Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeY5Noii-f_a5tJs8Ij38Xg2DEk.roa
File: qeY5Noii-f_a5tJs8Ij38Xg2DEk.roa (raw, json)
Hash identifier: R5a6oQzXYg96o9m6PzLTYBuzcAIZ0akOyPss8rIpv9E=
Subject key identifier: A9:E6:39:36:88:A2:F9:FF:DA:E6:D2:6C:F0:88:F7:F1:78:36:0C:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B88368407DEF5C3593DB8CD6E62CBFA24
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeY5Noii-f_a5tJs8Ij38Xg2DEk.roa
Signing time: Wed 01 Nov 2023 00:09:15 +0000
ROA not before: Wed 01 Nov 2023 00:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:36:84:07:de:f5:c3:59:3d:b8:cd:6e:62:cb:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 00:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9e6393688a2f9ffdae6d26cf088f7f178360c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:f6:5b:c9:ad:6f:be:94:17:15:41:2d:3b:
4c:13:3a:9e:de:74:0a:8d:be:81:11:88:21:e0:ee:
43:2d:bc:c4:62:14:10:f5:ea:e3:9e:f0:ae:89:f9:
7d:92:f7:4e:e4:69:24:81:55:84:a1:2b:ef:29:c1:
3f:ea:1e:a2:c9:4a:dc:49:1c:cf:f8:a4:6e:27:8e:
3a:ed:d2:66:71:22:b0:40:00:84:e7:fd:ba:86:fe:
9c:dc:6c:b6:c2:f2:8e:42:85:5d:27:26:96:c3:b8:
5b:f9:13:4e:58:70:40:0c:ca:f9:79:40:59:e7:67:
8d:a1:37:09:f3:55:9d:64:ec:ad:4d:70:79:3f:54:
ac:3f:75:db:7f:2a:40:09:5c:cb:c1:7c:14:64:9e:
7b:f1:19:c0:37:82:80:50:52:5c:62:fe:24:00:1f:
75:ef:bb:21:0b:ab:d8:33:40:78:ad:84:e9:63:81:
83:c1:bf:d1:5c:e0:67:58:f4:41:ff:e9:74:bc:6b:
30:16:1b:20:3e:b9:7f:ef:fc:ef:a2:e9:cb:b1:4e:
dd:02:81:6b:b5:d2:c5:6b:cb:a5:7f:d1:e6:a9:78:
97:a6:e3:70:81:58:4d:bc:5c:17:79:76:0c:88:35:
bd:9e:80:ed:c3:50:2e:7a:09:ef:09:53:ee:c9:22:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:39:36:88:A2:F9:FF:DA:E6:D2:6C:F0:88:F7:F1:78:36:0C:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qeY5Noii-f_a5tJs8Ij38Xg2DEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:9f:a8:07:24:b7:1e:82:d2:ba:38:4b:96:5c:33:2e:85:29:
bb:61:4a:de:01:dd:56:10:6e:ff:f1:e2:b1:ce:26:d4:6f:ac:
df:3c:cf:2a:8e:ba:f4:85:c6:47:b7:e1:32:3e:71:dd:95:91:
27:08:2a:6a:cf:11:c2:ca:86:a5:bc:03:f8:f8:f1:bd:f1:8b:
48:10:f8:55:8a:0f:86:0a:28:e8:c2:0a:6d:50:09:6a:86:12:
b9:bf:4d:8d:bb:42:13:c8:39:f1:7e:fe:81:97:e8:d2:7a:b0:
e3:59:2e:26:a5:c3:4b:95:a2:23:09:6f:6a:51:92:d5:f3:c8:
21:cc:77:9b:4c:92:52:3a:f8:2e:5a:4d:12:c5:23:5e:5b:fb:
c2:f0:5b:d8:b1:b0:06:43:44:a5:de:56:1e:47:98:c7:bc:01:
e8:c3:86:f7:97:16:a2:b8:c7:a2:c4:b4:0d:4b:b2:88:63:7d:
e6:a5:6e:77:d5:39:d2:1f:2c:42:3e:2a:74:e9:6f:83:9d:5c:
ab:d5:e1:2e:46:39:2e:a7:f8:85:9d:d0:23:71:fd:8e:c9:b2:
fc:36:71:16:8d:56:7a:b1:f5:a4:4c:aa:f5:b3:7e:72:5e:83:
54:e8:b3:e0:d0:06:88:6f:a8:50:7e:36:12:b1:c4:28:8a:f0:
25:72:ca:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuINoQH3vXDWT24zW5iy/okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAxMDAwOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWU2MzkzNjg4YTJmOWZmZGFlNmQyNmNmMDg4ZjdmMTc4MzYwYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjP2W8mtb76UFxVBLTtMEzqe3nQK
jb6BEYgh4O5DLbzEYhQQ9erjnvCuifl9kvdO5GkkgVWEoSvvKcE/6h6iyUrcSRzP
+KRuJ4467dJmcSKwQACE5/26hv6c3Gy2wvKOQoVdJyaWw7hb+RNOWHBADMr5eUBZ
52eNoTcJ81WdZOytTXB5P1SsP3XbfypACVzLwXwUZJ578RnAN4KAUFJcYv4kAB91
77shC6vYM0B4rYTpY4GDwb/RXOBnWPRB/+l0vGswFhsgPrl/7/zvounLsU7dAoFr
tdLFa8ulf9HmqXiXpuNwgVhNvFwXeXYMiDW9noDtw1AuegnvCVPuySICdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKnmOTaIovn/2ubSbPCI9/F4NgxJMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcWVZNU5vaWktZl9hNXRKczhJajM4WGcyREVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJafqAcktx6C0ro4S5Zc
My6FKbthSt4B3VYQbv/x4rHOJtRvrN88zyqOuvSFxke34TI+cd2VkScIKmrPEcLK
hqW8A/j48b3xi0gQ+FWKD4YKKOjCCm1QCWqGErm/TY27QhPIOfF+/oGX6NJ6sONZ
Lialw0uVoiMJb2pRktXzyCHMd5tMklI6+C5aTRLFI15b+8LwW9ixsAZDRKXeVh5H
mMe8AejDhveXFqK4x6LEtA1LsohjfealbnfVOdIfLEI+KnTpb4OdXKvV4S5GOS6n
+IWd0CNx/Y7Jsvw2cRaNVnqx9aRMqvWzfnJeg1Tos+DQBohvqFB+NhKxxCiK8CVy
ynI=
-----END CERTIFICATE-----
Generated at Sat May 10 12:28:29 2025 by rpki-client