Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YQW9qbXfpVSfrP3Ok6oN-XIHKO8.roa
File: YQW9qbXfpVSfrP3Ok6oN-XIHKO8.roa (raw, json)
Hash identifier: 5YrpQVwevWTRpbOZxrPdg7Uu3zYomCJuNDwK3rByPeU=
Subject key identifier: 61:05:BD:A9:B5:DF:A5:54:9F:AC:FD:CE:93:AA:0D:F9:72:07:28:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0C9E2B563A415325A8CB9D6F94260389
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YQW9qbXfpVSfrP3Ok6oN-XIHKO8.roa
Signing time: Sun 26 Nov 2023 17:12:21 +0000
ROA not before: Sun 26 Nov 2023 17:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:9e:2b:56:3a:41:53:25:a8:cb:9d:6f:94:26:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 17:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6105bda9b5dfa5549facfdce93aa0df9720728ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:5c:dd:6c:cf:3d:55:ed:77:e2:49:3f:15:
3a:2a:91:71:c0:98:ff:fb:e7:2f:a5:9b:3d:2b:a2:
df:d8:d3:20:09:5c:38:c3:a7:7b:e6:60:47:5d:54:
58:c9:ef:31:0d:a9:6a:d7:80:51:c2:4e:b7:71:ae:
ad:5b:40:5e:f4:6f:89:6a:88:7d:17:65:31:93:92:
54:43:62:7f:6e:44:9a:fd:08:b8:f7:d4:cf:18:21:
9c:e4:10:8a:a0:3f:f3:a3:ae:47:a7:22:57:6c:81:
16:27:19:bb:b0:0b:4b:86:fc:6d:8c:99:0f:fa:60:
06:b2:63:34:36:13:c1:64:7c:d9:ff:f9:59:9f:9e:
62:9a:a3:ee:1e:c3:c3:43:9f:88:e7:d8:d6:50:bb:
11:1e:2a:e2:a7:de:58:00:dd:cc:47:9b:56:f5:c0:
40:bc:bb:60:e7:27:dc:7b:d8:a3:a0:03:f1:82:c7:
d0:1b:3f:b2:3c:23:65:c0:23:3c:13:56:e8:dc:75:
2b:75:a9:05:39:dc:44:d3:1f:35:df:df:ff:c8:66:
1d:42:bf:92:df:27:af:04:c5:8d:c7:53:51:44:1c:
19:cc:b1:20:62:19:b1:ab:93:b5:e7:df:e5:6d:48:
ae:32:d7:71:a0:e6:10:38:d0:c6:68:00:9d:76:48:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:BD:A9:B5:DF:A5:54:9F:AC:FD:CE:93:AA:0D:F9:72:07:28:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YQW9qbXfpVSfrP3Ok6oN-XIHKO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:d8:19:cb:c6:82:0f:49:ac:6a:44:6c:ee:19:e2:5a:49:4e:
62:71:a2:2d:d5:f3:0f:1f:6d:fb:c9:08:27:cf:6a:04:fe:b6:
64:59:69:3b:1c:09:6a:d1:4f:43:2d:f8:4a:96:81:2c:dc:c8:
26:4c:86:fc:b5:b5:5a:03:36:20:f2:7d:1a:fa:88:3b:2e:51:
df:f8:ad:15:29:e1:ed:27:07:13:98:11:38:2a:76:55:36:96:
bf:1b:9e:f5:13:7e:67:c1:89:41:1a:fa:29:fe:fc:96:5b:8f:
bd:fd:0d:14:ea:88:a5:ac:ed:3f:16:6f:39:60:d7:13:bf:69:
2a:1c:b8:d0:47:fe:19:68:de:8b:fb:a7:e0:10:87:fa:2d:6e:
4a:e6:06:aa:db:5d:71:53:80:c6:5f:c0:7b:2d:b3:d9:5f:8e:
9c:14:fb:70:13:30:8a:d4:53:b7:0f:bd:e7:2b:4f:9b:eb:cb:
90:b5:11:af:da:c0:ce:44:e4:c4:58:ae:a8:be:fd:83:f4:09:
ce:f7:fd:84:3d:d9:3d:33:14:ce:f1:2d:f7:d7:01:ce:4b:69:
8e:58:e9:1a:c0:8d:94:e1:d1:5d:0c:64:38:f8:a4:26:5f:63:
07:4f:4c:d3:e2:ac:09:2a:58:b7:5d:70:61:fa:ad:69:16:c5:
d1:fd:d7:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwMnitWOkFTJajLnW+UJgOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI2MTcxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTA1YmRhOWI1ZGZhNTU0OWZhY2ZkY2U5M2FhMGRmOTcyMDcyOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv5c3WzPPVXtd+JJPxU6KpFxwJj/
++cvpZs9K6Lf2NMgCVw4w6d75mBHXVRYye8xDalq14BRwk63ca6tW0Be9G+Jaoh9
F2Uxk5JUQ2J/bkSa/Qi499TPGCGc5BCKoD/zo65HpyJXbIEWJxm7sAtLhvxtjJkP
+mAGsmM0NhPBZHzZ//lZn55imqPuHsPDQ5+I59jWULsRHirip95YAN3MR5tW9cBA
vLtg5yfce9ijoAPxgsfQGz+yPCNlwCM8E1bo3HUrdakFOdxE0x8139//yGYdQr+S
3yevBMWNx1NRRBwZzLEgYhmxq5O159/lbUiuMtdxoOYQONDGaACddkgXlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGEFvam136VUn6z9zpOqDflyByjvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWVFXOXFiWGZwVlNmclAzT2s2b04tWElIS084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALTYGcvGgg9JrGpEbO4Z
4lpJTmJxoi3V8w8fbfvJCCfPagT+tmRZaTscCWrRT0Mt+EqWgSzcyCZMhvy1tVoD
NiDyfRr6iDsuUd/4rRUp4e0nBxOYETgqdlU2lr8bnvUTfmfBiUEa+in+/JZbj739
DRTqiKWs7T8Wbzlg1xO/aSocuNBH/hlo3ov7p+AQh/otbkrmBqrbXXFTgMZfwHst
s9lfjpwU+3ATMIrUU7cPvecrT5vry5C1Ea/awM5E5MRYrqi+/YP0Cc73/YQ92T0z
FM7xLffXAc5LaY5Y6RrAjZTh0V0MZDj4pCZfYwdPTNPirAkqWLddcGH6rWkWxdH9
18M=
-----END CERTIFICATE-----
Generated at Wed May 14 23:13:51 2025 by rpki-client