Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V8BONIylqq8F5lAc5QT3DzUH_cc.roa
File: V8BONIylqq8F5lAc5QT3DzUH_cc.roa (raw, json)
Hash identifier: eY4NCR6Q/Mkm5f8GJg1MTvumEFADWns6AOim2ScXE3Y=
Subject key identifier: 57:C0:4E:34:8C:A5:AA:AF:05:E6:50:1C:E5:04:F7:0F:35:07:FD:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C569E8D7FFBFB8C6A2AA6E7F25E0349BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V8BONIylqq8F5lAc5QT3DzUH_cc.roa
Signing time: Mon 11 Dec 2023 02:04:40 +0000
ROA not before: Mon 11 Dec 2023 02:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:569e:29d6/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:56:9e:8d:7f:fb:fb:8c:6a:2a:a6:e7:f2:5e:03:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 02:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57c04e348ca5aaaf05e6501ce504f70f3507fdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:82:32:77:3c:1a:d1:37:93:25:bb:ed:9b:
30:1b:92:35:40:05:fd:53:c5:ef:8f:c8:da:a4:1d:
84:6f:75:71:a9:78:3d:1e:73:52:82:bc:c2:bf:b7:
88:51:2d:3a:0f:f2:a1:67:a4:12:c1:4e:ce:c6:4e:
10:f6:f0:fd:ba:4c:2d:1b:20:0c:15:03:48:05:b2:
4a:f7:90:c1:18:03:e3:33:81:b9:d3:68:fc:7e:4c:
ed:b1:a1:fa:7e:41:b5:54:e6:e5:68:86:9d:21:1f:
7a:bb:4b:45:2c:66:5d:2f:a8:c8:a2:ab:49:4b:0d:
16:23:04:46:55:ad:4a:f0:0d:28:fb:24:a0:d6:d8:
32:f0:60:64:55:fc:51:a0:46:d3:b2:eb:9d:37:3d:
7d:39:c1:9e:24:24:b0:b8:34:40:c8:91:ef:1f:32:
3c:99:f1:07:db:b1:45:6b:13:2a:92:a4:f2:62:13:
bf:4a:cb:89:95:12:e4:88:42:77:56:8b:3b:a9:00:
dd:d2:d7:ac:25:6f:09:e3:b5:32:3a:b6:49:fe:2b:
f1:c3:fe:1a:ef:c8:74:d2:26:37:0d:f3:b1:92:90:
c2:9c:4d:7f:4e:e8:b0:9b:71:74:32:49:47:02:4e:
3b:a2:10:dd:69:1a:8f:b6:88:1b:5e:82:14:9e:ba:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:4E:34:8C:A5:AA:AF:05:E6:50:1C:E5:04:F7:0F:35:07:FD:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V8BONIylqq8F5lAc5QT3DzUH_cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:dc:9e:5d:32:d5:96:f2:63:9b:12:1d:8e:17:c9:ac:9b:c3:
4c:b9:2f:5d:dc:79:cc:8b:b8:f0:f7:5d:17:11:11:9c:df:69:
e3:09:f3:46:58:34:ef:5a:bc:f2:e3:28:7a:e8:6c:1d:f8:48:
fa:54:0e:bd:f9:fb:87:cc:ec:14:93:9e:8d:92:9c:4b:1a:06:
80:3b:02:1e:49:87:20:0a:b7:ad:27:13:22:ad:6c:62:cb:5b:
4b:69:d2:e2:5f:5a:36:45:5c:35:3d:e9:47:34:bb:69:95:6e:
f5:d5:78:c0:10:46:85:86:5f:3a:9c:bf:01:22:ba:17:58:88:
62:c4:22:4f:e8:2f:05:da:cd:c5:42:85:3c:76:17:5c:29:92:
af:b6:79:c6:ab:a4:7f:69:51:9a:d9:aa:fe:e1:87:6c:82:18:
c8:be:d7:c7:a8:5a:35:23:8c:b4:42:7c:71:42:19:ef:f0:78:
0b:78:ec:f6:9e:14:b2:cc:05:4c:11:29:a8:03:ac:e5:04:4a:
02:34:e0:a6:57:75:13:4f:d3:d1:be:fe:5a:10:eb:72:cd:b5:
88:c8:70:f4:2b:3e:a8:7f:9c:b7:e7:cd:42:44:cd:a1:37:67:
f2:19:c2:34:92:21:29:09:64:0b:7e:eb:80:9a:08:a9:4f:d4:
6e:cb:b9:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxWno1/+/uMaiqm5/JeA0m8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMDIwNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2MwNGUzNDhjYTVhYWFmMDVlNjUwMWNlNTA0ZjcwZjM1MDdmZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO6CMnc8GtE3kyW77ZswG5I1QAX9
U8Xvj8japB2Eb3VxqXg9HnNSgrzCv7eIUS06D/KhZ6QSwU7Oxk4Q9vD9ukwtGyAM
FQNIBbJK95DBGAPjM4G502j8fkztsaH6fkG1VOblaIadIR96u0tFLGZdL6jIoqtJ
Sw0WIwRGVa1K8A0o+ySg1tgy8GBkVfxRoEbTsuudNz19OcGeJCSwuDRAyJHvHzI8
mfEH27FFaxMqkqTyYhO/SsuJlRLkiEJ3Vos7qQDd0tesJW8J47UyOrZJ/ivxw/4a
78h00iY3DfOxkpDCnE1/Tuiwm3F0MklHAk47ohDdaRqPtogbXoIUnrp+kQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFfATjSMpaqvBeZQHOUE9w81B/3HMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVjhCT05JeWxxcThGNWxBYzVRVDNEelVIX2NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFPcnl0y1ZbyY5sSHY4X
yaybw0y5L13cecyLuPD3XRcREZzfaeMJ80ZYNO9avPLjKHrobB34SPpUDr35+4fM
7BSTno2SnEsaBoA7Ah5JhyAKt60nEyKtbGLLW0tp0uJfWjZFXDU96Uc0u2mVbvXV
eMAQRoWGXzqcvwEiuhdYiGLEIk/oLwXazcVChTx2F1wpkq+2ecarpH9pUZrZqv7h
h2yCGMi+18eoWjUjjLRCfHFCGe/weAt47PaeFLLMBUwRKagDrOUESgI04KZXdRNP
09G+/loQ63LNtYjIcPQrPqh/nLfnzUJEzaE3Z/IZwjSSISkJZAt+64CaCKlP1G7L
ufM=
-----END CERTIFICATE-----
Generated at Sun May 11 01:30:27 2025 by rpki-client