Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KdjpBJKsaC3vJd4m0YPwlFACVtg.roa
File: KdjpBJKsaC3vJd4m0YPwlFACVtg.roa (raw, json)
Hash identifier: nF3EsrRyxSoCydGgGe48pMSYckLuZxgTxyghaZiIDy4=
Subject key identifier: 29:D8:E9:04:92:AC:68:2D:EF:25:DE:26:D1:83:F0:94:50:02:56:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B86B7803F0E4E38CD6E2D752C6A00D86B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KdjpBJKsaC3vJd4m0YPwlFACVtg.roa
Signing time: Tue 31 Oct 2023 17:10:54 +0000
ROA not before: Tue 31 Oct 2023 17:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:86b1:b464/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:b7:80:3f:0e:4e:38:cd:6e:2d:75:2c:6a:00:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 17:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d8e90492ac682def25de26d183f094500256d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:a6:24:a5:94:39:ff:69:d0:c8:c5:06:d6:
6a:a4:45:e8:12:22:58:c9:f0:ff:89:1a:f0:7d:f2:
31:58:7a:1b:4f:83:aa:fd:72:e0:8c:a9:7d:19:4f:
63:fb:fa:13:73:ed:37:97:eb:1a:e4:e3:82:75:32:
62:cf:d6:7d:dc:a6:03:d5:00:bf:75:4e:01:e0:4e:
e0:33:05:67:b4:c6:71:15:08:33:d3:79:cb:d8:1c:
35:29:8d:1f:93:dc:a6:1b:99:35:8a:4d:90:fe:b6:
30:1b:ae:ce:7c:e7:b9:e3:d4:54:6e:84:86:a8:17:
71:9d:01:70:19:cc:44:3d:56:00:84:36:c0:74:b0:
5f:45:cb:a6:94:f4:5a:5d:02:6a:68:71:38:af:73:
23:8a:c4:7e:56:d6:de:64:1a:48:7a:a4:7e:a5:31:
fe:ec:af:fa:71:e8:78:66:69:05:2c:03:5c:30:b7:
68:e6:ba:9d:36:ce:55:40:73:e7:02:90:bc:d2:15:
a2:63:97:20:09:78:0d:bc:bb:29:4d:67:57:9a:13:
f7:0c:3c:7b:75:08:2e:18:be:e0:bf:5c:b4:6e:bc:
81:82:77:7c:23:ba:0b:8a:77:db:bd:44:a8:ea:ba:
e9:8f:19:b8:1b:0f:7c:e8:61:e6:4c:65:45:8b:53:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:E9:04:92:AC:68:2D:EF:25:DE:26:D1:83:F0:94:50:02:56:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KdjpBJKsaC3vJd4m0YPwlFACVtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:e9:ce:b0:3a:a0:66:86:d1:3f:e8:80:50:de:af:43:82:72:
f2:98:2b:06:7e:bf:b3:b2:e3:a6:bb:39:d2:7f:f5:1f:36:b5:
e5:d5:e6:18:fe:11:d0:0f:92:b7:03:5b:1b:51:fc:5d:5c:e3:
45:d9:4d:8b:8a:35:0e:ea:13:1f:24:b4:c8:cd:52:2a:82:6f:
fe:9a:20:f3:bc:d5:88:b3:04:50:f3:d5:9e:d0:e5:1c:12:77:
c0:39:b4:0b:10:80:7b:cd:3a:70:85:2b:22:af:e9:a2:ae:6e:
5e:9e:9d:4d:a4:b0:e8:75:fb:35:92:1e:fb:4b:0f:d5:44:08:
18:d9:2f:ce:66:30:fd:f5:48:02:5f:f3:0b:67:09:a0:c1:bc:
08:9c:e8:b4:4f:e6:7a:12:89:52:de:81:3d:74:17:c5:c2:c2:
cb:a2:99:46:ea:fd:60:e5:cf:8c:cb:ec:92:b4:13:67:07:15:
71:2e:33:4d:3e:18:a0:d9:c3:d2:61:94:1b:87:ff:0d:c5:ec:
c9:0a:30:48:90:f0:02:3e:1a:ed:3b:63:ed:e9:25:81:fe:9e:
16:1c:34:1e:0f:e3:6c:8c:af:c8:eb:35:33:76:d7:fb:75:1e:
b0:7e:46:e1:28:67:e7:ce:4e:44:c8:8e:9c:5e:73:44:37:60:
13:69:d4:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuGt4A/Dk44zW4tdSxqANhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMTcxMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWQ4ZTkwNDkyYWM2ODJkZWYyNWRlMjZkMTgzZjA5NDUwMDI1NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDOmJKWUOf9p0MjFBtZqpEXoEiJY
yfD/iRrwffIxWHobT4Oq/XLgjKl9GU9j+/oTc+03l+sa5OOCdTJiz9Z93KYD1QC/
dU4B4E7gMwVntMZxFQgz03nL2Bw1KY0fk9ymG5k1ik2Q/rYwG67OfOe549RUboSG
qBdxnQFwGcxEPVYAhDbAdLBfRcumlPRaXQJqaHE4r3MjisR+VtbeZBpIeqR+pTH+
7K/6ceh4ZmkFLANcMLdo5rqdNs5VQHPnApC80hWiY5cgCXgNvLspTWdXmhP3DDx7
dQguGL7gv1y0bryBgnd8I7oLinfbvUSo6rrpjxm4Gw986GHmTGVFi1PeJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCnY6QSSrGgt7yXeJtGD8JRQAlbYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvS2RqcEJKS3NhQzN2SmQ0bTBZUHdsRkFDVnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAHpzrA6oGaG0T/ogFDe
r0OCcvKYKwZ+v7Oy46a7OdJ/9R82teXV5hj+EdAPkrcDWxtR/F1c40XZTYuKNQ7q
Ex8ktMjNUiqCb/6aIPO81YizBFDz1Z7Q5RwSd8A5tAsQgHvNOnCFKyKv6aKubl6e
nU2ksOh1+zWSHvtLD9VECBjZL85mMP31SAJf8wtnCaDBvAic6LRP5noSiVLegT10
F8XCwsuimUbq/WDlz4zL7JK0E2cHFXEuM00+GKDZw9JhlBuH/w3F7MkKMEiQ8AI+
Gu07Y+3pJYH+nhYcNB4P42yMr8jrNTN21/t1HrB+RuEoZ+fOTkTIjpxec0Q3YBNp
1Lg=
-----END CERTIFICATE-----
Generated at Sun May 11 15:51:17 2025 by rpki-client