Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_qlOv0C7pdUZIrNfbe2e03z2Jq8.roa
File: _qlOv0C7pdUZIrNfbe2e03z2Jq8.roa (raw, json)
Hash identifier: QDQUnMT9rmv8YBC/I7Wgo1S7yzSKM2/61FP5AWaKPDs=
Subject key identifier: FE:A9:4E:BF:40:BB:A5:D5:19:22:B3:5F:6D:ED:9E:D3:7C:F6:26:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C67928AFF29CE84939E0EEC69F4F2AD8D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_qlOv0C7pdUZIrNfbe2e03z2Jq8.roa
Signing time: Thu 14 Dec 2023 09:05:06 +0000
ROA not before: Thu 14 Dec 2023 09:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6791:cf49/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:92:8a:ff:29:ce:84:93:9e:0e:ec:69:f4:f2:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 09:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fea94ebf40bba5d51922b35f6ded9ed37cf626af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:b9:e8:78:7d:6d:21:63:2c:ed:df:6d:5f:
a5:9c:33:e2:ab:77:b5:86:ea:f6:0e:ac:ac:bf:28:
71:4b:a1:b1:09:f2:2b:69:e7:0e:c9:96:da:a4:e4:
6a:8a:09:8a:91:41:ac:71:d7:31:1a:d3:2d:af:02:
3e:ac:89:33:a3:1d:31:60:5c:e9:5e:7d:e5:72:c5:
f2:aa:09:41:62:32:ff:0e:75:7e:00:20:1e:e6:cf:
db:b6:4e:20:ee:d7:a5:9e:b0:88:b0:09:52:73:23:
39:63:0e:31:18:74:14:62:30:06:7a:bf:93:cc:2b:
8a:3a:de:0e:02:31:1d:8e:25:3d:3d:27:5c:8a:cd:
42:c4:b2:e3:a9:91:0f:ec:8c:89:81:ae:8d:87:a7:
bd:9e:5f:a6:42:80:be:1f:77:ec:bf:06:a0:40:1e:
23:75:7d:ab:c3:aa:52:ef:eb:8a:37:87:e5:50:f4:
b8:9c:23:8b:03:dc:b2:6d:31:c3:c1:e7:5d:18:c5:
0d:de:a5:9e:2f:83:4e:a5:70:4e:e7:e9:13:fe:db:
94:3b:2b:ec:c1:7d:9d:14:d6:6e:1e:5b:68:ce:60:
b3:a4:40:1a:d2:30:2a:c6:c1:aa:6c:54:20:a3:46:
7b:5f:ec:10:02:be:2d:65:8b:c6:20:15:1f:43:4f:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:4E:BF:40:BB:A5:D5:19:22:B3:5F:6D:ED:9E:D3:7C:F6:26:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_qlOv0C7pdUZIrNfbe2e03z2Jq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:02:3a:67:09:f4:fc:a4:68:ac:8a:e2:9c:8d:b4:ed:5b:21:
f3:52:9f:2c:e8:64:b3:3e:21:2d:3c:1c:72:25:3e:c3:22:bc:
ad:c9:0e:8b:13:3b:fb:aa:32:cc:c9:62:a9:8e:29:7e:b0:4a:
11:c9:98:a5:66:3b:1b:24:d7:3a:fa:7c:3d:8c:38:29:a0:24:
dc:f0:cb:a3:7c:0c:89:13:12:25:25:cc:bc:2f:8b:48:52:2e:
3f:87:1d:0c:e5:37:fd:98:c8:d7:ca:92:c7:b4:a1:ad:e6:7c:
14:f1:68:13:5a:9a:ce:27:dc:bd:a9:43:bb:0a:26:b8:66:6d:
b7:ea:c1:e7:f6:41:e3:5c:3c:08:fa:aa:16:76:d0:1d:99:39:
4a:3b:e5:71:72:eb:17:be:a3:eb:eb:d6:64:71:31:1d:e6:70:
f9:a4:21:5f:fa:00:60:bf:f8:e3:f4:6a:70:cc:a1:20:72:2e:
2c:88:6b:45:8d:a2:42:87:47:d4:a1:28:d3:7b:d3:ef:01:87:
b9:d4:7a:83:69:de:df:bc:19:7f:4d:2a:cd:cf:f6:1c:cd:33:
0e:03:0c:6e:ea:11:b7:2f:fa:63:23:38:f0:d8:94:41:b3:de:
a2:9a:e6:78:09:28:c5:f3:8a:39:ab:b1:f9:82:1f:9d:b3:37:
5b:fb:0e:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxnkor/Kc6Ek54O7Gn08q2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MDkwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWE5NGViZjQwYmJhNWQ1MTkyMmIzNWY2ZGVkOWVkMzdjZjYyNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T256Hh9bSFjLO3fbV+lnDPiq3e1
hur2DqysvyhxS6GxCfIraecOyZbapORqigmKkUGscdcxGtMtrwI+rIkzox0xYFzp
Xn3lcsXyqglBYjL/DnV+ACAe5s/btk4g7telnrCIsAlScyM5Yw4xGHQUYjAGer+T
zCuKOt4OAjEdjiU9PSdcis1CxLLjqZEP7IyJga6Nh6e9nl+mQoC+H3fsvwagQB4j
dX2rw6pS7+uKN4flUPS4nCOLA9yybTHDweddGMUN3qWeL4NOpXBO5+kT/tuUOyvs
wX2dFNZuHltozmCzpEAa0jAqxsGqbFQgo0Z7X+wQAr4tZYvGIBUfQ08xfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP6pTr9Au6XVGSKzX23tntN89iavMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvX3FsT3YwQzdwZFVaSXJOZmJlMmUwM3oySnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMsCOmcJ9PykaKyK4pyN
tO1bIfNSnyzoZLM+IS08HHIlPsMivK3JDosTO/uqMszJYqmOKX6wShHJmKVmOxsk
1zr6fD2MOCmgJNzwy6N8DIkTEiUlzLwvi0hSLj+HHQzlN/2YyNfKkse0oa3mfBTx
aBNams4n3L2pQ7sKJrhmbbfqwef2QeNcPAj6qhZ20B2ZOUo75XFy6xe+o+vr1mRx
MR3mcPmkIV/6AGC/+OP0anDMoSByLiyIa0WNokKHR9ShKNN70+8Bh7nUeoNp3t+8
GX9NKs3P9hzNMw4DDG7qEbcv+mMjOPDYlEGz3qKa5ngJKMXzijmrsfmCH52zN1v7
DuI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:55:04 2025 by rpki-client