Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ln65JOtbayJ0EngDytlTnCCZ3FU.roa
File: ln65JOtbayJ0EngDytlTnCCZ3FU.roa (raw, json)
Hash identifier: nxJG+QQXnHpoDuFlzKxknJwna8o8BQtVU004A0Nq4VQ=
Subject key identifier: 96:7E:B9:24:EB:5B:6B:22:74:12:78:03:CA:D9:53:9C:20:99:DC:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE7B91054C00DE821A723EC8ECFAA99C3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ln65JOtbayJ0EngDytlTnCCZ3FU.roa
Signing time: Sat 30 Sep 2023 20:12:59 +0000
ROA not before: Sat 30 Sep 2023 20:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:b9:10:54:c0:0d:e8:21:a7:23:ec:8e:cf:aa:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 20:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=967eb924eb5b6b2274127803cad9539c2099dc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:70:59:7a:70:3f:37:69:a3:eb:00:3e:8a:
dc:01:4a:d0:f1:34:ab:30:81:82:00:73:b5:4d:63:
29:57:f3:1c:7a:d2:3c:4c:2e:9c:c2:cf:b0:16:00:
dd:db:ed:ec:00:c1:90:25:82:b0:d1:36:9f:82:33:
b2:f2:f6:06:89:f7:d6:a7:5a:c9:ea:a6:eb:40:15:
09:b4:90:9f:7a:9f:6d:f3:f7:44:f7:2d:58:ac:4a:
6a:28:d5:69:c6:08:8c:31:c5:25:9d:d7:b6:ea:2b:
c1:9d:ca:d3:8f:ca:6d:15:e5:19:1e:9f:75:d4:4e:
d9:cf:0f:cc:6a:46:2c:70:f9:6f:76:7d:0f:97:70:
0b:5b:ea:e4:75:89:00:46:51:63:67:d6:34:12:2b:
36:e7:cf:e6:fb:a0:bd:3a:d0:87:19:ac:24:23:72:
ad:ba:9f:0d:9e:84:4c:f9:cc:a0:8f:3b:ac:24:5c:
e5:91:16:f1:96:ea:0f:39:9a:1f:67:59:67:27:ed:
b1:93:c4:ae:ef:50:67:27:0d:8b:e4:d6:60:52:8c:
14:e0:ef:7d:a0:4b:5b:61:25:0d:33:23:64:79:37:
33:09:55:0f:72:e8:96:4e:e2:b6:a2:1b:f5:00:99:
d2:89:ac:0e:79:6f:05:f3:f8:8a:ca:c2:30:19:00:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:B9:24:EB:5B:6B:22:74:12:78:03:CA:D9:53:9C:20:99:DC:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ln65JOtbayJ0EngDytlTnCCZ3FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:a5:39:78:84:0d:19:db:b2:b3:d8:dc:86:82:87:12:c7:dc:
a4:d3:ee:03:27:20:1d:e8:6a:f7:7f:ce:d1:19:7a:df:59:d6:
8b:82:6f:a5:10:09:8d:3c:88:10:23:0c:7d:72:06:5c:81:e6:
44:9c:cf:8b:11:d3:a4:b3:1b:2d:8d:46:12:c0:d7:82:08:68:
54:33:df:64:a8:2d:24:9b:7d:a9:b0:5f:21:4e:e4:93:b6:00:
c5:bd:4e:85:87:03:97:41:04:ef:d3:17:0e:6a:cf:9d:a2:33:
34:2b:63:45:ca:bd:54:75:31:a3:92:25:03:ef:f4:f3:ec:9d:
d2:ff:07:6c:98:ec:c7:6b:8c:bb:d8:25:18:a8:1e:5e:b5:82:
a8:5f:25:78:65:3c:29:44:0b:55:72:e8:cf:a8:f0:6e:58:cd:
d4:2a:9e:94:cd:6a:89:2f:b4:f5:87:b0:32:fe:98:18:3a:02:
4f:f5:26:8c:03:f9:02:04:08:f5:1b:d6:2b:17:a5:a0:d8:14:
49:5f:3d:b3:a1:58:c2:25:cc:46:82:18:7f:1f:c0:67:c1:22:
7c:07:1e:e2:18:ed:dc:28:78:72:ce:c4:67:e2:82:dd:4f:ce:
94:22:34:e7:5a:f4:e2:b2:44:fe:de:dc:a7:87:d1:35:d5:b7:
4d:47:b6:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrnuRBUwA3oIacj7I7PqpnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTMwMjAxMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjdlYjkyNGViNWI2YjIyNzQxMjc4MDNjYWQ5NTM5YzIwOTlkYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA1wWXpwPzdpo+sAPorcAUrQ8TSr
MIGCAHO1TWMpV/McetI8TC6cws+wFgDd2+3sAMGQJYKw0TafgjOy8vYGiffWp1rJ
6qbrQBUJtJCfep9t8/dE9y1YrEpqKNVpxgiMMcUlnde26ivBncrTj8ptFeUZHp91
1E7Zzw/MakYscPlvdn0Pl3ALW+rkdYkARlFjZ9Y0Eis258/m+6C9OtCHGawkI3Kt
up8NnoRM+cygjzusJFzlkRbxluoPOZofZ1lnJ+2xk8Su71BnJw2L5NZgUowU4O99
oEtbYSUNMyNkeTczCVUPcuiWTuK2ohv1AJnSiawOeW8F8/iKysIwGQCOWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJZ+uSTrW2sidBJ4A8rZU5wgmdxVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbG42NUpPdGJheUowRW5nRHl0bFRuQ0NaM0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAqlOXiEDRnbsrPY3IaC
hxLH3KTT7gMnIB3oavd/ztEZet9Z1ouCb6UQCY08iBAjDH1yBlyB5kScz4sR06Sz
Gy2NRhLA14IIaFQz32SoLSSbfamwXyFO5JO2AMW9ToWHA5dBBO/TFw5qz52iMzQr
Y0XKvVR1MaOSJQPv9PPsndL/B2yY7MdrjLvYJRioHl61gqhfJXhlPClEC1Vy6M+o
8G5YzdQqnpTNaokvtPWHsDL+mBg6Ak/1JowD+QIECPUb1isXpaDYFElfPbOhWMIl
zEaCGH8fwGfBInwHHuIY7dwoeHLOxGfigt1PzpQiNOda9OKyRP7e3KeH0TXVt01H
ts4=
-----END CERTIFICATE-----
Generated at Mon May 12 07:19:16 2025 by rpki-client