Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XpF7QQBm0Yh7EErSGt3AiHs5vW0.roa
File: XpF7QQBm0Yh7EErSGt3AiHs5vW0.roa (raw, json)
Hash identifier: VL8zmzSP47ErG1knrTEg+G08zGFm5PWmecv2uJ2ntP0=
Subject key identifier: 5E:91:7B:41:00:66:D1:88:7B:10:4A:D2:1A:DD:C0:88:7B:39:BD:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1EA86A9FBD48CF79A25796629FED4197
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XpF7QQBm0Yh7EErSGt3AiHs5vW0.roa
Signing time: Wed 11 Oct 2023 12:13:55 +0000
ROA not before: Wed 11 Oct 2023 12:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:a8:6a:9f:bd:48:cf:79:a2:57:96:62:9f:ed:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 12:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e917b410066d1887b104ad21addc0887b39bd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:2f:8d:e5:3d:b1:83:47:ce:ca:fb:2d:33:
fb:21:c7:12:37:36:99:c1:bd:de:7a:5b:89:3c:fd:
d6:12:8a:64:cf:5d:4b:89:61:ca:ac:a1:ae:95:b7:
dd:59:fd:c3:50:d6:01:73:ff:5c:1c:5a:6f:71:7d:
85:50:73:12:4b:60:3c:c2:14:13:7f:10:72:c4:2a:
af:88:d5:3d:c5:8e:bd:44:c5:30:32:0b:7a:47:33:
b5:61:b3:7b:a4:b6:64:71:40:2d:2d:a4:3c:1a:da:
82:72:81:53:bf:69:ca:7a:3a:29:4d:cd:61:47:f2:
87:df:33:04:84:c8:01:cc:ef:60:37:a2:fc:c8:bc:
17:7d:62:71:49:0b:07:ec:f5:bb:ba:ea:cd:63:81:
28:2c:84:4f:45:75:36:f1:9a:7c:99:27:3f:c7:2b:
94:d6:a2:0a:04:cb:cb:e9:e3:e2:61:b6:3b:f4:de:
ca:75:a1:ea:44:bf:5a:fd:dd:fc:89:49:f3:ad:40:
00:cd:d5:c4:bf:7a:50:b9:03:3b:d3:07:9b:7e:d8:
6c:db:38:ec:80:a0:1d:c6:91:2d:aa:49:a3:4c:c5:
24:b0:0f:ce:7a:1f:76:bd:b0:9f:33:27:b9:b0:2c:
45:e2:54:ef:64:fb:e8:db:fe:8b:c0:3d:06:08:a4:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:7B:41:00:66:D1:88:7B:10:4A:D2:1A:DD:C0:88:7B:39:BD:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XpF7QQBm0Yh7EErSGt3AiHs5vW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:cd:0d:39:50:6d:64:b4:91:84:38:10:88:17:87:fb:13:45:
ca:1c:51:0c:8d:39:a3:05:ee:69:36:f4:07:e1:0e:01:9a:82:
56:76:c3:3e:d4:d8:27:de:01:ce:06:d6:c4:2e:8e:00:f3:9a:
82:b6:ff:35:c8:6e:17:5a:ef:61:fd:68:b8:95:7b:19:27:73:
d5:94:b8:30:90:32:cd:5c:87:9f:4a:f8:1c:84:1c:df:08:d1:
88:ba:6f:17:48:79:65:7f:f0:c4:bf:53:26:27:08:ba:be:f2:
aa:46:d6:c6:11:23:85:24:04:2e:7f:33:83:eb:4f:ff:b5:45:
6f:fe:58:5e:55:77:de:a4:59:32:6d:94:e1:02:79:77:58:72:
dc:19:0a:60:8f:db:c5:00:e9:a4:5c:13:78:b7:bf:cd:68:e7:
c0:f4:04:2c:58:a0:75:1b:91:a0:0a:09:9e:94:4d:50:6e:52:
96:91:43:32:10:a9:41:6d:b2:81:fb:9d:58:01:7f:37:ef:61:
0d:8c:7f:c8:30:65:d5:fe:87:70:18:27:06:e8:dc:79:0c:17:
67:ef:5a:17:f9:25:ab:cd:a5:5d:d8:07:cc:24:c1:d2:ce:1f:
42:bf:47:45:82:8d:e2:75:96:e8:1d:1f:c6:1f:96:d7:f3:6c:
a8:77:29:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYseqGqfvUjPeaJXlmKf7UGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMTIxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTkxN2I0MTAwNjZkMTg4N2IxMDRhZDIxYWRkYzA4ODdiMzliZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidUvjeU9sYNHzsr7LTP7IccSNzaZ
wb3eeluJPP3WEopkz11LiWHKrKGulbfdWf3DUNYBc/9cHFpvcX2FUHMSS2A8whQT
fxByxCqviNU9xY69RMUwMgt6RzO1YbN7pLZkcUAtLaQ8GtqCcoFTv2nKejopTc1h
R/KH3zMEhMgBzO9gN6L8yLwXfWJxSQsH7PW7uurNY4EoLIRPRXU28Zp8mSc/xyuU
1qIKBMvL6ePiYbY79N7KdaHqRL9a/d38iUnzrUAAzdXEv3pQuQM70webfths2zjs
gKAdxpEtqkmjTMUksA/Oeh92vbCfMye5sCxF4lTvZPvo2/6LwD0GCKR37wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF6Re0EAZtGIexBK0hrdwIh7Ob1tMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWHBGN1FRQm0wWWg3RUVyU0d0M0FpSHM1dlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADrNDTlQbWS0kYQ4EIgX
h/sTRcocUQyNOaMF7mk29AfhDgGaglZ2wz7U2CfeAc4G1sQujgDzmoK2/zXIbhda
72H9aLiVexknc9WUuDCQMs1ch59K+ByEHN8I0Yi6bxdIeWV/8MS/UyYnCLq+8qpG
1sYRI4UkBC5/M4PrT/+1RW/+WF5Vd96kWTJtlOECeXdYctwZCmCP28UA6aRcE3i3
v81o58D0BCxYoHUbkaAKCZ6UTVBuUpaRQzIQqUFtsoH7nVgBfzfvYQ2Mf8gwZdX+
h3AYJwbo3HkMF2fvWhf5JavNpV3YB8wkwdLOH0K/R0WCjeJ1lugdH8YfltfzbKh3
KSg=
-----END CERTIFICATE-----
Generated at Mon May 12 16:53:04 2025 by rpki-client