Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6x7rKj4MWbziFmlSZLjZgxPDL8.roa
File: M6x7rKj4MWbziFmlSZLjZgxPDL8.roa (raw, json)
Hash identifier: dF6A07zvPelpvXlhTdg4JXJHSRt8RHnGx7sPUlxpghw=
Subject key identifier: 33:AC:7B:AC:A8:F8:31:66:F3:88:59:A5:49:92:E3:66:0C:4F:0C:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF206931AF338C633B21A860609200AFC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6x7rKj4MWbziFmlSZLjZgxPDL8.roa
Signing time: Mon 02 Oct 2023 20:13:51 +0000
ROA not before: Mon 02 Oct 2023 20:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f2:06:93:1a:f3:38:c6:33:b2:1a:86:06:09:20:0a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 20:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ac7baca8f83166f38859a54992e3660c4f0cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:db:a3:e1:40:4d:0e:b7:6b:6d:12:0c:fe:
4e:b8:18:f5:ff:4b:4b:d3:66:b6:5e:21:bf:51:8e:
c4:b2:e7:7f:b9:a9:9c:27:c2:a5:8f:03:c2:cd:3c:
25:a5:45:9a:92:7b:ed:c8:eb:06:9a:ca:e9:da:da:
b8:27:d3:fc:5e:7c:11:80:cc:68:2d:ec:cf:58:4e:
63:52:f1:57:42:6e:5e:0f:73:49:3d:a7:7f:48:a0:
3a:66:5e:4b:fc:81:ae:8a:f7:98:9b:b4:e5:f4:ce:
a2:64:33:7d:57:69:b0:0b:11:51:ad:ae:53:f1:48:
cc:9c:bc:d1:cd:a1:56:71:30:ca:d0:bd:c1:ad:ed:
67:42:d5:aa:d0:b0:48:87:29:d0:f3:8d:f3:f8:cf:
3a:12:2e:40:83:51:28:d9:91:23:fb:97:5e:dc:b5:
d9:f2:3d:c6:e5:b9:d2:06:76:21:0d:b9:93:5e:de:
84:9a:2f:6b:c2:47:07:66:75:14:ce:9a:68:ca:91:
89:18:2b:fb:9b:ed:ec:12:b8:7b:b9:7e:6b:78:cb:
a4:28:a2:40:d5:e0:77:8d:f2:1d:08:f4:6e:fb:2d:
67:bd:3f:0e:ea:28:79:1d:77:09:af:f1:83:4e:30:
26:03:26:3d:9a:05:ba:fd:13:fb:6b:bc:eb:68:0e:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:7B:AC:A8:F8:31:66:F3:88:59:A5:49:92:E3:66:0C:4F:0C:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6x7rKj4MWbziFmlSZLjZgxPDL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:57:64:a5:5f:8d:8e:90:af:eb:39:97:90:a0:36:a3:84:1c:
c5:38:88:cc:be:1f:4d:22:bd:de:68:2b:62:3a:6c:04:45:4a:
b4:4f:26:65:8c:20:77:1c:18:35:77:ac:5b:50:fb:7f:d6:08:
c6:fe:98:27:87:2f:67:9d:0b:ff:f4:72:61:d0:b7:55:1f:ff:
52:33:46:cb:b3:46:67:e0:ee:63:b1:70:71:d9:be:5a:5f:70:
50:db:cb:9c:3a:6b:0a:8b:24:db:2d:86:d4:cf:f7:e3:19:95:
8b:cd:32:21:77:7e:7d:ea:84:46:19:b1:44:d0:c4:f7:69:10:
e5:90:34:d3:d7:0a:29:dc:15:f6:c2:b2:b1:e7:ae:49:8d:ac:
ef:15:ce:43:b0:4c:e8:cc:36:4b:1b:4a:2b:07:42:bc:0f:b6:
6c:15:ef:2b:a8:4c:97:0b:b4:0c:2c:ee:fe:8d:b6:a7:1c:3d:
dc:48:15:f7:2f:72:80:ca:60:17:7a:62:20:55:f5:84:68:ad:
f2:9d:33:67:b4:56:62:91:3c:e1:c0:3d:64:47:8a:f9:36:6c:
d0:a7:fe:d6:48:5c:f5:41:12:10:9a:1a:a4:a0:92:cc:09:1f:
51:87:c7:3f:e3:90:0e:bf:51:9a:be:97:79:41:22:3d:5c:8a:
38:3d:e4:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYryBpMa8zjGM7IahgYJIAr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMjAxMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FjN2JhY2E4ZjgzMTY2ZjM4ODU5YTU0OTkyZTM2NjBjNGYwY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJrbo+FATQ63a20SDP5OuBj1/0tL
02a2XiG/UY7Esud/uamcJ8KljwPCzTwlpUWaknvtyOsGmsrp2tq4J9P8XnwRgMxo
LezPWE5jUvFXQm5eD3NJPad/SKA6Zl5L/IGuiveYm7Tl9M6iZDN9V2mwCxFRra5T
8UjMnLzRzaFWcTDK0L3Bre1nQtWq0LBIhynQ843z+M86Ei5Ag1Eo2ZEj+5de3LXZ
8j3G5bnSBnYhDbmTXt6Emi9rwkcHZnUUzppoypGJGCv7m+3sErh7uX5reMukKKJA
1eB3jfIdCPRu+y1nvT8O6ih5HXcJr/GDTjAmAyY9mgW6/RP7a7zraA5IXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDOse6yo+DFm84hZpUmS42YMTwy/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTTZ4N3JLajRNV2J6aUZtbFNaTGpaZ3hQREw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANJXZKVfjY6Qr+s5l5Cg
NqOEHMU4iMy+H00ivd5oK2I6bARFSrRPJmWMIHccGDV3rFtQ+3/WCMb+mCeHL2ed
C//0cmHQt1Uf/1IzRsuzRmfg7mOxcHHZvlpfcFDby5w6awqLJNsthtTP9+MZlYvN
MiF3fn3qhEYZsUTQxPdpEOWQNNPXCincFfbCsrHnrkmNrO8VzkOwTOjMNksbSisH
QrwPtmwV7yuoTJcLtAws7v6NtqccPdxIFfcvcoDKYBd6YiBV9YRorfKdM2e0VmKR
POHAPWRHivk2bNCn/tZIXPVBEhCaGqSgkswJH1GHxz/jkA6/UZq+l3lBIj1cijg9
5EQ=
-----END CERTIFICATE-----
Generated at Sat May 10 12:01:04 2025 by rpki-client