Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfNvZJDgk_1edLlQipNm-KB2nPc.roa
File: bfNvZJDgk_1edLlQipNm-KB2nPc.roa (raw, json)
Hash identifier: HnowEfj97oDrJYD/D/H+mGe3O1dV3Oo1p1Kjuf1vjmg=
Subject key identifier: 6D:F3:6F:64:90:E0:93:FD:5E:74:B9:50:8A:93:66:F8:A0:76:9C:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3DBAB3C7BFFE2D003FD42EAFB2D9F399
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfNvZJDgk_1edLlQipNm-KB2nPc.roa
Signing time: Wed 06 Dec 2023 06:04:54 +0000
ROA not before: Wed 06 Dec 2023 06:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:3dba:82b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:ba:b3:c7:bf:fe:2d:00:3f:d4:2e:af:b2:d9:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 06:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6df36f6490e093fd5e74b9508a9366f8a0769cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:45:90:e3:37:d2:eb:d3:41:09:27:76:9e:
f2:77:a0:63:40:3d:1d:e7:2e:b6:32:b1:06:b0:bb:
30:fd:16:55:fd:69:60:16:b4:75:56:00:dc:94:8e:
91:3e:d4:ee:7e:a1:6a:5e:fe:bc:8d:c6:bb:a2:de:
92:a5:28:64:52:cd:05:1f:db:cb:f9:3d:a2:ef:c0:
cc:24:73:bf:66:68:66:9b:20:a6:b2:db:8f:be:00:
5c:27:49:41:27:75:c8:8d:ce:39:10:1b:b0:fd:8a:
8e:d3:5f:51:57:93:a4:f6:90:0c:c6:71:7d:bd:1a:
6c:14:80:50:ce:0f:1e:fd:a7:32:ed:d9:ed:d7:a2:
ec:dc:46:ba:8f:2b:41:bc:4f:15:b6:fb:28:6d:19:
c8:4d:f5:61:ec:90:66:e9:7d:b7:5d:3a:a2:90:bb:
1b:03:2d:8a:5a:53:1b:4d:0c:d0:bf:04:9e:17:15:
fb:5c:d4:a3:1e:a0:9c:ae:86:61:0c:10:55:a8:42:
56:66:94:8a:d6:26:61:73:12:59:e0:1b:c7:1c:70:
80:80:6f:0b:a1:65:38:ca:e8:f1:d4:9d:76:96:7b:
1e:57:14:45:d2:86:fa:d5:4e:83:62:ff:ee:a2:53:
a5:30:9e:21:87:d7:1a:60:30:e8:6b:2f:65:a8:cf:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:6F:64:90:E0:93:FD:5E:74:B9:50:8A:93:66:F8:A0:76:9C:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfNvZJDgk_1edLlQipNm-KB2nPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:3a:4c:fa:08:cd:59:41:8f:cb:24:ed:1b:34:db:be:29:57:
ac:6b:b6:c8:1a:de:d9:0d:da:d5:82:e3:8b:e4:ae:ba:bd:41:
70:e2:63:3d:5c:66:9e:51:2e:a1:6e:7b:d7:52:66:bf:9c:91:
ca:ea:e4:a8:f4:96:50:6b:c8:95:6c:e3:bc:4a:0e:21:ce:63:
22:67:e3:81:a9:01:1e:ba:06:81:b2:ff:f5:59:87:48:32:b1:
31:a2:07:5e:c2:85:2e:78:a1:bb:9d:31:e2:28:f8:ff:e5:75:
d8:46:d7:fc:70:ef:95:59:86:60:77:0a:26:19:68:22:4b:2f:
32:99:8f:52:8e:73:c2:e4:be:db:6b:4b:2a:32:83:6a:9e:cc:
dc:94:24:13:e8:5f:ae:68:69:bd:9a:bd:36:0c:9f:af:3f:35:
5f:66:72:6d:7d:ef:96:4d:6b:89:5c:f2:74:46:d8:4a:1d:c5:
ca:65:d2:68:29:ae:84:26:40:0b:99:f8:e0:02:62:6e:dd:1d:
ac:36:2c:c5:f8:02:b7:60:16:77:f0:7b:0e:22:be:4c:95:76:
6c:9a:c9:85:35:35:e7:39:49:26:66:da:70:a2:9b:ea:f1:f7:
c9:be:f2:2c:6d:e4:24:b6:ab:56:e2:01:c5:ad:81:62:94:18:
f5:9c:f8:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw9urPHv/4tAD/ULq+y2fOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MDYwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGYzNmY2NDkwZTA5M2ZkNWU3NGI5NTA4YTkzNjZmOGEwNzY5Y2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbVFkOM30uvTQQkndp7yd6BjQD0d
5y62MrEGsLsw/RZV/WlgFrR1VgDclI6RPtTufqFqXv68jca7ot6SpShkUs0FH9vL
+T2i78DMJHO/ZmhmmyCmstuPvgBcJ0lBJ3XIjc45EBuw/YqO019RV5Ok9pAMxnF9
vRpsFIBQzg8e/acy7dnt16Ls3Ea6jytBvE8VtvsobRnITfVh7JBm6X23XTqikLsb
Ay2KWlMbTQzQvwSeFxX7XNSjHqCcroZhDBBVqEJWZpSK1iZhcxJZ4BvHHHCAgG8L
oWU4yujx1J12lnseVxRF0ob61U6DYv/uolOlMJ4hh9caYDDoay9lqM+0UQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG3zb2SQ4JP9XnS5UIqTZvigdpz3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYmZOdlpKRGdrXzFlZExsUWlwTm0tS0IyblBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGA6TPoIzVlBj8sk7Rs0
274pV6xrtsga3tkN2tWC44vkrrq9QXDiYz1cZp5RLqFue9dSZr+ckcrq5Kj0llBr
yJVs47xKDiHOYyJn44GpAR66BoGy//VZh0gysTGiB17ChS54obudMeIo+P/lddhG
1/xw75VZhmB3CiYZaCJLLzKZj1KOc8LkvttrSyoyg2qezNyUJBPoX65oab2avTYM
n68/NV9mcm1975ZNa4lc8nRG2Eodxcpl0mgproQmQAuZ+OACYm7dHaw2LMX4Ardg
Fnfwew4ivkyVdmyayYU1Nec5SSZm2nCim+rx98m+8ixt5CS2q1biAcWtgWKUGPWc
+Kg=
-----END CERTIFICATE-----
Generated at Sat May 10 12:27:33 2025 by rpki-client