Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MS2aWC15ge_oK2BD4hyh64xZBPQ.roa
File: MS2aWC15ge_oK2BD4hyh64xZBPQ.roa (raw, json)
Hash identifier: 1AupA5fv0SIg5LWRcKPukKrQumJU9WrYViaBX+/LtSI=
Subject key identifier: 31:2D:9A:58:2D:79:81:EF:E8:2B:60:43:E2:1C:A1:EB:8C:59:04:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C32D0EB5E2AD9A54CFE8D1675CB6B2AF3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MS2aWC15ge_oK2BD4hyh64xZBPQ.roa
Signing time: Mon 04 Dec 2023 03:13:21 +0000
ROA not before: Mon 04 Dec 2023 03:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:d0:eb:5e:2a:d9:a5:4c:fe:8d:16:75:cb:6b:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 03:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=312d9a582d7981efe82b6043e21ca1eb8c5904f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:f9:18:59:e3:dd:96:e4:40:27:91:ae:ff:
e1:f0:e7:1e:3c:45:1f:ce:8a:fe:92:f9:49:38:ec:
06:ab:1a:5b:89:78:ef:1d:13:7f:3a:3c:5e:0b:8e:
88:38:82:43:6c:cb:40:a5:e8:47:43:ee:bb:e3:b1:
f4:37:13:76:ac:98:58:75:2a:79:02:86:9f:b9:32:
89:3b:f7:ae:82:7d:dd:2e:03:b3:2b:16:9e:8b:ec:
29:5c:99:d7:5d:1d:9a:02:12:03:7c:5f:de:78:e2:
16:9d:44:b9:08:ce:ed:04:e7:6a:8e:96:4d:5a:c3:
ec:e3:55:a8:70:7c:6c:28:73:85:c4:58:17:4c:61:
99:ab:48:8c:f9:85:6a:0a:22:4d:ae:67:3d:b7:6b:
5d:45:1e:d0:3b:91:aa:fb:53:91:72:f7:71:5a:11:
20:96:9a:5a:a8:99:17:be:58:e5:a4:aa:68:12:b7:
6d:27:ad:17:91:0e:3b:00:48:83:3e:42:4a:69:3f:
ba:b8:db:6a:20:b0:d0:d3:62:a8:e6:ad:35:bf:d6:
ec:48:ef:e0:d2:74:08:05:75:bf:3f:c2:f1:d0:71:
a1:8f:38:a2:90:54:ca:19:5b:ab:75:42:5b:7e:81:
66:39:e8:7f:e1:61:33:bb:16:d5:27:09:ca:61:40:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:9A:58:2D:79:81:EF:E8:2B:60:43:E2:1C:A1:EB:8C:59:04:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MS2aWC15ge_oK2BD4hyh64xZBPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:e6:08:eb:fc:41:62:51:85:7c:49:53:e3:2d:b9:60:82:e6:
d3:dc:84:3a:91:9f:2d:1b:30:df:94:93:7b:e4:c9:80:46:d4:
2a:84:53:ee:6c:b9:9e:c9:c5:1b:bf:91:0c:d7:56:d3:0c:43:
37:c7:60:c6:c5:5d:fe:44:93:80:6e:73:2e:42:8a:2c:f2:dc:
8e:a0:4f:5b:63:d0:70:4f:ea:db:cd:6b:48:10:5e:e7:a4:e9:
32:08:18:91:8d:70:8c:fc:35:c1:0e:e6:8c:79:45:cb:77:8a:
69:79:e1:c9:b9:20:3a:f4:e5:29:bc:6e:d8:a7:56:2f:40:13:
ea:75:d6:00:f1:b4:bc:44:13:d9:2b:66:e2:2b:e1:11:cf:48:
00:e4:d0:dd:ea:78:42:0b:35:fc:8f:eb:c9:08:2e:18:d2:df:
c7:fc:e3:df:3b:04:78:2d:48:27:16:64:58:0b:25:c9:84:82:
50:cf:68:bc:54:29:8e:db:ca:3c:65:9e:f1:d9:b2:b0:45:96:
06:95:74:6c:04:ac:c7:ae:52:9e:21:3a:0e:dd:33:66:d3:e4:
9b:8a:0c:95:42:c4:2f:13:8f:85:19:87:18:d5:55:3b:e3:49:
74:92:0b:38:17:8c:41:d6:7e:fd:b1:48:1a:02:15:8c:91:20:
ff:86:ed:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwy0OteKtmlTP6NFnXLayrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA0MDMxMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTJkOWE1ODJkNzk4MWVmZTgyYjYwNDNlMjFjYTFlYjhjNTkwNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHD5GFnj3ZbkQCeRrv/h8OcePEUf
zor+kvlJOOwGqxpbiXjvHRN/OjxeC46IOIJDbMtApehHQ+6747H0NxN2rJhYdSp5
AoafuTKJO/eugn3dLgOzKxaei+wpXJnXXR2aAhIDfF/eeOIWnUS5CM7tBOdqjpZN
WsPs41WocHxsKHOFxFgXTGGZq0iM+YVqCiJNrmc9t2tdRR7QO5Gq+1ORcvdxWhEg
lppaqJkXvljlpKpoErdtJ60XkQ47AEiDPkJKaT+6uNtqILDQ02Ko5q01v9bsSO/g
0nQIBXW/P8Lx0HGhjziikFTKGVurdUJbfoFmOeh/4WEzuxbVJwnKYUCJAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDEtmlgteYHv6CtgQ+IcoeuMWQT0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTVMyYVdDMTVnZV9vSzJCRDRoeWg2NHhaQlBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAL7mCOv8QWJRhXxJU+Mt
uWCC5tPchDqRny0bMN+Uk3vkyYBG1CqEU+5suZ7JxRu/kQzXVtMMQzfHYMbFXf5E
k4Bucy5Ciizy3I6gT1tj0HBP6tvNa0gQXuek6TIIGJGNcIz8NcEO5ox5Rct3iml5
4cm5IDr05Sm8btinVi9AE+p11gDxtLxEE9krZuIr4RHPSADk0N3qeEILNfyP68kI
LhjS38f84987BHgtSCcWZFgLJcmEglDPaLxUKY7byjxlnvHZsrBFlgaVdGwErMeu
Up4hOg7dM2bT5JuKDJVCxC8Tj4UZhxjVVTvjSXSSCzgXjEHWfv2xSBoCFYyRIP+G
7eg=
-----END CERTIFICATE-----
Generated at Mon May 12 13:31:53 2025 by rpki-client