Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qLLCq9Q_7r36nAxp3UeFZ-59bYQ.roa
File: qLLCq9Q_7r36nAxp3UeFZ-59bYQ.roa (raw, json)
Hash identifier: qXL9PY4NHp90AzJnKb9VNztkxjZkGOgR4SVohV4w07A=
Subject key identifier: A8:B2:C2:AB:D4:3F:EE:BD:FA:9C:0C:69:DD:47:85:67:EE:7D:6D:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B96CA350936895DAC3E2CDBEA53E7762D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qLLCq9Q_7r36nAxp3UeFZ-59bYQ.roa
Signing time: Fri 03 Nov 2023 20:05:16 +0000
ROA not before: Fri 03 Nov 2023 20:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:96c9:7bd4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:ca:35:09:36:89:5d:ac:3e:2c:db:ea:53:e7:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 20:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b2c2abd43feebdfa9c0c69dd478567ee7d6d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:d4:93:46:59:c7:3d:fb:97:fd:2a:c4:20:
8a:6c:a0:02:06:7e:00:59:5f:24:06:d3:7f:6b:cb:
41:8b:44:b6:8e:ee:c2:bf:1a:0d:b3:b9:79:16:cb:
6f:e3:10:8e:c5:36:4c:a4:a8:75:b8:c7:c4:66:6c:
30:f7:54:06:74:e8:e7:b1:2b:85:e2:16:91:f7:d1:
4e:af:91:3c:d8:9d:19:e2:dc:3e:a4:8e:8a:f6:0b:
c4:39:a1:ea:af:e3:8f:30:54:6e:ae:df:96:d8:ac:
fa:a1:5b:a6:17:40:7b:7e:2d:6d:7d:5c:91:ab:d5:
65:d7:0c:94:10:ce:1d:37:f3:34:d9:50:1a:bb:5b:
0e:a9:90:f5:a2:29:11:f9:27:9d:e5:fc:6f:7e:ed:
42:d0:ad:4c:b7:7c:45:e1:45:39:50:1c:3d:7b:c5:
d7:bc:9f:c5:75:5c:3c:76:21:db:4f:bd:c5:76:ad:
ba:69:1a:64:6a:96:e9:8a:cc:0b:55:85:5a:05:64:
a8:5a:1b:5d:55:bf:69:5c:51:ae:1e:52:c5:2a:6f:
02:e9:28:21:b2:63:ef:26:9a:16:a9:83:f5:d3:54:
c5:e7:c5:80:70:52:b8:dc:45:74:bc:03:60:69:da:
b4:bd:7e:89:67:05:c3:ab:bf:f2:e3:ca:aa:ba:55:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:C2:AB:D4:3F:EE:BD:FA:9C:0C:69:DD:47:85:67:EE:7D:6D:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qLLCq9Q_7r36nAxp3UeFZ-59bYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:16:08:6b:fa:64:bb:1f:71:e8:6e:23:a7:31:7d:ff:9c:d2:
7f:13:cb:1f:c0:f4:78:88:1e:8e:5f:f4:f6:88:f7:b0:fd:e3:
2f:2f:02:a4:77:94:5f:26:10:8d:70:f0:7f:50:61:ac:15:6d:
0f:0f:49:2a:9f:23:73:46:25:d7:1f:3b:f3:21:be:35:df:08:
04:1d:f4:f4:11:71:30:9d:cc:cf:1c:e0:90:8b:2d:3e:b5:28:
db:e2:0b:a3:83:07:9e:bf:b1:56:fd:9a:73:de:a4:85:5e:25:
2b:81:2e:c3:7f:9c:6e:23:c3:d5:80:f2:e8:d2:80:14:7f:ab:
a9:98:8e:99:4d:c6:c9:bc:c3:1f:2b:82:a6:d9:00:8a:07:bf:
8a:cf:e6:59:44:33:f2:42:64:f3:c5:4f:13:21:b7:5c:7a:5f:
a3:91:9a:82:ee:36:29:a7:95:e8:f7:d2:52:de:f9:00:82:e8:
c5:c4:1e:5b:16:7d:f7:8b:d1:9e:9b:51:24:ef:d8:3c:80:f4:
e3:92:21:93:e7:f3:38:11:66:50:9e:c4:31:91:29:66:57:2f:
2d:8a:e7:a5:00:05:9d:17:2b:48:ec:54:76:78:06:e8:eb:bb:
b6:9d:84:87:bf:47:ba:e4:2f:29:cb:38:04:13:ea:03:82:8b:
ad:08:fd:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuWyjUJNoldrD4s2+pT53YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAzMjAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGIyYzJhYmQ0M2ZlZWJkZmE5YzBjNjlkZDQ3ODU2N2VlN2Q2ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELUk0ZZxz37l/0qxCCKbKACBn4A
WV8kBtN/a8tBi0S2ju7CvxoNs7l5Fstv4xCOxTZMpKh1uMfEZmww91QGdOjnsSuF
4haR99FOr5E82J0Z4tw+pI6K9gvEOaHqr+OPMFRurt+W2Kz6oVumF0B7fi1tfVyR
q9Vl1wyUEM4dN/M02VAau1sOqZD1oikR+Sed5fxvfu1C0K1Mt3xF4UU5UBw9e8XX
vJ/FdVw8diHbT73Fdq26aRpkapbpiswLVYVaBWSoWhtdVb9pXFGuHlLFKm8C6Sgh
smPvJpoWqYP101TF58WAcFK43EV0vANgadq0vX6JZwXDq7/y48qqulU6XwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKiywqvUP+69+pwMad1HhWfufW2EMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcUxMQ3E5UV83cjM2bkF4cDNVZUZaLTU5YllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJcWCGv6ZLsfcehuI6cx
ff+c0n8Tyx/A9HiIHo5f9PaI97D94y8vAqR3lF8mEI1w8H9QYawVbQ8PSSqfI3NG
JdcfO/MhvjXfCAQd9PQRcTCdzM8c4JCLLT61KNviC6ODB56/sVb9mnPepIVeJSuB
LsN/nG4jw9WA8ujSgBR/q6mYjplNxsm8wx8rgqbZAIoHv4rP5llEM/JCZPPFTxMh
t1x6X6ORmoLuNimnlej30lLe+QCC6MXEHlsWffeL0Z6bUSTv2DyA9OOSIZPn8zgR
ZlCexDGRKWZXLy2K56UABZ0XK0jsVHZ4Bujru7adhIe/R7rkLynLOAQT6gOCi60I
/QE=
-----END CERTIFICATE-----
Generated at Sun May 11 18:52:03 2025 by rpki-client