Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S7z6pYpaEOaohDAFTA7dMYQRCDM.roa
File: S7z6pYpaEOaohDAFTA7dMYQRCDM.roa (raw, json)
Hash identifier: WT+VkT2z7J9Hqnj8DqnItho5HefvqDFddTmKPTZX5Jc=
Subject key identifier: 4B:BC:FA:A5:8A:5A:10:E6:A8:84:30:05:4C:0E:DD:31:84:11:08:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFB6C5045AD6B3ECE8B2ECD40ECF144A3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S7z6pYpaEOaohDAFTA7dMYQRCDM.roa
Signing time: Thu 23 Nov 2023 09:04:21 +0000
ROA not before: Thu 23 Nov 2023 09:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:fb6c:2a3b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:6c:50:45:ad:6b:3e:ce:8b:2e:cd:40:ec:f1:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 09:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbcfaa58a5a10e6a88430054c0edd3184110833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:6d:f7:a9:83:8c:61:0e:15:60:d3:b0:cc:
dc:ac:1c:8f:c1:2d:24:5a:76:24:98:2f:45:7a:24:
a2:d3:6a:95:dd:2a:0a:d0:30:ed:b6:49:55:94:35:
34:e6:88:93:56:06:9b:83:6a:7c:a4:2c:96:d2:12:
41:05:96:02:93:56:9d:97:36:4a:a3:42:8f:81:3d:
a2:a3:86:a3:82:43:50:67:f5:8d:ca:42:9d:57:99:
04:c5:f8:69:12:36:bc:47:46:f8:89:df:0e:a5:e0:
49:e3:25:ad:ff:54:aa:6c:fd:ec:2b:da:81:91:b3:
6d:5f:2c:6b:72:3d:ea:8d:84:6f:f1:71:f8:cc:ad:
e5:4c:64:aa:c2:89:4a:23:80:35:61:84:b3:68:df:
96:d9:81:71:3e:16:23:d4:57:85:73:a5:10:d6:1a:
02:64:2a:91:3b:06:97:dd:01:69:b5:43:10:d6:a9:
a8:eb:62:66:d1:f6:5b:ba:e5:2d:46:fb:73:1d:13:
ba:57:37:ec:29:71:be:ca:b1:97:1a:95:84:40:da:
50:35:4d:44:44:39:a0:ab:7f:95:6f:de:95:68:68:
79:64:7a:3d:dd:37:a2:f7:2e:be:e2:06:aa:2f:63:
5e:77:a1:4f:9a:cc:76:37:50:00:ed:88:97:df:b7:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:FA:A5:8A:5A:10:E6:A8:84:30:05:4C:0E:DD:31:84:11:08:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S7z6pYpaEOaohDAFTA7dMYQRCDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fd:44:84:43:fa:28:2a:01:4c:2e:6a:e3:b9:f7:34:bd:9b:
bc:c3:04:c6:37:96:15:51:e3:9e:e7:58:48:04:c4:cf:62:5f:
a6:72:c2:1b:f4:32:0d:90:30:eb:25:71:a8:1e:0d:e0:73:b7:
b5:a6:41:9f:58:5c:55:7e:84:c3:6c:62:79:6f:b3:4b:fe:45:
98:55:80:c3:50:d6:17:da:d3:1b:0e:74:3f:1c:15:25:83:d0:
93:74:37:50:7d:b8:f8:b4:5f:d0:32:c3:ab:5a:98:48:93:83:
38:ad:a9:ed:7a:7e:f6:cb:f3:e5:b6:87:7e:36:44:36:4e:91:
e6:59:c2:a0:0e:53:81:d0:b7:98:98:9d:27:50:7c:e1:38:2f:
d1:ab:97:0c:4e:38:f9:45:bb:5b:9e:28:40:75:01:32:5a:24:
0c:78:fb:00:29:61:95:20:22:74:4d:c9:f9:e6:ff:fb:51:b7:
f0:13:df:75:c9:1f:7f:8c:21:7a:d0:63:5a:71:ef:84:2e:60:
0d:16:97:51:b1:d3:ba:2c:0b:4f:e7:9c:8f:e8:8d:fa:08:09:
d7:51:84:6a:cb:95:80:84:04:be:b4:37:61:d0:40:17:38:08:
2d:9d:b2:ef:86:f5:00:7b:c9:91:93:57:79:e9:2b:e6:39:62:
8f:6b:a0:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv7bFBFrWs+zosuzUDs8USjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIzMDkwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmJjZmFhNThhNWExMGU2YTg4NDMwMDU0YzBlZGQzMTg0MTEwODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvdt96mDjGEOFWDTsMzcrByPwS0k
WnYkmC9FeiSi02qV3SoK0DDttklVlDU05oiTVgabg2p8pCyW0hJBBZYCk1adlzZK
o0KPgT2io4ajgkNQZ/WNykKdV5kExfhpEja8R0b4id8OpeBJ4yWt/1SqbP3sK9qB
kbNtXyxrcj3qjYRv8XH4zK3lTGSqwolKI4A1YYSzaN+W2YFxPhYj1FeFc6UQ1hoC
ZCqROwaX3QFptUMQ1qmo62Jm0fZbuuUtRvtzHRO6VzfsKXG+yrGXGpWEQNpQNU1E
RDmgq3+Vb96VaGh5ZHo93Tei9y6+4gaqL2Ned6FPmsx2N1AA7YiX37f/gwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEu8+qWKWhDmqIQwBUwO3TGEEQgzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUzd6NnBZcGFFT2FvaERBRlRBN2RNWVFSQ0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKD9RIRD+igqAUwuauO5
9zS9m7zDBMY3lhVR457nWEgExM9iX6Zywhv0Mg2QMOslcageDeBzt7WmQZ9YXFV+
hMNsYnlvs0v+RZhVgMNQ1hfa0xsOdD8cFSWD0JN0N1B9uPi0X9Ayw6tamEiTgzit
qe16fvbL8+W2h342RDZOkeZZwqAOU4HQt5iYnSdQfOE4L9GrlwxOOPlFu1ueKEB1
ATJaJAx4+wApYZUgInRNyfnm//tRt/AT33XJH3+MIXrQY1px74QuYA0Wl1Gx07os
C0/nnI/ojfoICddRhGrLlYCEBL60N2HQQBc4CC2dsu+G9QB7yZGTV3npK+Y5Yo9r
oB4=
-----END CERTIFICATE-----
Generated at Sun May 11 00:14:24 2025 by rpki-client