Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y4rPxET6kcrmr-MwIJu0IhdFKEk.roa
File: Y4rPxET6kcrmr-MwIJu0IhdFKEk.roa (raw, json)
Hash identifier: 9gEMGKlrr8YXe47Z7cJw+T58bTQPl2jpEnztLYOc0OY=
Subject key identifier: 63:8A:CF:C4:44:FA:91:CA:E6:AF:E3:30:20:9B:B4:22:17:45:28:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABB1A996D9103ECB553220A7ADA879136
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y4rPxET6kcrmr-MwIJu0IhdFKEk.roa
Signing time: Fri 22 Sep 2023 04:16:37 +0000
ROA not before: Fri 22 Sep 2023 04:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:1a:99:6d:91:03:ec:b5:53:22:0a:7a:da:87:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 04:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=638acfc444fa91cae6afe330209bb42217452849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:bd:5c:0c:06:ae:cb:ac:5e:f7:d0:71:11:
1d:c2:35:70:a1:15:66:76:3e:df:a1:44:d2:67:c3:
89:5f:1b:18:4e:33:81:78:f9:ad:7c:03:c3:91:e5:
6d:7c:8a:a2:52:82:0e:0b:f8:7d:45:f5:2a:59:96:
64:5c:e7:65:91:42:40:58:42:0f:45:4d:a9:b8:20:
94:bb:58:7c:31:e4:3f:0b:f1:1d:39:ac:e1:f0:6e:
a3:d0:88:79:6d:70:a4:63:ff:01:e8:f6:9f:fa:88:
82:27:c0:6a:5a:41:69:de:23:aa:db:a4:00:40:ec:
7a:ad:a7:6d:a4:80:48:7d:ae:6d:9f:ef:66:0d:83:
f4:f8:d2:3c:24:4c:c3:e4:5a:8c:1f:f0:79:c5:25:
07:30:cd:11:85:3c:90:22:34:e0:5f:37:65:0e:8a:
d6:ed:9b:fa:b5:83:91:07:ee:c4:13:42:f1:2f:94:
d3:b0:d8:9a:57:22:ab:98:19:aa:c8:d3:c3:27:33:
4a:0e:54:9d:49:78:11:42:30:ee:fe:92:4d:43:17:
70:7f:7c:be:5e:83:ef:83:ba:1a:cf:6b:28:35:d6:
22:3c:c7:2f:3e:bf:8e:1b:03:1a:d8:3a:ee:bc:7e:
f8:a1:56:11:87:96:f2:82:0e:f8:03:97:c9:ff:fa:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:CF:C4:44:FA:91:CA:E6:AF:E3:30:20:9B:B4:22:17:45:28:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y4rPxET6kcrmr-MwIJu0IhdFKEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:c2:be:cd:b8:e9:5a:79:28:d2:84:ca:c1:77:3c:29:a1:27:
62:d8:c0:fb:1f:e6:d0:a7:2f:3e:ca:69:d9:a4:ed:53:c4:78:
6d:fc:1a:d8:2f:73:c7:05:33:13:9d:bc:01:cc:3a:76:66:68:
bd:10:c7:18:f2:31:4c:99:e1:ba:26:b8:b2:fc:3c:27:6e:33:
3f:19:e2:bd:05:9c:fe:9f:d6:72:6e:f3:00:ed:ad:b9:c0:de:
0b:55:a2:72:d6:e4:bf:ea:e0:fa:91:ae:7a:0e:3d:62:25:a5:
20:14:ee:76:e3:47:f1:0f:1c:cc:33:f9:02:9a:eb:d2:91:73:
8d:08:45:6d:67:f0:c3:91:09:fb:93:3a:dc:8d:0a:cb:92:d4:
eb:e1:c3:1d:fc:d0:3e:c4:64:c5:80:bf:84:3b:08:20:29:3c:
4b:02:37:f5:1c:be:3c:85:b2:95:66:2a:06:d0:fe:2c:9e:ee:
4f:1a:f7:8d:fb:8f:ef:2b:5d:8a:54:4b:82:e5:b9:7d:64:60:
0a:26:b8:44:74:9a:e5:79:1b:ff:db:47:d7:fb:9c:8e:52:49:
c1:b6:25:36:db:45:2d:3f:af:b2:9f:13:ff:61:78:d1:45:c0:
a3:30:70:3e:72:45:61:b4:54:3d:64:c4:1e:67:56:e8:ff:32:
0f:e6:68:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq7GpltkQPstVMiCnrah5E2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIyMDQxNjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzhhY2ZjNDQ0ZmE5MWNhZTZhZmUzMzAyMDliYjQyMjE3NDUyODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgli9XAwGrsusXvfQcREdwjVwoRVm
dj7foUTSZ8OJXxsYTjOBePmtfAPDkeVtfIqiUoIOC/h9RfUqWZZkXOdlkUJAWEIP
RU2puCCUu1h8MeQ/C/EdOazh8G6j0Ih5bXCkY/8B6Paf+oiCJ8BqWkFp3iOq26QA
QOx6radtpIBIfa5tn+9mDYP0+NI8JEzD5FqMH/B5xSUHMM0RhTyQIjTgXzdlDorW
7Zv6tYORB+7EE0LxL5TTsNiaVyKrmBmqyNPDJzNKDlSdSXgRQjDu/pJNQxdwf3y+
XoPvg7oaz2soNdYiPMcvPr+OGwMa2DruvH74oVYRh5bygg74A5fJ//rRowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGOKz8RE+pHK5q/jMCCbtCIXRShJMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWTRyUHhFVDZrY3Jtci1Nd0lKdTBJaGRGS0VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFbCvs246Vp5KNKEysF3
PCmhJ2LYwPsf5tCnLz7Kadmk7VPEeG38Gtgvc8cFMxOdvAHMOnZmaL0QxxjyMUyZ
4bomuLL8PCduMz8Z4r0FnP6f1nJu8wDtrbnA3gtVonLW5L/q4PqRrnoOPWIlpSAU
7nbjR/EPHMwz+QKa69KRc40IRW1n8MORCfuTOtyNCsuS1Ovhwx380D7EZMWAv4Q7
CCApPEsCN/UcvjyFspVmKgbQ/iye7k8a9437j+8rXYpUS4LluX1kYAomuER0muV5
G//bR9f7nI5SScG2JTbbRS0/r7KfE/9heNFFwKMwcD5yRWG0VD1kxB5nVuj/Mg/m
aN8=
-----END CERTIFICATE-----
Generated at Thu May 15 06:56:20 2025 by rpki-client