaF5+rZb/ErQUWkDDOIpP3Asbd7v3QUSHopAYals7LLmzP/g9gjZVFtwo
PQ5mAc7OaVSXldp7KDje07CltrkmRL/pPubfuSUUiTDIGIg5n8iTx4GQP7pSm0hR
1jBdh9EHdCTAMM3fDPWYB9KjQuJtM2ajogMBS3rIQoIb1BfARZtsCjwtdYnAqjhL
HkItu7dYhFD2Rqg0f9hoZwf4wNj5h157/8o2Cbz1hlTJh0jd7GM6UDDl7jFKx2bT
rKU=
-----END CERTIFICATE-----
Generated at Tue May 13 02:30:45 2025 by rpki-client