Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMvVBKNZjg3WaJdfJJ48Ce-3sgE.roa
File: iMvVBKNZjg3WaJdfJJ48Ce-3sgE.roa (raw, json)
Hash identifier: N/wUP1BcI+wPiS+8vlDyE+CEiKLmxxF+sN2LCm4SKqQ=
Subject key identifier: 88:CB:D5:04:A3:59:8E:0D:D6:68:97:5F:24:9E:3C:09:EF:B7:B2:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC5C7F5129956A4FC2DCFEECB3C1A926F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMvVBKNZjg3WaJdfJJ48Ce-3sgE.roa
Signing time: Sun 12 Nov 2023 23:04:57 +0000
ROA not before: Sun 12 Nov 2023 23:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c5c7:72df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:c7:f5:12:99:56:a4:fc:2d:cf:ee:cb:3c:1a:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 23:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88cbd504a3598e0dd668975f249e3c09efb7b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:d5:2f:d2:1b:9b:24:8f:48:af:31:76:25:
89:3d:72:07:7e:c5:6d:02:a8:a8:cf:50:fa:64:6c:
65:b5:e7:6d:ee:b2:ea:5a:df:3a:d4:3c:ff:b4:96:
7a:05:d0:9b:77:fe:47:14:b9:50:37:64:3f:19:6e:
f3:c3:db:1f:a9:e0:31:4a:27:e9:00:a9:3f:4f:32:
a0:36:3a:f2:de:fc:ca:fe:f3:24:f7:b0:8f:61:07:
c5:52:19:3c:b8:38:9f:7a:1a:08:0d:b9:58:22:1d:
2c:18:46:27:3d:86:96:cb:fe:ac:a9:62:84:c3:2f:
91:9e:4b:16:0c:f2:97:c5:a7:b7:e3:4f:f4:0c:8e:
7e:03:2b:25:a8:a8:a9:63:c0:0f:16:c8:64:18:02:
8d:b2:7c:b1:8c:4e:64:5a:bb:8f:d1:20:c0:0e:da:
6c:66:48:11:a4:00:c2:ad:2f:bd:f0:d4:9f:fc:4d:
f5:d7:5a:96:5a:8f:fb:cf:92:22:6c:39:e4:2f:e6:
9e:9a:36:1a:04:82:7c:8a:42:ca:08:69:b7:ea:2c:
ef:69:e6:e0:7d:87:65:e2:1e:7c:60:f6:f2:83:f3:
e3:87:36:d7:fd:59:34:0e:6d:b3:20:c5:cc:60:67:
52:8a:27:3d:3a:9e:8c:b2:8e:d9:1e:18:f9:5b:9f:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:D5:04:A3:59:8E:0D:D6:68:97:5F:24:9E:3C:09:EF:B7:B2:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMvVBKNZjg3WaJdfJJ48Ce-3sgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:6c:0c:87:ab:82:38:59:92:b4:da:50:42:c0:f6:f3:cd:0f:
00:63:4e:97:b1:24:2f:9a:0f:8b:b9:59:6c:11:85:1c:9c:a1:
df:f9:e1:3a:3f:d8:50:b1:af:82:7f:0a:0e:55:68:db:6d:45:
96:b4:ef:89:24:48:eb:6f:de:0d:86:49:ad:81:f4:12:ed:fc:
e2:15:78:91:db:6d:db:05:46:3c:8d:bf:0b:e3:48:a7:65:d0:
57:9c:b2:0e:02:9c:06:e7:51:bd:61:40:91:2d:f1:f0:62:e6:
0e:ac:41:34:5d:c1:86:f4:92:81:e7:90:1c:de:f3:6a:cd:f3:
ec:c6:d9:a6:a1:38:74:b9:11:25:4d:0f:e9:c2:ec:25:86:7f:
16:3e:cf:9b:4d:d0:ea:34:44:31:e4:68:47:9b:96:b9:a7:44:
06:2f:5b:65:e7:e0:91:ed:9f:22:36:d8:0e:54:f6:3c:9c:ab:
e8:9e:bc:b1:4c:6d:6b:90:c4:34:9e:56:88:79:ba:11:d3:33:
c0:4a:8f:8c:14:51:cb:95:16:1f:9a:87:51:06:a7:73:8c:c8:
06:f2:0b:9f:76:82:66:55:2c:fc:ba:a2:b2:65:c9:8d:57:8c:
17:16:16:b3:69:fb:a6:7e:35:9b:99:3e:dd:e7:73:ec:42:84:
b4:4e:ed:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvFx/USmVak/C3P7ss8GpJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEyMjMwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGNiZDUwNGEzNTk4ZTBkZDY2ODk3NWYyNDllM2MwOWVmYjdiMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDXVL9IbmySPSK8xdiWJPXIHfsVt
Aqioz1D6ZGxltedt7rLqWt861Dz/tJZ6BdCbd/5HFLlQN2Q/GW7zw9sfqeAxSifp
AKk/TzKgNjry3vzK/vMk97CPYQfFUhk8uDifehoIDblYIh0sGEYnPYaWy/6sqWKE
wy+RnksWDPKXxae340/0DI5+AyslqKipY8APFshkGAKNsnyxjE5kWruP0SDADtps
ZkgRpADCrS+98NSf/E3111qWWo/7z5IibDnkL+aemjYaBIJ8ikLKCGm36izvaebg
fYdl4h58YPbyg/PjhzbX/Vk0Dm2zIMXMYGdSiic9Op6Mso7ZHhj5W58r+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIjL1QSjWY4N1miXXySePAnvt7IBMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaU12VkJLTlpqZzNXYUpkZkpKNDhDZS0zc2dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMBsDIergjhZkrTaUELA
9vPNDwBjTpexJC+aD4u5WWwRhRycod/54To/2FCxr4J/Cg5VaNttRZa074kkSOtv
3g2GSa2B9BLt/OIVeJHbbdsFRjyNvwvjSKdl0Fecsg4CnAbnUb1hQJEt8fBi5g6s
QTRdwYb0koHnkBze82rN8+zG2aahOHS5ESVND+nC7CWGfxY+z5tN0Oo0RDHkaEeb
lrmnRAYvW2Xn4JHtnyI22A5U9jycq+ievLFMbWuQxDSeVoh5uhHTM8BKj4wUUcuV
Fh+ah1EGp3OMyAbyC592gmZVLPy6orJlyY1XjBcWFrNp+6Z+NZuZPt3nc+xChLRO
7eI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:39:16 2025 by rpki-client