Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dOCu6rYTHhG4VvTg6RmKv3J7ISE.roa
File: dOCu6rYTHhG4VvTg6RmKv3J7ISE.roa (raw, json)
Hash identifier: +6oqJxzwtJk6ZEj/aHH94+xzeEjj9iaoBVYMK6+GyUg=
Subject key identifier: 74:E0:AE:EA:B6:13:1E:11:B8:56:F4:E0:E9:19:8A:BF:72:7B:21:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD8EA483BCAFD2107EB72373E089599BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dOCu6rYTHhG4VvTg6RmKv3J7ISE.roa
Signing time: Wed 27 Sep 2023 23:12:27 +0000
ROA not before: Wed 27 Sep 2023 23:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:ea:48:3b:ca:fd:21:07:eb:72:37:3e:08:95:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 23:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e0aeeab6131e11b856f4e0e9198abf727b2121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:63:b2:94:2b:59:cc:0d:ef:8d:26:80:a7:
6f:88:55:91:70:cd:85:ce:f6:16:93:98:c4:23:c9:
5c:92:ad:3a:bc:97:33:c5:95:5b:87:8a:43:b6:ce:
d4:0e:b4:55:22:b5:d7:00:11:4e:0b:79:e3:3b:b3:
fc:25:09:6e:68:86:9b:c6:99:d3:dd:2a:79:e5:72:
4e:b3:34:0b:1f:6e:7b:cc:f4:21:b6:db:e4:32:0b:
c1:ef:59:00:b8:bb:15:7b:86:5f:20:07:46:57:bf:
41:d7:05:b7:cc:9c:fd:44:50:6a:a8:e6:ea:bf:6a:
d0:f1:bc:e3:12:90:6d:46:04:4f:a8:27:64:05:f2:
40:80:7c:15:0d:47:04:37:20:e4:1e:1b:1d:fe:17:
d5:6f:58:60:67:4f:fd:de:c4:04:d9:76:f5:bd:91:
ff:83:6c:47:8f:ba:3b:38:fa:82:aa:26:7f:7d:f4:
3a:b4:52:92:82:05:55:1f:98:1a:58:58:66:07:3a:
8f:47:3d:85:bf:6a:25:8f:97:a1:9e:0c:90:22:77:
d4:21:c9:b3:18:a4:ca:eb:7a:ab:12:7e:a9:4b:b2:
a5:61:af:23:7e:96:69:a8:80:1e:1d:20:d1:e5:1c:
97:55:ad:22:14:a9:d0:ed:de:f5:e8:6c:bf:94:17:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:AE:EA:B6:13:1E:11:B8:56:F4:E0:E9:19:8A:BF:72:7B:21:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dOCu6rYTHhG4VvTg6RmKv3J7ISE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:ff:d4:d4:21:30:c8:57:74:43:49:6b:34:b3:93:a7:d1:87:
17:d1:a7:b5:7c:67:34:ed:27:c5:93:1c:51:e3:9c:29:c8:ed:
dd:2a:4a:99:59:bb:fc:4a:ac:9e:5a:06:d7:b6:1f:66:9e:90:
ad:ee:76:b2:47:e3:cd:1c:76:59:9d:0b:74:65:c0:39:dd:b4:
50:5f:78:3f:af:12:0f:67:be:74:d2:8a:2e:9c:ca:03:8f:ed:
ed:19:8e:de:5a:60:66:a5:61:2b:db:9f:43:cb:fb:b8:87:61:
8d:29:91:c1:3b:4e:76:36:cc:bd:cd:7b:56:26:45:df:b7:3c:
db:ba:cc:90:7a:83:b7:9c:d4:68:e1:97:5a:bb:5e:b7:37:ab:
32:00:6e:29:e2:8b:5d:8e:45:4a:72:c5:97:0c:bf:8a:2b:53:
31:63:57:06:39:44:68:49:c9:e7:c6:4f:49:05:e4:14:d2:a4:
f5:76:49:fb:0a:e5:13:91:03:42:17:e1:bd:ce:f6:f5:59:14:
ba:95:af:cd:6b:3c:04:1d:dc:c1:b6:52:31:2b:8d:c5:00:40:
74:7b:ea:e2:88:94:5e:b8:eb:fe:15:4c:d0:2c:75:ca:9d:c3:
7e:b7:ca:42:04:c7:72:6a:f0:c2:c0:99:1a:ee:87:f2:37:15:
1f:c8:40:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrY6kg7yv0hB+tyNz4IlZm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI3MjMxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGUwYWVlYWI2MTMxZTExYjg1NmY0ZTBlOTE5OGFiZjcyN2IyMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMdjspQrWcwN740mgKdviFWRcM2F
zvYWk5jEI8lckq06vJczxZVbh4pDts7UDrRVIrXXABFOC3njO7P8JQluaIabxpnT
3Sp55XJOszQLH257zPQhttvkMgvB71kAuLsVe4ZfIAdGV79B1wW3zJz9RFBqqObq
v2rQ8bzjEpBtRgRPqCdkBfJAgHwVDUcENyDkHhsd/hfVb1hgZ0/93sQE2Xb1vZH/
g2xHj7o7OPqCqiZ/ffQ6tFKSggVVH5gaWFhmBzqPRz2Fv2olj5ehngyQInfUIcmz
GKTK63qrEn6pS7KlYa8jfpZpqIAeHSDR5RyXVa0iFKnQ7d716Gy/lBffOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHTgruq2Ex4RuFb04OkZir9yeyEhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZE9DdTZyWVRIaEc0VnZUZzZSbUt2M0o3SVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKv/1NQhMMhXdENJazSz
k6fRhxfRp7V8ZzTtJ8WTHFHjnCnI7d0qSplZu/xKrJ5aBte2H2aekK3udrJH480c
dlmdC3RlwDndtFBfeD+vEg9nvnTSii6cygOP7e0Zjt5aYGalYSvbn0PL+7iHYY0p
kcE7TnY2zL3Ne1YmRd+3PNu6zJB6g7ec1Gjhl1q7Xrc3qzIAbinii12ORUpyxZcM
v4orUzFjVwY5RGhJyefGT0kF5BTSpPV2SfsK5RORA0IX4b3O9vVZFLqVr81rPAQd
3MG2UjErjcUAQHR76uKIlF646/4VTNAsdcqdw363ykIEx3Jq8MLAmRruh/I3FR/I
QAs=
-----END CERTIFICATE-----
Generated at Sat May 10 12:24:04 2025 by rpki-client