Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b008LqS6ZOk_2y3ZAlmSZg4tAuI.roa
File: b008LqS6ZOk_2y3ZAlmSZg4tAuI.roa (raw, json)
Hash identifier: l7qkvcsAi3swUrkg0HX99TpZwRxaJ8CmaTVvQHEQkyo=
Subject key identifier: 6F:4D:3C:2E:A4:BA:64:E9:3F:DB:2D:D9:02:59:92:66:0E:2D:02:E2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7C01D1976680D762876EB8755677C940
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b008LqS6ZOk_2y3ZAlmSZg4tAuI.roa
Signing time: Sun 29 Oct 2023 15:16:15 +0000
ROA not before: Sun 29 Oct 2023 15:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:01:d1:97:66:80:d7:62:87:6e:b8:75:56:77:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 15:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4d3c2ea4ba64e93fdb2dd9025992660e2d02e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:40:81:b0:e8:f0:e1:26:a6:69:86:75:dd:
5f:da:c2:41:d6:78:c9:83:7c:81:d5:1a:e0:b4:87:
ec:21:06:1f:d1:cc:90:b0:0d:e5:5e:cb:8a:ec:1f:
93:06:d2:a2:6c:e6:f1:cc:c1:ca:d1:2c:04:a0:01:
42:c7:37:5f:50:f0:88:01:23:1d:ad:eb:11:c8:3a:
89:15:be:db:e4:c8:70:31:dc:73:bf:15:e8:6e:fa:
eb:d6:c8:24:85:7b:ed:75:ce:5b:8a:88:e5:f1:b0:
94:32:2c:bf:fa:aa:18:70:b6:35:85:fd:05:54:67:
36:e1:da:78:d2:bf:c5:6b:aa:f9:fe:97:9d:b0:cc:
69:61:3e:f8:0c:8c:31:e0:f2:68:e8:f4:36:af:55:
e6:2e:7b:8e:ce:d8:1e:0f:d4:62:35:85:8f:41:49:
d9:1b:04:c2:0f:3f:30:cd:cf:ba:93:15:9d:07:65:
ae:4b:79:cf:f1:5e:f3:1b:3e:1a:44:71:3e:dc:6a:
98:e2:d1:13:b1:98:fc:44:22:68:ea:a7:26:05:ad:
d9:b5:60:0c:43:0c:db:45:f7:af:ba:c1:67:7c:a2:
c3:7b:1a:06:df:7b:0f:41:48:18:5c:1e:a3:b5:71:
05:30:f0:4c:25:90:4e:10:83:c1:62:53:a0:a5:7a:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:3C:2E:A4:BA:64:E9:3F:DB:2D:D9:02:59:92:66:0E:2D:02:E2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b008LqS6ZOk_2y3ZAlmSZg4tAuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:40:e2:9d:c4:0f:69:05:e8:27:1f:ad:c4:7d:45:5b:21:27:
de:70:df:72:10:9b:06:bc:4b:be:11:6d:58:f1:05:60:45:d7:
1b:8e:a7:69:c8:6b:c0:20:3d:91:0b:ae:53:38:8a:63:dc:a2:
df:0c:af:70:5b:53:1a:7c:9b:a8:8c:b9:06:ed:ce:3c:08:a8:
ec:5f:c2:be:56:7b:86:a9:e9:ca:e1:ad:67:71:b5:93:4c:05:
bb:2e:7c:2c:f9:45:7e:35:ef:db:3b:31:f2:a1:03:59:43:b9:
24:59:16:a3:4d:a3:b1:5e:39:97:f3:d6:06:bf:4f:b1:df:f9:
b8:7b:89:52:c7:12:c4:a0:85:cf:76:65:8b:51:b9:d7:43:40:
d6:16:77:50:3f:ea:58:bd:b4:da:d5:9e:6d:1c:68:87:00:d5:
36:2c:83:38:3e:c7:c1:b0:be:94:79:50:d3:a3:ef:db:a0:e0:
5b:dd:65:c0:21:b8:71:c8:cb:cf:da:24:32:b4:7c:19:95:80:
06:4f:68:2a:9b:79:81:b0:57:46:07:7d:97:e4:e6:cb:70:59:
f7:85:88:5d:eb:92:ae:95:a8:b4:58:77:8f:6f:00:f0:81:63:
0d:ad:62:f5:05:82:a8:07:8f:08:e9:86:79:a3:27:fc:fa:3c:
9b:55:a2:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt8AdGXZoDXYoduuHVWd8lAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI5MTUxNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjRkM2MyZWE0YmE2NGU5M2ZkYjJkZDkwMjU5OTI2NjBlMmQwMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR1AgbDo8OEmpmmGdd1f2sJB1njJ
g3yB1RrgtIfsIQYf0cyQsA3lXsuK7B+TBtKibObxzMHK0SwEoAFCxzdfUPCIASMd
resRyDqJFb7b5MhwMdxzvxXobvrr1sgkhXvtdc5biojl8bCUMiy/+qoYcLY1hf0F
VGc24dp40r/Fa6r5/pedsMxpYT74DIwx4PJo6PQ2r1XmLnuOztgeD9RiNYWPQUnZ
GwTCDz8wzc+6kxWdB2WuS3nP8V7zGz4aRHE+3GqY4tETsZj8RCJo6qcmBa3ZtWAM
QwzbRfevusFnfKLDexoG33sPQUgYXB6jtXEFMPBMJZBOEIPBYlOgpXqR/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG9NPC6kumTpP9st2QJZkmYOLQLiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYjAwOExxUzZaT2tfMnkzWkFsbVNaZzR0QXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANFA4p3ED2kF6CcfrcR9
RVshJ95w33IQmwa8S74RbVjxBWBF1xuOp2nIa8AgPZELrlM4imPcot8Mr3BbUxp8
m6iMuQbtzjwIqOxfwr5We4ap6crhrWdxtZNMBbsufCz5RX4179s7MfKhA1lDuSRZ
FqNNo7FeOZfz1ga/T7Hf+bh7iVLHEsSghc92ZYtRuddDQNYWd1A/6li9tNrVnm0c
aIcA1TYsgzg+x8GwvpR5UNOj79ug4FvdZcAhuHHIy8/aJDK0fBmVgAZPaCqbeYGw
V0YHfZfk5stwWfeFiF3rkq6VqLRYd49vAPCBYw2tYvUFgqgHjwjphnmjJ/z6PJtV
oiw=
-----END CERTIFICATE-----
Generated at Thu May 15 00:11:36 2025 by rpki-client