Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OGsqgMRL9Y3vE_LtzAzYpbqf6GU.roa
File: OGsqgMRL9Y3vE_LtzAzYpbqf6GU.roa (raw, json)
Hash identifier: enqA6nrWYpOQxz/slhBFQdPBS8wcncB7ZR0Gr09tekI=
Subject key identifier: 38:6B:2A:80:C4:4B:F5:8D:EF:13:F2:ED:CC:0C:D8:A5:BA:9F:E8:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3A5A6C3382A403FD99D57231A28884B9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OGsqgMRL9Y3vE_LtzAzYpbqf6GU.roa
Signing time: Mon 16 Oct 2023 21:18:06 +0000
ROA not before: Mon 16 Oct 2023 21:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:5a:6c:33:82:a4:03:fd:99:d5:72:31:a2:88:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 21:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386b2a80c44bf58def13f2edcc0cd8a5ba9fe865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:af:06:ce:75:4b:a4:5c:86:05:20:75:27:
e2:b9:0f:e4:83:1b:82:49:f3:44:a6:af:33:9f:56:
6d:46:24:8e:d8:57:04:05:5c:c1:89:22:77:4e:b9:
19:14:4b:20:76:7c:b0:cd:98:b2:59:89:14:7e:71:
1b:a1:a8:f2:ff:64:9f:ab:52:94:7b:fd:d7:f7:52:
24:cd:59:b9:59:81:bb:31:f4:1e:a1:91:3d:62:8b:
80:a1:3a:37:21:17:c3:95:23:ab:63:3b:08:6b:a4:
2d:ec:20:0c:d4:95:b3:f2:39:d5:d0:b2:78:a8:ac:
49:f2:94:b6:74:c7:0a:bb:44:fa:f3:0f:11:69:40:
50:31:f8:d3:93:a2:9e:63:47:ea:d7:5b:bd:8f:10:
1c:be:a7:74:84:f2:bc:60:6b:ca:d1:20:21:d7:81:
22:7c:3e:d3:e4:7c:83:5b:bd:11:50:46:c8:bb:c8:
66:67:6e:3b:02:64:d5:65:cc:74:14:10:af:a0:70:
7e:a5:b3:6a:81:94:08:0a:73:aa:2f:d9:c0:09:dd:
ee:a1:b1:95:99:95:52:10:ab:d1:83:cd:0c:03:4f:
ce:d3:1e:19:ec:43:06:fc:1b:75:1b:4b:24:c8:88:
c6:71:c7:87:85:20:53:6f:3e:ab:87:20:8e:7a:84:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:2A:80:C4:4B:F5:8D:EF:13:F2:ED:CC:0C:D8:A5:BA:9F:E8:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OGsqgMRL9Y3vE_LtzAzYpbqf6GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:ea:f6:8f:b5:a6:ad:6e:18:2a:27:80:3b:04:92:46:ea:71:
b1:18:bf:0e:0e:e0:dd:6b:f9:84:54:0a:b4:5e:db:58:c4:bf:
c6:1d:a6:e1:ef:30:53:59:83:48:af:7d:7b:d2:53:31:3b:14:
a5:ba:91:30:94:a5:67:ce:71:37:ef:e5:a5:f8:d5:07:6a:c9:
5e:a7:35:f8:ad:7c:32:28:77:8f:a5:5f:45:ce:7e:ed:08:ef:
53:dc:7a:31:aa:9f:43:7c:77:52:e8:43:1c:a1:4f:47:26:24:
d0:9d:3e:95:ee:26:4d:56:ed:0d:4c:79:ba:c9:e9:e0:23:68:
c0:57:fe:ed:6f:f2:6c:89:e4:e7:50:d1:03:9f:91:97:fa:be:
4a:7c:55:77:db:0a:bb:27:aa:7e:1c:73:59:e4:60:56:8c:8f:
8b:af:a1:43:f7:e0:a0:6a:4a:5c:a0:bd:6c:6e:55:b6:9c:44:
04:4d:b9:6a:d7:f1:78:7d:25:f0:e6:b2:02:ae:69:f0:b3:73:
98:f7:c6:be:6a:6b:7a:96:54:b2:34:1c:00:ba:d5:74:de:5d:
05:ed:7e:bc:7e:e7:38:87:c0:45:c8:f3:b4:ba:04:48:34:24:
57:8e:b2:4c:43:6c:08:ce:ef:6b:50:31:27:96:f2:35:70:fa:
f8:31:72:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs6WmwzgqQD/ZnVcjGiiIS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE2MjExODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODZiMmE4MGM0NGJmNThkZWYxM2YyZWRjYzBjZDhhNWJhOWZlODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MCvBs51S6RchgUgdSfiuQ/kgxuC
SfNEpq8zn1ZtRiSO2FcEBVzBiSJ3TrkZFEsgdnywzZiyWYkUfnEboajy/2Sfq1KU
e/3X91IkzVm5WYG7MfQeoZE9YouAoTo3IRfDlSOrYzsIa6Qt7CAM1JWz8jnV0LJ4
qKxJ8pS2dMcKu0T68w8RaUBQMfjTk6KeY0fq11u9jxAcvqd0hPK8YGvK0SAh14Ei
fD7T5HyDW70RUEbIu8hmZ247AmTVZcx0FBCvoHB+pbNqgZQICnOqL9nACd3uobGV
mZVSEKvRg80MA0/O0x4Z7EMG/Bt1G0skyIjGcceHhSBTbz6rhyCOeoQqawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDhrKoDES/WN7xPy7cwM2KW6n+hlMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT0dzcWdNUkw5WTN2RV9MdHpBellwYnFmNkdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEnq9o+1pq1uGCongDsE
kkbqcbEYvw4O4N1r+YRUCrRe21jEv8YdpuHvMFNZg0ivfXvSUzE7FKW6kTCUpWfO
cTfv5aX41QdqyV6nNfitfDIod4+lX0XOfu0I71PcejGqn0N8d1LoQxyhT0cmJNCd
PpXuJk1W7Q1MebrJ6eAjaMBX/u1v8myJ5OdQ0QOfkZf6vkp8VXfbCrsnqn4cc1nk
YFaMj4uvoUP34KBqSlygvWxuVbacRARNuWrX8Xh9JfDmsgKuafCzc5j3xr5qa3qW
VLI0HAC61XTeXQXtfrx+5ziHwEXI87S6BEg0JFeOskxDbAjO72tQMSeW8jVw+vgx
cl8=
-----END CERTIFICATE-----
Generated at Sun May 11 09:18:16 2025 by rpki-client