Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5ETlsgL_MpGHW83qgm59R3yo_8.roa
File: K5ETlsgL_MpGHW83qgm59R3yo_8.roa (raw, json)
Hash identifier: CdRTxtOsLGBGFHPCvYxH/JFy776tUhH9Toa36dSVzM4=
Subject key identifier: 2B:91:13:96:C8:0B:FC:CA:46:1D:6F:37:AA:09:B9:F5:1D:F2:A3:FF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAF8392BB755542F42F3C195DB4442B7D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5ETlsgL_MpGHW83qgm59R3yo_8.roa
Signing time: Tue 19 Sep 2023 22:15:50 +0000
ROA not before: Tue 19 Sep 2023 22:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:83:92:bb:75:55:42:f4:2f:3c:19:5d:b4:44:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 22:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b911396c80bfcca461d6f37aa09b9f51df2a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:df:22:eb:ad:5c:3c:3e:af:69:37:bc:07:
d0:40:f6:f7:e4:90:10:02:9e:d7:42:0d:2b:e6:2f:
2e:4e:48:32:f0:7c:a1:04:d6:61:a1:01:e7:23:a1:
4e:1c:d8:60:5e:c8:86:25:2f:67:4a:63:96:61:73:
da:f1:a2:c6:79:bf:27:78:7c:37:71:0b:ba:33:d2:
ca:01:21:10:c1:6b:83:22:8d:12:9e:50:45:a0:c4:
28:b4:80:87:49:91:d6:fb:2b:8e:bf:f4:78:17:2b:
17:6b:82:9a:55:74:76:16:68:88:47:cc:e9:d2:6b:
6c:5e:6e:ee:25:74:f6:6d:70:7f:ef:88:1c:33:3f:
09:d2:c8:79:70:7d:6d:18:a8:2d:92:53:27:d8:25:
71:24:76:bf:32:e0:74:69:b9:0e:d2:02:5b:de:f2:
f2:e1:7f:1e:fe:6b:8d:fd:60:07:bd:2d:45:0e:bd:
51:ed:70:5b:42:19:b1:5a:50:9b:99:25:01:18:fa:
2a:fa:7c:ea:6b:23:98:9f:b7:ad:38:7c:20:83:b9:
3b:b5:54:01:af:33:e9:dd:fb:d7:f9:c0:dc:c8:e3:
ce:41:dc:e1:6d:0c:7e:9c:cb:bf:2d:0a:11:14:50:
bf:98:21:8f:eb:c8:7f:92:88:40:6e:3f:85:ed:fb:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:13:96:C8:0B:FC:CA:46:1D:6F:37:AA:09:B9:F5:1D:F2:A3:FF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5ETlsgL_MpGHW83qgm59R3yo_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:1e:30:af:46:24:3b:6f:bb:e9:d1:30:01:93:60:1a:3c:ce:
47:a6:3c:9b:02:b5:07:de:d6:21:b3:1e:96:33:a4:03:2f:7a:
f0:3a:d8:5a:d0:f9:ba:27:9c:7f:4a:9f:9a:bc:26:01:7b:6b:
46:a9:ad:51:55:16:eb:a3:78:00:5a:a7:94:9d:cb:78:2e:2e:
e3:d2:25:0f:97:59:cf:d3:77:c8:bb:25:84:da:24:66:61:ec:
8a:1b:79:3a:4d:8d:8b:b2:89:63:58:d0:2e:71:e6:3f:78:58:
a1:2a:db:34:ad:e1:e2:ee:8c:e9:3e:83:01:62:00:ae:31:54:
b3:74:09:45:fa:ce:bc:ef:86:ae:ed:6a:db:9c:52:0b:1d:0c:
e3:ae:b9:f7:25:34:f2:3d:a7:88:70:25:a4:ae:e3:ed:cf:96:
48:cd:a7:8b:0d:75:a3:72:c5:04:30:7c:16:9c:df:09:c1:7b:
ce:24:34:5b:d7:e4:b1:78:53:cc:54:94:08:b4:f3:b8:74:24:
f3:2d:c9:44:d2:c0:f8:42:1e:8d:96:75:05:a8:7b:f3:d4:0e:
ca:b0:1b:d3:8c:74:09:7a:c1:9d:05:e5:84:46:e6:21:a8:65:
51:13:e7:49:b5:2d:18:39:1c:29:43:96:0d:27:97:83:b4:01:
23:9b:f3:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqvg5K7dVVC9C88GV20RCt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTE5MjIxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjkxMTM5NmM4MGJmY2NhNDYxZDZmMzdhYTA5YjlmNTFkZjJhM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U/fIuutXDw+r2k3vAfQQPb35JAQ
Ap7XQg0r5i8uTkgy8HyhBNZhoQHnI6FOHNhgXsiGJS9nSmOWYXPa8aLGeb8neHw3
cQu6M9LKASEQwWuDIo0SnlBFoMQotICHSZHW+yuOv/R4FysXa4KaVXR2FmiIR8zp
0mtsXm7uJXT2bXB/74gcMz8J0sh5cH1tGKgtklMn2CVxJHa/MuB0abkO0gJb3vLy
4X8e/muN/WAHvS1FDr1R7XBbQhmxWlCbmSUBGPoq+nzqayOYn7etOHwgg7k7tVQB
rzPp3fvX+cDcyOPOQdzhbQx+nMu/LQoRFFC/mCGP68h/kohAbj+F7fs2ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCuRE5bIC/zKRh1vN6oJufUd8qP/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSzVFVGxzZ0xfTXBHSFc4M3FnbTU5UjN5b184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANAeMK9GJDtvu+nRMAGT
YBo8zkemPJsCtQfe1iGzHpYzpAMvevA62FrQ+bonnH9Kn5q8JgF7a0aprVFVFuuj
eABap5Sdy3guLuPSJQ+XWc/Td8i7JYTaJGZh7IobeTpNjYuyiWNY0C5x5j94WKEq
2zSt4eLujOk+gwFiAK4xVLN0CUX6zrzvhq7tatucUgsdDOOuufclNPI9p4hwJaSu
4+3PlkjNp4sNdaNyxQQwfBac3wnBe84kNFvX5LF4U8xUlAi087h0JPMtyUTSwPhC
Ho2WdQWoe/PUDsqwG9OMdAl6wZ0F5YRG5iGoZVET50m1LRg5HClDlg0nl4O0ASOb
864=
-----END CERTIFICATE-----
Generated at Sun May 11 17:01:49 2025 by rpki-client