Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XgK1be6ZESex9uBFnyS_qnTMxWw.roa
File: XgK1be6ZESex9uBFnyS_qnTMxWw.roa (raw, json)
Hash identifier: rFymeCquLvq9KP5j9CoNU+UiztuHHOQ11qkP73pYVhQ=
Subject key identifier: 5E:02:B5:6D:EE:99:11:27:B1:F6:E0:45:9F:24:BF:AA:74:CC:C5:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B31F75974C696300A5CA79D0D531A6C8B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XgK1be6ZESex9uBFnyS_qnTMxWw.roa
Signing time: Sun 15 Oct 2023 06:12:55 +0000
ROA not before: Sun 15 Oct 2023 06:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:f7:59:74:c6:96:30:0a:5c:a7:9d:0d:53:1a:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 06:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e02b56dee991127b1f6e0459f24bfaa74ccc56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:7a:c3:7d:8e:18:45:44:6a:bf:00:b9:8a:
9f:2f:be:d3:3e:7d:ba:83:ae:05:2c:90:66:e8:3f:
8e:f1:ba:2d:e7:b4:bc:a7:6e:a7:31:4c:07:6c:2c:
0b:e6:b4:d2:bf:f2:6d:38:f4:c1:8b:38:80:c1:42:
f7:02:a7:44:52:29:bb:a5:67:ba:fc:d4:e1:da:21:
88:69:d7:26:13:6d:90:35:33:03:90:f0:68:7e:30:
07:69:fc:1e:8d:80:ec:bc:80:b2:8d:33:91:2c:41:
94:5e:87:84:49:1d:f2:b7:99:31:3b:16:15:b6:93:
36:2f:40:a6:5e:69:96:b6:a6:5d:0f:22:b2:47:21:
00:73:e5:a4:39:fe:2b:2c:9a:84:11:94:fd:c3:ae:
3d:1c:1d:e1:db:e4:dd:c2:ec:72:8f:77:eb:7e:54:
45:d9:1d:90:70:94:94:d2:24:8f:58:80:8b:a3:7f:
4d:55:c3:08:bf:d3:de:45:48:ed:4c:d1:64:41:14:
db:7d:d2:e0:5f:06:4e:7f:0d:ce:2d:e1:c7:de:2f:
c5:1d:8f:90:8a:e7:31:e5:f6:bd:1b:8d:00:9b:81:
b6:4a:1b:3b:e8:5d:14:b8:6b:d4:b9:f4:ac:63:c6:
d1:ec:19:0b:1f:f0:f6:f7:d3:77:db:83:2e:d0:94:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:B5:6D:EE:99:11:27:B1:F6:E0:45:9F:24:BF:AA:74:CC:C5:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XgK1be6ZESex9uBFnyS_qnTMxWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:8f:eb:1a:53:34:32:36:50:49:f2:97:73:87:4f:6b:fa:20:
f8:b9:94:4e:e6:4e:ba:92:02:42:9e:33:ad:00:65:6b:1b:e8:
6e:97:01:91:16:45:ed:50:54:be:6d:2f:38:df:ff:61:26:82:
2f:9a:f7:4b:38:95:60:6c:3c:dd:29:10:ac:31:90:fe:45:45:
f4:7d:73:ed:45:c8:22:cd:96:19:cf:ac:c5:af:a2:36:0d:80:
25:2f:40:06:5d:7a:5e:8c:ad:72:9c:52:ff:7a:65:f3:45:05:
86:4a:2e:45:03:05:61:49:70:78:47:de:0d:6b:ee:70:f5:1c:
8f:1a:f2:c9:f1:e9:3b:7a:ea:ff:a3:32:29:97:43:91:dd:94:
41:12:40:ba:da:fd:b0:b6:e5:48:8f:ca:9f:48:7d:0f:f1:0a:
91:df:c2:a2:08:92:b7:51:ed:32:95:00:48:21:10:eb:50:b4:
48:4b:cd:1f:fb:c7:de:42:88:e6:bc:3d:1b:cf:15:70:77:7c:
52:59:9d:82:e4:55:3d:ec:48:f1:17:de:1d:55:af:4d:28:5b:
21:68:ff:09:0e:36:81:68:07:f3:eb:34:73:dc:0d:cc:3f:de:
cf:0f:c5:b9:91:58:d0:c8:f4:12:b1:7f:dc:c1:97:88:3a:61:
58:d1:cc:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsx91l0xpYwClynnQ1TGmyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE1MDYxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTAyYjU2ZGVlOTkxMTI3YjFmNmUwNDU5ZjI0YmZhYTc0Y2NjNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWh6w32OGEVEar8AuYqfL77TPn26
g64FLJBm6D+O8bot57S8p26nMUwHbCwL5rTSv/JtOPTBiziAwUL3AqdEUim7pWe6
/NTh2iGIadcmE22QNTMDkPBofjAHafwejYDsvICyjTORLEGUXoeESR3yt5kxOxYV
tpM2L0CmXmmWtqZdDyKyRyEAc+WkOf4rLJqEEZT9w649HB3h2+Tdwuxyj3frflRF
2R2QcJSU0iSPWICLo39NVcMIv9PeRUjtTNFkQRTbfdLgXwZOfw3OLeHH3i/FHY+Q
iucx5fa9G40Am4G2Shs76F0UuGvUufSsY8bR7BkLH/D299N324Mu0JSvGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF4CtW3umREnsfbgRZ8kv6p0zMVsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWGdLMWJlNlpFU2V4OXVCRm55U19xblRNeFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABeP6xpTNDI2UEnyl3OH
T2v6IPi5lE7mTrqSAkKeM60AZWsb6G6XAZEWRe1QVL5tLzjf/2Emgi+a90s4lWBs
PN0pEKwxkP5FRfR9c+1FyCLNlhnPrMWvojYNgCUvQAZdel6MrXKcUv96ZfNFBYZK
LkUDBWFJcHhH3g1r7nD1HI8a8snx6Tt66v+jMimXQ5HdlEESQLra/bC25UiPyp9I
fQ/xCpHfwqIIkrdR7TKVAEghEOtQtEhLzR/7x95CiOa8PRvPFXB3fFJZnYLkVT3s
SPEX3h1Vr00oWyFo/wkONoFoB/PrNHPcDcw/3s8PxbmRWNDI9BKxf9zBl4g6YVjR
zLQ=
-----END CERTIFICATE-----
Generated at Sun May 11 17:03:07 2025 by rpki-client