Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nKx1mz2F3wCRyQY0Nj-4ANOV9FU.roa
File: nKx1mz2F3wCRyQY0Nj-4ANOV9FU.roa (raw, json)
Hash identifier: UCS1Z4gNBJgtaOr/FgwFXFu1tmg+IaAM/0hYqJTpgYU=
Subject key identifier: 9C:AC:75:9B:3D:85:DF:00:91:C9:06:34:36:3F:B8:00:D3:95:F4:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2F5CD8074DE4566737948725BFA9715F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nKx1mz2F3wCRyQY0Nj-4ANOV9FU.roa
Signing time: Sat 14 Oct 2023 18:04:55 +0000
ROA not before: Sat 14 Oct 2023 18:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:2f5c:364b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:5c:d8:07:4d:e4:56:67:37:94:87:25:bf:a9:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 18:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cac759b3d85df0091c90634363fb800d395f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:09:38:40:69:e2:e2:34:bb:fe:87:c6:56:
b2:be:63:21:ed:ae:08:85:ac:3f:65:40:30:da:0f:
56:5e:99:11:91:dd:14:7f:05:28:3e:1f:43:ef:7f:
d5:cc:83:27:cd:02:c4:73:d2:a8:82:b6:a7:4a:9e:
a0:1b:9b:1e:ad:8c:90:23:aa:d4:29:b3:62:e4:6f:
a1:28:81:8f:24:e2:c1:71:e3:b2:63:4d:82:8e:5e:
86:d5:24:3a:de:5a:98:25:e8:d7:13:3d:37:0f:94:
05:45:57:8b:08:67:d5:a6:9b:3b:b7:b5:a2:fc:ff:
c5:16:db:c2:29:89:14:73:d8:d9:2e:e9:1a:ee:82:
5d:cc:f8:9f:88:68:af:e1:7b:08:77:4c:6a:7f:fd:
9f:7f:63:79:7a:e4:1e:56:6b:b8:c4:88:86:1b:b8:
ae:7c:3a:3e:d7:db:bb:53:70:38:53:95:6f:aa:05:
0b:5b:cb:e4:4b:76:6d:c3:3b:e5:97:6b:08:5a:9f:
c2:3f:5b:f7:de:2e:78:b7:a3:a8:1c:27:fa:e4:e2:
6d:b6:07:b8:43:be:92:7d:54:2f:18:f3:1a:d8:be:
7f:29:86:38:04:82:9e:9a:8e:51:29:46:d2:fd:e3:
9a:eb:57:60:e4:be:7c:26:35:6f:84:04:3c:49:0a:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:75:9B:3D:85:DF:00:91:C9:06:34:36:3F:B8:00:D3:95:F4:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nKx1mz2F3wCRyQY0Nj-4ANOV9FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:d7:cc:14:fe:8f:fa:d3:cd:32:27:46:91:18:e6:96:e7:da:
22:4a:5f:d4:97:5f:bd:4f:2c:37:8c:62:48:60:3f:6c:3a:c0:
f2:bd:43:75:a9:20:dd:58:b6:ad:6d:a2:eb:e4:be:96:b3:3b:
f8:92:ad:0a:ca:4f:d9:97:31:89:99:30:75:6b:29:3c:f8:52:
67:c6:63:e4:b2:cc:55:19:2f:c0:ee:41:72:f2:b0:4b:8b:be:
29:00:4d:9f:3c:a8:b8:db:82:b9:7a:13:96:08:e8:a8:b7:aa:
f9:31:1a:70:76:72:ab:b6:9c:cc:5f:e6:3c:9e:b2:71:ea:8f:
8f:ca:3d:65:5d:60:a8:ef:93:10:e7:2e:4b:56:6a:dc:91:0f:
3d:e4:76:e0:fe:b0:8b:a3:41:5b:e8:ac:bf:54:f1:2c:90:87:
d7:09:9a:79:04:1a:70:1d:73:be:b3:3c:d6:cc:29:24:97:65:
a8:30:c6:89:df:c9:ad:d1:ef:87:ef:b7:79:34:9c:ec:af:dc:
31:51:7e:33:51:ab:90:05:c4:5e:ee:8c:a4:29:84:15:58:b0:
fb:83:d8:71:2b:60:ad:ef:8a:c0:fa:13:15:30:80:de:bd:e6:
ed:6d:ab:3f:12:35:54:a5:77:6a:5a:87:57:c3:48:78:38:01:
25:9a:15:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsvXNgHTeRWZzeUhyW/qXFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTgwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2FjNzU5YjNkODVkZjAwOTFjOTA2MzQzNjNmYjgwMGQzOTVmNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvIJOEBp4uI0u/6HxlayvmMh7a4I
haw/ZUAw2g9WXpkRkd0UfwUoPh9D73/VzIMnzQLEc9KogranSp6gG5serYyQI6rU
KbNi5G+hKIGPJOLBceOyY02Cjl6G1SQ63lqYJejXEz03D5QFRVeLCGfVpps7t7Wi
/P/FFtvCKYkUc9jZLuka7oJdzPifiGiv4XsId0xqf/2ff2N5euQeVmu4xIiGG7iu
fDo+19u7U3A4U5VvqgULW8vkS3Ztwzvll2sIWp/CP1v33i54t6OoHCf65OJttge4
Q76SfVQvGPMa2L5/KYY4BIKemo5RKUbS/eOa61dg5L58JjVvhAQ8SQpn9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJysdZs9hd8AkckGNDY/uADTlfRVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbkt4MW16MkYzd0NSeVFZME5qLTRBTk9WOUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFrXzBT+j/rTzTInRpEY
5pbn2iJKX9SXX71PLDeMYkhgP2w6wPK9Q3WpIN1Ytq1touvkvpazO/iSrQrKT9mX
MYmZMHVrKTz4UmfGY+SyzFUZL8DuQXLysEuLvikATZ88qLjbgrl6E5YI6Ki3qvkx
GnB2cqu2nMxf5jyesnHqj4/KPWVdYKjvkxDnLktWatyRDz3kduD+sIujQVvorL9U
8SyQh9cJmnkEGnAdc76zPNbMKSSXZagwxonfya3R74fvt3k0nOyv3DFRfjNRq5AF
xF7ujKQphBVYsPuD2HErYK3visD6ExUwgN695u1tqz8SNVSld2pah1fDSHg4ASWa
FUM=
-----END CERTIFICATE-----
Generated at Mon May 12 18:36:33 2025 by rpki-client