Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPlq4UbG4SSKTt-Ed4B4KtlC9u4.roa
File: hPlq4UbG4SSKTt-Ed4B4KtlC9u4.roa (raw, json)
Hash identifier: g8ymEsspKqUiA45Kyh4HScaIornm4ctZ7dKjEwiiRl8=
Subject key identifier: 84:F9:6A:E1:46:C6:E1:24:8A:4E:DF:84:77:80:78:2A:D9:42:F6:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B75FB005985D18E75C8A890121BFA2472
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPlq4UbG4SSKTt-Ed4B4KtlC9u4.roa
Signing time: Sat 28 Oct 2023 11:11:05 +0000
ROA not before: Sat 28 Oct 2023 11:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:75f4:e9e4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:fb:00:59:85:d1:8e:75:c8:a8:90:12:1b:fa:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 11:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f96ae146c6e1248a4edf847780782ad942f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:76:7c:32:4b:16:b3:38:28:8e:be:c1:85:
6b:66:82:7c:78:d9:6f:f7:c4:ca:ee:1b:cc:78:73:
5b:9d:eb:08:a4:e3:40:18:bb:54:a1:ae:e4:8e:e4:
0c:04:4b:a8:f2:41:d8:81:e6:5b:68:fe:c5:7b:a8:
d9:a3:44:1e:96:c7:a9:3c:25:4c:72:d4:eb:24:8c:
c1:88:ca:46:5d:dc:70:9d:6b:23:33:ab:20:65:d9:
8d:88:61:1a:3d:bb:31:7b:27:9e:e8:b0:a3:cc:24:
8a:b9:df:9e:09:59:02:e1:7a:ba:79:68:eb:cb:f1:
09:be:13:ac:96:98:fa:cd:8f:8f:11:c6:f0:02:ba:
9e:8a:cd:17:d7:89:c7:17:78:38:ea:38:f9:c1:0f:
7e:e2:44:14:76:86:4c:20:a3:8e:cb:bf:b8:cd:74:
0e:87:65:0c:51:a9:01:ae:21:74:82:90:78:84:78:
a8:bd:bb:91:a8:d0:bc:e6:a6:b0:af:83:60:35:80:
d9:16:1c:77:4f:88:ca:b9:b6:73:99:42:ef:40:2a:
2f:67:37:c3:03:73:94:f5:86:3f:c3:a2:7c:8d:6b:
95:54:fb:07:6d:ac:0c:c2:3e:06:5d:12:25:aa:78:
1b:a9:3f:d3:49:32:3a:5e:52:91:81:93:ce:41:61:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F9:6A:E1:46:C6:E1:24:8A:4E:DF:84:77:80:78:2A:D9:42:F6:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPlq4UbG4SSKTt-Ed4B4KtlC9u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:c6:bb:7d:db:6e:39:c4:e3:dd:1a:bb:f5:4a:1c:2f:e9:cc:
4d:83:c3:55:53:00:b9:c8:1d:6b:4c:9c:19:d7:df:06:f0:2a:
09:d4:06:5c:39:49:f3:83:fd:04:88:88:c5:3f:0e:e3:d1:26:
ae:d7:46:58:8f:d3:41:2b:f4:53:da:61:51:e2:6f:01:cc:c7:
2c:2d:1b:f2:44:a2:81:79:00:0a:6f:56:a7:27:e9:63:db:d1:
ec:2a:f1:27:ba:67:31:06:8c:a8:06:81:f6:af:16:5e:0d:6c:
a4:64:0f:04:1a:b1:55:b4:46:57:f8:68:48:19:60:a8:ee:6f:
c9:d3:0c:e9:ec:0c:db:35:49:28:96:49:fc:d9:a0:ff:2b:c8:
c2:c5:c9:24:8f:4a:89:f8:d8:b5:12:1d:16:7b:59:1b:9f:3d:
aa:a7:7f:b6:6f:65:68:68:fd:4a:79:fd:a7:70:69:4d:d2:9a:
00:98:44:36:93:50:d0:52:3f:e1:f5:01:c4:b7:06:d9:04:21:
a5:55:2e:29:3a:b0:53:7c:7f:01:8a:6d:3f:ad:95:99:7b:1e:
c1:91:89:9b:7e:f0:a5:7a:5f:02:bf:04:ba:08:1a:ce:21:a8:
c3:da:14:4d:e5:5b:de:6e:de:c5:77:69:01:ff:f8:39:c2:fb:
19:e9:33:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt1+wBZhdGOdciokBIb+iRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI4MTExMTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGY5NmFlMTQ2YzZlMTI0OGE0ZWRmODQ3NzgwNzgyYWQ5NDJmNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqZ2fDJLFrM4KI6+wYVrZoJ8eNlv
98TK7hvMeHNbnesIpONAGLtUoa7kjuQMBEuo8kHYgeZbaP7Fe6jZo0QelsepPCVM
ctTrJIzBiMpGXdxwnWsjM6sgZdmNiGEaPbsxeyee6LCjzCSKud+eCVkC4Xq6eWjr
y/EJvhOslpj6zY+PEcbwArqeis0X14nHF3g46jj5wQ9+4kQUdoZMIKOOy7+4zXQO
h2UMUakBriF0gpB4hHiovbuRqNC85qawr4NgNYDZFhx3T4jKubZzmULvQCovZzfD
A3OU9YY/w6J8jWuVVPsHbawMwj4GXRIlqngbqT/TSTI6XlKRgZPOQWHxiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIT5auFGxuEkik7fhHeAeCrZQvbuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaFBscTRVYkc0U1NLVHQtRWQ0QjRLdGxDOXU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALHGu33bbjnE490au/VK
HC/pzE2Dw1VTALnIHWtMnBnX3wbwKgnUBlw5SfOD/QSIiMU/DuPRJq7XRliP00Er
9FPaYVHibwHMxywtG/JEooF5AApvVqcn6WPb0ewq8Se6ZzEGjKgGgfavFl4NbKRk
DwQasVW0Rlf4aEgZYKjub8nTDOnsDNs1SSiWSfzZoP8ryMLFySSPSon42LUSHRZ7
WRufPaqnf7ZvZWho/Up5/adwaU3SmgCYRDaTUNBSP+H1AcS3BtkEIaVVLik6sFN8
fwGKbT+tlZl7HsGRiZt+8KV6XwK/BLoIGs4hqMPaFE3lW95u3sV3aQH/+DnC+xnp
Mw4=
-----END CERTIFICATE-----
Generated at Mon May 12 07:32:26 2025 by rpki-client