Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRlcZCj68mLfwRvQ7CJcj7hA68E.roa
File: nRlcZCj68mLfwRvQ7CJcj7hA68E.roa (raw, json)
Hash identifier: R3TAjcqXSoSIWFlxFmHBBrFoOaDhawL1Y8QrThoGuhA=
Subject key identifier: 9D:19:5C:64:28:FA:F2:62:DF:C1:1B:D0:EC:22:5C:8F:B8:40:EB:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE28B62D2AC03AF2941E9DC8199D2D517
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRlcZCj68mLfwRvQ7CJcj7hA68E.roa
Signing time: Fri 29 Sep 2023 20:05:00 +0000
ROA not before: Fri 29 Sep 2023 20:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e28a:fdae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:8b:62:d2:ac:03:af:29:41:e9:dc:81:99:d2:d5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 20:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d195c6428faf262dfc11bd0ec225c8fb840ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:20:44:17:7b:ed:13:e3:3c:4d:60:28:9c:
20:24:56:01:4d:8d:2e:ff:d8:1a:65:ff:75:23:bd:
70:06:a6:03:fe:f6:6f:11:b2:c0:e0:a4:c6:31:32:
d6:f3:90:91:5f:81:e4:69:98:e7:0c:52:83:24:39:
5e:86:48:83:a0:8d:e4:00:39:02:90:72:f4:4d:9c:
7a:c4:86:b0:6e:63:04:58:e2:ee:37:70:01:23:e9:
7a:38:5d:da:b3:56:a5:db:83:4f:e5:d8:b9:97:d4:
c8:bb:0f:c2:a7:c9:63:30:ad:b1:83:83:05:77:44:
ac:c8:6c:0d:24:4c:2d:f6:48:cf:fd:49:cf:0b:e5:
d4:06:49:3c:8e:04:5a:df:c3:77:f6:08:20:ed:78:
78:03:3d:23:56:31:2d:ee:14:aa:51:6d:63:1e:3b:
a7:2d:26:61:82:c4:5b:36:ca:5e:71:fb:6e:7d:8a:
cd:85:41:81:88:ee:44:94:b0:7d:29:c3:03:0d:c7:
e3:5f:f6:a8:40:f9:48:ec:d5:e3:7a:4b:0b:61:ff:
b6:45:6b:fe:39:dc:23:29:82:55:66:98:03:3e:ab:
1b:9c:93:7f:82:13:6a:2f:19:6e:ae:9c:ca:03:e4:
50:c9:47:31:06:61:16:8c:61:1a:03:7f:23:a3:7d:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:5C:64:28:FA:F2:62:DF:C1:1B:D0:EC:22:5C:8F:B8:40:EB:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRlcZCj68mLfwRvQ7CJcj7hA68E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:35:a7:1f:c5:ca:99:06:e5:64:c7:41:86:1b:ba:f7:3d:59:
b8:84:69:2b:40:2b:44:98:66:30:1e:62:85:68:93:2d:b6:a5:
17:48:f3:22:76:e8:16:f6:84:d2:35:aa:30:00:1a:d0:97:a0:
41:a6:d5:46:54:07:89:4d:75:42:65:4a:79:8f:4e:fa:34:88:
24:d1:af:fd:03:e2:c1:98:37:9d:3a:7d:4a:d3:e8:ab:b2:bb:
02:0d:a4:75:02:43:f3:f2:8d:4a:3b:b7:5f:b8:90:76:8f:8e:
72:ee:ab:55:d6:34:73:bb:8a:f4:7f:eb:21:f7:30:b6:4b:73:
a6:7b:af:49:0d:a6:a1:50:c2:bd:bf:40:9e:ea:e5:23:45:b3:
be:56:cf:11:d3:fa:06:59:ed:4f:40:b0:3f:fa:98:c3:b7:92:
e2:b4:21:c1:41:79:0d:73:22:55:bb:ef:f2:4d:77:86:e5:78:
82:c5:a9:8f:80:ce:ad:77:6c:35:f1:f1:89:b2:1b:1b:d9:9f:
cb:2e:c6:91:bd:fa:88:02:dd:28:74:57:33:58:ec:e0:3f:ba:
0e:47:41:48:28:71:1e:aa:ac:e0:65:54:ef:59:94:ab:34:a4:
a8:ba:19:69:9c:5d:b9:7c:2f:72:ae:bc:2d:7f:bc:dd:3a:0a:
6a:80:c7:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrii2LSrAOvKUHp3IGZ0tUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI5MjAwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDE5NWM2NDI4ZmFmMjYyZGZjMTFiZDBlYzIyNWM4ZmI4NDBlYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdIgRBd77RPjPE1gKJwgJFYBTY0u
/9gaZf91I71wBqYD/vZvEbLA4KTGMTLW85CRX4HkaZjnDFKDJDlehkiDoI3kADkC
kHL0TZx6xIawbmMEWOLuN3ABI+l6OF3as1al24NP5di5l9TIuw/Cp8ljMK2xg4MF
d0SsyGwNJEwt9kjP/UnPC+XUBkk8jgRa38N39ggg7Xh4Az0jVjEt7hSqUW1jHjun
LSZhgsRbNspecftufYrNhUGBiO5ElLB9KcMDDcfjX/aoQPlI7NXjeksLYf+2RWv+
OdwjKYJVZpgDPqsbnJN/ghNqLxlurpzKA+RQyUcxBmEWjGEaA38jo30/XwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ0ZXGQo+vJi38Eb0OwiXI+4QOvBMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvblJsY1pDajY4bUxmd1J2UTdDSmNqN2hBNjhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABU1px/FypkG5WTHQYYb
uvc9WbiEaStAK0SYZjAeYoVoky22pRdI8yJ26Bb2hNI1qjAAGtCXoEGm1UZUB4lN
dUJlSnmPTvo0iCTRr/0D4sGYN506fUrT6KuyuwINpHUCQ/PyjUo7t1+4kHaPjnLu
q1XWNHO7ivR/6yH3MLZLc6Z7r0kNpqFQwr2/QJ7q5SNFs75WzxHT+gZZ7U9AsD/6
mMO3kuK0IcFBeQ1zIlW77/JNd4bleILFqY+Azq13bDXx8YmyGxvZn8suxpG9+ogC
3Sh0VzNY7OA/ug5HQUgocR6qrOBlVO9ZlKs0pKi6GWmcXbl8L3KuvC1/vN06CmqA
xyY=
-----END CERTIFICATE-----
Generated at Wed May 14 21:03:01 2025 by rpki-client