Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ox2w3qbUpKDE_D9a6UKqNON1pPc.roa
File: Ox2w3qbUpKDE_D9a6UKqNON1pPc.roa (raw, json)
Hash identifier: 8lFJQvWhfbBLMFRGiuGOB9lsuDV8/0hZ4pEZ7oRrSvE=
Subject key identifier: 3B:1D:B0:DE:A6:D4:A4:A0:C4:FC:3F:5A:E9:42:AA:34:E3:75:A4:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB02773E7D55ED20CAE66858471DEDD4E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ox2w3qbUpKDE_D9a6UKqNON1pPc.roa
Signing time: Wed 20 Sep 2023 01:14:50 +0000
ROA not before: Wed 20 Sep 2023 01:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b0:27:73:e7:d5:5e:d2:0c:ae:66:85:84:71:de:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 01:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1db0dea6d4a4a0c4fc3f5ae942aa34e375a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:8f:d8:f9:2b:5e:28:4c:98:3c:a9:d9:90:
f1:f7:3e:2c:48:65:01:ad:b1:4e:b8:f1:c0:30:ec:
ee:9a:08:f8:9b:3d:0d:1d:0a:db:cb:dd:20:4e:e7:
d5:26:49:42:d6:27:34:f0:ef:09:ea:13:ea:2f:cf:
e0:ae:bc:a2:aa:21:44:c4:00:ff:94:ad:20:16:84:
ae:42:60:04:c1:cb:13:1a:6f:5f:a8:ef:bc:10:05:
59:80:87:ce:3d:25:4e:28:35:1b:6a:30:b5:6d:da:
44:0b:00:93:c0:d5:0e:be:5e:62:56:be:12:ef:93:
af:f6:dc:b4:6b:c0:27:df:2a:16:cc:67:7b:3b:e8:
4a:91:86:60:1a:71:00:c3:a8:29:6c:1c:f3:9d:19:
9c:1e:b1:97:72:54:4a:4b:f0:85:a4:83:75:1e:56:
d4:b0:64:32:e2:4b:39:3a:06:de:a6:25:20:10:1f:
d8:e6:e1:92:6e:1b:8c:00:97:6d:be:85:5e:02:f6:
0f:89:73:a9:a3:93:89:74:ed:5e:81:34:ea:3c:e4:
c4:7e:fb:2f:dc:d7:15:10:ff:16:6c:38:35:50:14:
4d:df:fe:21:f8:8f:b3:3f:12:f1:67:1a:82:47:aa:
7b:b1:3e:af:9b:a6:f3:28:cf:ff:5a:8d:08:3f:f8:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:B0:DE:A6:D4:A4:A0:C4:FC:3F:5A:E9:42:AA:34:E3:75:A4:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ox2w3qbUpKDE_D9a6UKqNON1pPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:da:34:79:1c:f0:80:20:35:0a:50:97:ba:ae:24:98:09:eb:
96:de:a7:fc:09:50:f5:3f:ce:e4:22:eb:e8:56:ee:4c:69:b1:
88:3b:b7:0d:13:c4:47:31:75:2f:7c:7e:3c:64:33:ab:d4:c0:
3f:cd:14:28:63:95:b7:51:61:67:b1:19:1f:ea:f7:cd:b3:34:
67:b0:66:49:d6:0b:07:aa:68:46:8d:b2:cf:4c:6c:ba:8e:65:
a6:fd:2c:8d:34:22:ac:11:0b:50:7f:d3:25:c4:6a:17:0e:65:
02:66:7f:c9:9f:20:48:aa:f5:67:cd:d9:b6:cb:d1:17:13:2c:
15:ef:ac:6d:19:f3:9d:c5:1d:05:cf:6c:8a:67:05:d0:56:2e:
b0:a8:5b:cf:78:a0:cc:0d:75:eb:48:d4:7b:e5:f7:2b:8b:e1:
e3:c3:0e:c0:61:fc:d4:53:11:06:ab:9d:92:03:ab:0e:30:c2:
a0:6e:17:47:be:79:03:3b:a1:51:2f:bf:c7:87:2d:4e:a3:3c:
9c:24:5d:a0:a5:e1:f5:f1:b2:91:e9:a8:4e:17:ea:67:72:0f:
61:48:c4:4d:15:60:ef:88:50:3f:09:10:96:46:2d:34:f0:56:
97:dd:53:ec:dd:b9:d7:25:78:ba:19:dc:d0:e2:85:54:75:e3:
47:7d:0c:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqwJ3Pn1V7SDK5mhYRx3t1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIwMDExNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjFkYjBkZWE2ZDRhNGEwYzRmYzNmNWFlOTQyYWEzNGUzNzVhNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9OP2PkrXihMmDyp2ZDx9z4sSGUB
rbFOuPHAMOzumgj4mz0NHQrby90gTufVJklC1ic08O8J6hPqL8/grryiqiFExAD/
lK0gFoSuQmAEwcsTGm9fqO+8EAVZgIfOPSVOKDUbajC1bdpECwCTwNUOvl5iVr4S
75Ov9ty0a8An3yoWzGd7O+hKkYZgGnEAw6gpbBzznRmcHrGXclRKS/CFpIN1HlbU
sGQy4ks5OgbepiUgEB/Y5uGSbhuMAJdtvoVeAvYPiXOpo5OJdO1egTTqPOTEfvsv
3NcVEP8WbDg1UBRN3/4h+I+zPxLxZxqCR6p7sT6vm6bzKM//Wo0IP/g6BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsdsN6m1KSgxPw/WulCqjTjdaT3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT3gydzNxYlVwS0RFX0Q5YTZVS3FOT04xcFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKHaNHkc8IAgNQpQl7qu
JJgJ65bep/wJUPU/zuQi6+hW7kxpsYg7tw0TxEcxdS98fjxkM6vUwD/NFChjlbdR
YWexGR/q982zNGewZknWCweqaEaNss9MbLqOZab9LI00IqwRC1B/0yXEahcOZQJm
f8mfIEiq9WfN2bbL0RcTLBXvrG0Z853FHQXPbIpnBdBWLrCoW894oMwNdetI1Hvl
9yuL4ePDDsBh/NRTEQarnZIDqw4wwqBuF0e+eQM7oVEvv8eHLU6jPJwkXaCl4fXx
spHpqE4X6mdyD2FIxE0VYO+IUD8JEJZGLTTwVpfdU+zdudcleLoZ3NDihVR140d9
DJQ=
-----END CERTIFICATE-----
Generated at Sat May 10 13:01:33 2025 by rpki-client