Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5jhc_OOdfwyq7QdgnbW9Uz_fkw.roa
File: K5jhc_OOdfwyq7QdgnbW9Uz_fkw.roa (raw, json)
Hash identifier: SWuRIcXs0zOIu2A0vQLoZtWTnEULXAf+xZzx1/RBs40=
Subject key identifier: 2B:98:E1:73:F3:8E:75:FC:32:AB:B4:1D:82:76:D6:F5:4C:FF:7E:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B98EF855A50B6B780757965AA1AE76372
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5jhc_OOdfwyq7QdgnbW9Uz_fkw.roa
Signing time: Sat 04 Nov 2023 06:05:15 +0000
ROA not before: Sat 04 Nov 2023 06:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:98ee:ba43/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:ef:85:5a:50:b6:b7:80:75:79:65:aa:1a:e7:63:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 06:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b98e173f38e75fc32abb41d8276d6f54cff7e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:a4:09:5f:71:6d:07:53:ae:8d:0e:4b:38:
df:36:1b:5f:85:3a:bf:66:83:d4:38:a2:03:17:f9:
16:54:cb:03:41:7d:08:63:18:43:f6:98:3e:ff:e0:
4a:4c:9a:99:ed:84:4e:22:f7:43:e2:0e:26:ec:f5:
06:2e:5a:f6:06:55:a5:77:97:ce:05:39:6e:8a:7e:
14:d7:88:e0:25:dd:25:df:ac:33:4e:e2:39:7f:0c:
d5:15:7a:8f:83:ba:7f:6d:c1:ee:9d:3c:5c:32:5e:
94:c0:c8:5e:53:63:66:e4:24:14:26:ac:19:4f:72:
f6:0b:5d:aa:f2:52:46:06:12:94:a1:1d:06:0f:41:
94:c0:6d:1c:46:dd:e3:f1:b8:25:d4:5c:ca:a9:e4:
bb:6d:ce:44:7b:92:30:0b:13:59:0d:c7:4d:ee:c1:
a9:73:6d:84:0a:14:51:d8:06:be:05:3a:b6:70:71:
13:fa:7b:a1:1c:6f:1b:f0:5a:51:e5:9e:cf:1c:36:
cf:0f:0a:2d:d8:ca:6b:0a:2e:15:d8:08:e8:86:e7:
cf:4e:9b:d1:19:e6:d6:0a:fa:e9:18:5a:f2:2f:aa:
3b:26:7e:f3:7b:01:9d:64:25:18:36:0f:bc:bb:5e:
af:10:4c:f1:f2:52:cf:b5:c8:df:bc:3e:47:47:99:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:E1:73:F3:8E:75:FC:32:AB:B4:1D:82:76:D6:F5:4C:FF:7E:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K5jhc_OOdfwyq7QdgnbW9Uz_fkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:19:e2:00:5a:1e:29:73:b5:fb:9b:52:5e:c8:cc:3b:5b:a7:
0e:e3:76:74:0e:b8:05:40:d3:89:e9:a9:e1:69:cf:85:97:a4:
86:1c:d6:7d:d1:dc:35:ce:83:b0:89:d3:7c:dd:6f:5f:13:a3:
04:2a:ae:67:70:85:ce:76:53:19:15:6e:76:ca:ba:f6:ef:c5:
22:ee:b2:fe:07:d4:84:74:52:00:9a:8e:83:4a:2a:bb:1f:f5:
83:a9:92:0b:6f:4e:ae:10:b0:b0:39:76:4c:00:93:cc:fc:6d:
5d:a4:0d:f4:8d:1a:c5:0b:dc:80:d2:c2:73:14:31:2a:87:3a:
17:25:37:b7:15:55:63:a5:f3:2f:d6:d6:3a:37:a9:02:e3:19:
e9:91:fb:3b:97:a4:f1:1f:c4:03:4b:12:11:18:7a:d0:94:e1:
07:1c:92:e2:6e:9b:ee:52:61:12:cb:5a:39:84:fe:c6:56:2a:
49:17:69:c0:44:46:f2:6a:41:ff:f9:38:36:42:92:94:93:99:
63:8e:5d:78:e6:56:70:c7:3d:a7:3d:a6:10:d4:fa:87:3e:90:
47:f4:dc:91:c0:82:b2:e5:ab:ed:7c:ce:e8:49:34:7a:ee:6c:
1e:79:a9:1e:37:98:6b:3e:e1:55:ba:e4:52:26:08:cd:fe:dc:
71:c2:21:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuY74VaULa3gHV5Zaoa52NyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MDYwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk4ZTE3M2YzOGU3NWZjMzJhYmI0MWQ4Mjc2ZDZmNTRjZmY3ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSikCV9xbQdTro0OSzjfNhtfhTq/
ZoPUOKIDF/kWVMsDQX0IYxhD9pg+/+BKTJqZ7YROIvdD4g4m7PUGLlr2BlWld5fO
BTluin4U14jgJd0l36wzTuI5fwzVFXqPg7p/bcHunTxcMl6UwMheU2Nm5CQUJqwZ
T3L2C12q8lJGBhKUoR0GD0GUwG0cRt3j8bgl1FzKqeS7bc5Ee5IwCxNZDcdN7sGp
c22EChRR2Aa+BTq2cHET+nuhHG8b8FpR5Z7PHDbPDwot2MprCi4V2AjohufPTpvR
GebWCvrpGFryL6o7Jn7zewGdZCUYNg+8u16vEEzx8lLPtcjfvD5HR5k1BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCuY4XPzjnX8Mqu0HYJ21vVM/35MMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSzVqaGNfT09kZnd5cTdRZGduYlc5VXpfZmt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACwZ4gBaHilztfubUl7I
zDtbpw7jdnQOuAVA04npqeFpz4WXpIYc1n3R3DXOg7CJ03zdb18TowQqrmdwhc52
UxkVbnbKuvbvxSLusv4H1IR0UgCajoNKKrsf9YOpkgtvTq4QsLA5dkwAk8z8bV2k
DfSNGsUL3IDSwnMUMSqHOhclN7cVVWOl8y/W1jo3qQLjGemR+zuXpPEfxANLEhEY
etCU4QcckuJum+5SYRLLWjmE/sZWKkkXacBERvJqQf/5ODZCkpSTmWOOXXjmVnDH
Pac9phDU+oc+kEf03JHAgrLlq+18zuhJNHrubB55qR43mGs+4VW65FImCM3+3HHC
IQU=
-----END CERTIFICATE-----
Generated at Sat May 10 11:17:49 2025 by rpki-client