Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Oz7F6sDrcPe4YMbxPLdcYhsxbI0.roa
File: Oz7F6sDrcPe4YMbxPLdcYhsxbI0.roa (raw, json)
Hash identifier: JUUuXS/tzpSbg0Gs5zv7lfKG9VQr2Rgtquo0NwV5g/o=
Subject key identifier: 3B:3E:C5:EA:C0:EB:70:F7:B8:60:C6:F1:3C:B7:5C:62:1B:31:6C:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA30E769EC59BF25E5C536844CC7B5A0F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Oz7F6sDrcPe4YMbxPLdcYhsxbI0.roa
Signing time: Mon 06 Nov 2023 05:15:15 +0000
ROA not before: Mon 06 Nov 2023 05:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:0e:76:9e:c5:9b:f2:5e:5c:53:68:44:cc:7b:5a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 05:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b3ec5eac0eb70f7b860c6f13cb75c621b316c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:51:c1:66:e0:0d:5b:e4:00:c9:7d:5f:bd:
24:29:f4:fc:93:a6:c6:25:4c:82:23:10:f7:5b:eb:
ec:50:2e:72:9f:ed:c9:9e:26:64:c5:f8:90:3a:78:
15:2e:98:a8:a1:92:b8:0c:74:f9:ec:09:4a:50:f6:
be:54:7a:c3:d5:4a:33:75:70:b1:35:b5:36:c2:d2:
a8:a8:a1:1b:e8:a5:a3:a9:a7:c7:41:f9:df:3f:65:
fe:90:85:39:8d:58:0d:b4:7e:5f:f7:0c:c7:d4:65:
2c:2a:e3:62:0f:1b:d3:12:fa:a5:55:5f:77:77:a1:
e1:8c:d5:86:88:78:7b:73:5a:f7:e7:83:4f:72:22:
e7:25:52:ed:a7:2b:e3:d0:c3:ed:5a:c2:39:cc:fc:
65:78:af:4b:7a:d3:79:16:ac:6c:2e:3f:81:ed:a8:
51:4b:d6:0b:b6:73:45:26:52:29:5f:14:37:28:74:
cc:b9:0b:a0:74:81:61:df:46:9e:5a:d4:a8:3f:06:
55:54:cb:12:43:fe:ec:6b:65:b8:a6:0f:f5:07:c9:
fc:17:95:da:bf:45:d1:58:5d:37:2d:09:87:de:10:
14:d2:a1:66:c2:2c:fd:0c:68:a7:f8:11:78:33:eb:
72:a7:a4:83:21:0c:f4:8c:bf:be:b5:97:07:4c:58:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:C5:EA:C0:EB:70:F7:B8:60:C6:F1:3C:B7:5C:62:1B:31:6C:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Oz7F6sDrcPe4YMbxPLdcYhsxbI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:24:4b:88:fe:a2:e0:bd:3c:fd:6f:55:86:4f:50:6b:36:61:
ea:c8:30:ad:9f:31:cd:fa:61:e3:a5:6c:6e:71:ae:69:08:f3:
ba:dc:e3:b3:22:2d:28:96:93:55:2a:c5:70:3b:1d:a6:94:be:
f8:88:72:fb:98:9e:ec:cc:96:ed:e0:67:97:b0:ca:94:c7:ac:
8f:01:1e:06:b6:4b:61:21:fd:39:ad:0a:a9:7d:05:a4:5c:dc:
cd:3b:d8:c8:d4:e3:17:13:be:5a:05:b9:39:c7:c0:4c:03:7f:
e2:c6:b4:5e:b5:6a:96:4c:ac:f1:bb:83:c1:cc:f4:e2:f2:c9:
1d:8b:94:bf:56:71:a8:80:85:eb:40:20:20:e9:6e:4e:5d:db:
c4:d7:f4:92:45:3b:da:a6:d1:ab:77:75:d7:a9:15:b6:dc:39:
ca:fd:7c:b4:87:8d:b8:0b:6d:50:5a:74:52:95:2a:d0:c8:09:
94:e1:f5:d8:a8:15:22:04:13:c7:33:8d:93:12:9b:40:e7:54:
76:7b:78:e0:51:ff:86:00:4c:3a:05:38:bf:10:c0:45:62:9d:
8f:62:52:fd:45:ac:9e:c3:ae:cf:1e:aa:1f:98:68:bb:9c:93:
46:86:01:2f:fb:72:52:50:5e:c0:08:91:fd:a5:a7:c2:f7:62:
10:5b:0d:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYujDnaexZvyXlxTaETMe1oPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA2MDUxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjNlYzVlYWMwZWI3MGY3Yjg2MGM2ZjEzY2I3NWM2MjFiMzE2YzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcBRwWbgDVvkAMl9X70kKfT8k6bG
JUyCIxD3W+vsUC5yn+3JniZkxfiQOngVLpiooZK4DHT57AlKUPa+VHrD1UozdXCx
NbU2wtKoqKEb6KWjqafHQfnfP2X+kIU5jVgNtH5f9wzH1GUsKuNiDxvTEvqlVV93
d6HhjNWGiHh7c1r354NPciLnJVLtpyvj0MPtWsI5zPxleK9LetN5FqxsLj+B7ahR
S9YLtnNFJlIpXxQ3KHTMuQugdIFh30aeWtSoPwZVVMsSQ/7sa2W4pg/1B8n8F5Xa
v0XRWF03LQmH3hAU0qFmwiz9DGin+BF4M+typ6SDIQz0jL++tZcHTFgr1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDs+xerA63D3uGDG8Ty3XGIbMWyNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT3o3RjZzRHJjUGU0WU1ieFBMZGNZaHN4YkkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEYkS4j+ouC9PP1vVYZP
UGs2YerIMK2fMc36YeOlbG5xrmkI87rc47MiLSiWk1UqxXA7HaaUvviIcvuYnuzM
lu3gZ5ewypTHrI8BHga2S2Eh/TmtCql9BaRc3M072MjU4xcTvloFuTnHwEwDf+LG
tF61apZMrPG7g8HM9OLyyR2LlL9WcaiAhetAICDpbk5d28TX9JJFO9qm0at3ddep
FbbcOcr9fLSHjbgLbVBadFKVKtDICZTh9dioFSIEE8czjZMSm0DnVHZ7eOBR/4YA
TDoFOL8QwEVinY9iUv1FrJ7Drs8eqh+YaLuck0aGAS/7clJQXsAIkf2lp8L3YhBb
DeU=
-----END CERTIFICATE-----
Generated at Tue May 13 15:57:01 2025 by rpki-client