Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TDwrtfWqw0BHaz-mixz_jYHj6eA.roa
File: TDwrtfWqw0BHaz-mixz_jYHj6eA.roa (raw, json)
Hash identifier: yx96Z3tMvu+OPp3HAsgv8ggR21Tkr2XmvXR46wW2RNo=
Subject key identifier: 4C:3C:2B:B5:F5:AA:C3:40:47:6B:3F:A6:8B:1C:FF:8D:81:E3:E9:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC150DF4D3F0C3CC6EE6B841F9CD3D993
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TDwrtfWqw0BHaz-mixz_jYHj6eA.roa
Signing time: Sat 23 Sep 2023 09:13:37 +0000
ROA not before: Sat 23 Sep 2023 09:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:50:df:4d:3f:0c:3c:c6:ee:6b:84:1f:9c:d3:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 09:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3c2bb5f5aac340476b3fa68b1cff8d81e3e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:bd:d5:5e:c8:c7:5c:ad:c4:a4:19:15:82:
e7:c9:a5:4c:83:b3:35:20:54:6d:c8:6b:69:0b:23:
f0:89:f4:14:99:c3:bc:ef:d1:f1:e7:c8:17:5a:da:
47:01:08:24:65:81:17:17:ef:c4:27:c3:a6:59:ff:
7e:0b:4d:a8:f6:d8:9e:79:d9:61:21:8a:4c:51:78:
04:19:36:31:43:ae:c0:f6:ea:bb:44:33:1f:70:1d:
03:f7:c3:46:f2:ae:c4:26:08:de:3e:c8:76:3a:a4:
18:fa:a9:8a:10:cd:85:74:10:89:4f:bf:12:cb:90:
ae:83:dc:43:41:8b:86:6a:af:3e:be:63:e7:79:cf:
36:86:0f:5a:06:c9:76:69:d5:2f:73:cc:4b:42:92:
d2:36:27:01:b5:c2:80:19:9f:71:c4:65:a1:22:79:
58:b3:ba:4d:58:0a:12:dc:7f:17:de:00:82:fa:95:
6e:fa:34:b9:59:e0:cf:13:70:32:82:fb:69:39:a7:
8a:6b:b6:72:ad:45:45:e7:c1:a2:89:be:d2:10:c9:
11:b0:d4:cd:fb:14:7d:18:2d:cd:80:9d:5e:a0:9c:
8e:a5:51:9b:b7:87:bc:e5:6a:df:ca:a8:3f:17:b0:
ef:82:b6:2e:5e:60:48:58:e7:17:59:75:3e:ca:a2:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:2B:B5:F5:AA:C3:40:47:6B:3F:A6:8B:1C:FF:8D:81:E3:E9:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TDwrtfWqw0BHaz-mixz_jYHj6eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:d4:c6:52:71:39:6c:f0:28:de:37:4f:91:ff:92:db:bd:95:
7a:24:95:60:d6:5a:8b:4a:c6:5c:ef:03:e9:fa:12:31:5a:57:
a6:97:34:40:51:d1:de:48:55:39:f0:7f:60:6a:53:9c:31:01:
d2:2b:a1:a0:cb:3b:0c:ea:77:79:bc:a3:78:71:ec:c2:87:88:
e8:86:42:0e:56:76:ab:55:e0:7c:1d:6f:a9:06:65:b4:6d:fa:
14:aa:3c:48:1d:3b:74:87:fe:27:82:a4:db:a8:d2:7a:bb:fa:
c7:30:41:70:82:11:7c:87:15:33:2f:cd:2b:ed:de:35:d8:ba:
72:bc:8c:cf:92:72:4b:a3:b1:1e:5f:f8:ee:80:f4:42:bc:6e:
03:a8:e1:6c:39:ca:a2:0d:71:17:58:60:01:86:9c:fb:9d:7c:
36:b2:5e:d2:78:13:c6:f4:73:7a:3b:c2:bc:37:a0:5d:4d:b0:
07:5d:ff:9d:87:68:d0:5a:7a:e7:1e:c5:16:a5:35:7d:5f:87:
21:5a:d1:de:32:e7:56:46:9e:1b:e4:fc:44:d9:c2:02:49:07:
3f:a1:42:94:7b:7b:d1:fc:4a:1f:42:a7:34:82:d6:d4:ed:2c:
ee:db:d0:23:dd:61:eb:47:6e:e5:b4:4e:ed:f0:93:e0:15:c1:
33:fb:1d:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrBUN9NPww8xu5rhB+c09mTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIzMDkxMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzNjMmJiNWY1YWFjMzQwNDc2YjNmYTY4YjFjZmY4ZDgxZTNlOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2G91V7Ix1ytxKQZFYLnyaVMg7M1
IFRtyGtpCyPwifQUmcO879Hx58gXWtpHAQgkZYEXF+/EJ8OmWf9+C02o9tieedlh
IYpMUXgEGTYxQ67A9uq7RDMfcB0D98NG8q7EJgjePsh2OqQY+qmKEM2FdBCJT78S
y5Cug9xDQYuGaq8+vmPnec82hg9aBsl2adUvc8xLQpLSNicBtcKAGZ9xxGWhInlY
s7pNWAoS3H8X3gCC+pVu+jS5WeDPE3AygvtpOaeKa7ZyrUVF58Giib7SEMkRsNTN
+xR9GC3NgJ1eoJyOpVGbt4e85Wrfyqg/F7DvgrYuXmBIWOcXWXU+yqKjRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEw8K7X1qsNAR2s/posc/42B4+ngMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVER3cnRmV3F3MEJIYXotbWl4el9qWUhqNmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAjUxlJxOWzwKN43T5H/
ktu9lXoklWDWWotKxlzvA+n6EjFaV6aXNEBR0d5IVTnwf2BqU5wxAdIroaDLOwzq
d3m8o3hx7MKHiOiGQg5WdqtV4Hwdb6kGZbRt+hSqPEgdO3SH/ieCpNuo0nq7+scw
QXCCEXyHFTMvzSvt3jXYunK8jM+SckujsR5f+O6A9EK8bgOo4Ww5yqINcRdYYAGG
nPudfDayXtJ4E8b0c3o7wrw3oF1NsAdd/52HaNBaeucexRalNX1fhyFa0d4y51ZG
nhvk/ETZwgJJBz+hQpR7e9H8Sh9CpzSC1tTtLO7b0CPdYetHbuW0Tu3wk+AVwTP7
HUg=
-----END CERTIFICATE-----
Generated at Sun May 11 22:12:47 2025 by rpki-client