Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mTdZF_iURqa3ovc6i7nRQtE7pC8.roa
File: mTdZF_iURqa3ovc6i7nRQtE7pC8.roa (raw, json)
Hash identifier: b2y6Mxwhog1fmNhtAGXazaLKAN6OI93qJ4/iHxeyDN0=
Subject key identifier: 99:37:59:17:F8:94:46:A6:B7:A2:F7:3A:8B:B9:D1:42:D1:3B:A4:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFFFAD77819C04490599E67821B53AA6B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mTdZF_iURqa3ovc6i7nRQtE7pC8.roa
Signing time: Thu 05 Oct 2023 13:15:43 +0000
ROA not before: Thu 05 Oct 2023 13:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:fa:d7:78:19:c0:44:90:59:9e:67:82:1b:53:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 13:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99375917f89446a6b7a2f73a8bb9d142d13ba42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:3b:d2:10:f5:66:6d:67:14:a6:88:75:08:
16:bb:cd:99:26:e1:b8:66:77:79:a4:48:1a:a6:02:
7c:08:5f:fb:ad:7a:7a:f6:43:16:ac:32:84:13:25:
a9:04:6d:28:1a:55:4c:0a:20:c1:f0:da:a4:79:46:
ca:22:63:20:b1:fd:c1:e0:7c:e8:c0:28:1a:9f:92:
9b:cf:05:21:5d:69:89:26:f9:a1:d2:52:83:05:d7:
33:78:5a:66:4f:3c:87:79:5f:3d:9b:28:27:75:dc:
b7:db:81:49:6f:02:6e:ac:b3:f8:e3:b3:46:63:c3:
5a:72:a7:f7:24:72:c8:b0:7f:e3:b6:99:e3:e2:bc:
a0:fd:89:d3:ad:61:f1:9a:64:98:3c:b5:84:9c:16:
e1:a1:4b:96:b8:da:00:42:37:43:26:d6:bd:de:df:
ad:1d:10:a4:ea:23:86:33:67:22:c5:f8:9f:d1:c7:
a0:a8:63:51:f5:0d:ad:9c:c3:39:0a:58:84:13:f6:
cb:be:34:34:4c:62:c2:16:62:c0:e1:7a:83:74:3b:
e5:de:4f:8b:63:6d:9f:47:74:13:08:85:73:38:36:
2a:5b:8f:b4:53:b5:f6:38:1f:93:ac:2b:0e:ed:c5:
87:be:12:46:cd:ee:c5:ad:17:b5:51:43:c8:ed:65:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:59:17:F8:94:46:A6:B7:A2:F7:3A:8B:B9:D1:42:D1:3B:A4:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mTdZF_iURqa3ovc6i7nRQtE7pC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:54:26:a7:33:cf:2b:6d:28:84:15:68:78:9e:d2:36:f4:ff:
93:d9:93:a9:ac:0a:13:6d:9a:ca:66:c1:db:bf:8b:4d:62:80:
4e:21:44:ae:92:cc:2e:6d:77:2e:58:5e:50:8c:88:b6:9c:5d:
10:5e:86:26:f2:2f:68:10:45:8d:5d:65:a9:27:fb:77:38:91:
c9:d3:86:69:47:1a:06:ae:65:d0:53:ec:10:f6:e7:2b:3e:f2:
4a:52:0e:9c:af:75:0d:68:4a:93:6d:f1:26:33:d9:e2:15:3d:
96:a2:67:11:ce:32:86:d6:a6:db:23:cb:1b:b7:e6:da:e7:38:
f1:fd:9e:ee:5a:23:7c:21:aa:8e:a8:80:fa:d0:f6:0d:44:63:
c9:ee:d1:49:21:63:d9:16:80:2a:6d:42:eb:0f:6e:8c:c3:74:
f3:77:9b:be:bf:3f:48:65:02:9d:ea:d9:af:2a:3d:bd:96:8a:
4f:12:41:e0:b4:a4:57:55:53:a8:30:12:fa:eb:b9:ca:03:9c:
45:cc:c1:ad:b2:02:1f:54:c5:de:f3:71:81:75:5e:bc:6a:f4:
e3:bc:e0:9e:2a:6b:ec:7f:0a:88:26:5a:45:58:cf:d0:06:8c:
56:9d:e5:cc:20:85:6c:95:5b:d3:36:73:1d:53:2d:eb:ed:7a:
9c:1a:e3:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr/+td4GcBEkFmeZ4IbU6prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MTMxNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTM3NTkxN2Y4OTQ0NmE2YjdhMmY3M2E4YmI5ZDE0MmQxM2JhNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiw70hD1Zm1nFKaIdQgWu82ZJuG4
Znd5pEgapgJ8CF/7rXp69kMWrDKEEyWpBG0oGlVMCiDB8NqkeUbKImMgsf3B4Hzo
wCgan5KbzwUhXWmJJvmh0lKDBdczeFpmTzyHeV89mygnddy324FJbwJurLP447NG
Y8Nacqf3JHLIsH/jtpnj4ryg/YnTrWHxmmSYPLWEnBbhoUuWuNoAQjdDJta93t+t
HRCk6iOGM2cixfif0cegqGNR9Q2tnMM5CliEE/bLvjQ0TGLCFmLA4XqDdDvl3k+L
Y22fR3QTCIVzODYqW4+0U7X2OB+TrCsO7cWHvhJGze7FrRe1UUPI7WWiKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJk3WRf4lEamt6L3Oou50ULRO6QvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbVRkWkZfaVVScWEzb3ZjNmk3blJRdEU3cEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANNUJqczzyttKIQVaHie
0jb0/5PZk6msChNtmspmwdu/i01igE4hRK6SzC5tdy5YXlCMiLacXRBehibyL2gQ
RY1dZakn+3c4kcnThmlHGgauZdBT7BD25ys+8kpSDpyvdQ1oSpNt8SYz2eIVPZai
ZxHOMobWptsjyxu35trnOPH9nu5aI3whqo6ogPrQ9g1EY8nu0UkhY9kWgCptQusP
bozDdPN3m76/P0hlAp3q2a8qPb2Wik8SQeC0pFdVU6gwEvrrucoDnEXMwa2yAh9U
xd7zcYF1Xrxq9OO84J4qa+x/CogmWkVYz9AGjFad5cwghWyVW9M2cx1TLevtepwa
4xc=
-----END CERTIFICATE-----
Generated at Sat May 10 13:35:43 2025 by rpki-client