Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rGmkzPM-vvnlnVFacNAkC0E-azI.roa
File: rGmkzPM-vvnlnVFacNAkC0E-azI.roa (raw, json)
Hash identifier: /g023qWH5CJTDaUVIaf1A/mIdbpnnvs9Oa9Ndn8PF2g=
Subject key identifier: AC:69:A4:CC:F3:3E:BE:F9:E5:9D:51:5A:70:D0:24:0B:41:3E:6B:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C27E29AE6FC0A5FB42EEB1CCB21035E2E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rGmkzPM-vvnlnVFacNAkC0E-azI.roa
Signing time: Sat 02 Dec 2023 00:16:51 +0000
ROA not before: Sat 02 Dec 2023 00:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:e2:9a:e6:fc:0a:5f:b4:2e:eb:1c:cb:21:03:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 00:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac69a4ccf33ebef9e59d515a70d0240b413e6b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:05:5f:28:3c:b5:e5:0b:0b:b9:36:31:83:
1b:cf:70:ba:6a:be:f4:27:f7:8e:8d:bb:ae:75:17:
92:af:07:ff:07:9e:18:5d:e7:9c:cf:04:c1:18:1e:
19:dc:b4:12:d3:55:cf:b1:9a:07:d1:76:22:4b:ac:
68:08:0f:97:a4:c8:d1:2d:73:59:e2:66:3c:a5:4e:
c9:45:e3:3f:9d:00:d6:ef:75:8d:1c:db:7e:70:37:
de:2e:06:8b:b1:d2:b0:af:6f:b4:4f:8f:f9:9f:4f:
d3:6d:b5:bf:f5:fa:16:00:6c:36:63:0e:68:a8:4c:
3f:d0:9b:d7:0b:48:cf:de:3f:f2:9a:2a:ad:d8:ef:
bb:53:fe:87:3c:14:ff:aa:ad:c6:d2:05:8c:83:e8:
20:50:7f:28:8a:9d:64:11:49:7b:bd:d9:2e:58:0e:
03:3b:9c:09:a4:c3:ff:70:63:a9:b0:8d:18:30:ac:
0c:f1:34:03:43:3e:f4:f9:0e:d5:2a:da:36:7a:76:
ff:64:19:ac:5b:cd:7d:09:fa:57:72:d8:59:0a:93:
ff:24:48:38:5b:9c:c7:03:8e:c1:d1:0f:4b:ed:d4:
29:09:6d:95:62:01:47:a2:84:ec:e3:2a:cc:42:36:
6a:9c:4f:3c:37:ff:34:85:9b:5b:9b:b7:6b:d6:b3:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:A4:CC:F3:3E:BE:F9:E5:9D:51:5A:70:D0:24:0B:41:3E:6B:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rGmkzPM-vvnlnVFacNAkC0E-azI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:60:28:b1:7b:a1:1d:12:34:53:ec:ba:e8:dc:86:4d:b4:7f:
e0:7a:f6:86:ea:76:52:06:17:ce:fe:db:02:4d:55:a8:81:b9:
56:12:47:a1:3c:97:de:60:e4:6e:b8:df:41:29:c3:af:1c:dc:
ae:a3:2a:f6:75:ae:64:2e:d1:48:5a:d7:27:04:74:aa:4b:2f:
0c:13:63:73:b6:4a:73:9e:0b:f4:ba:a4:e9:1a:50:6d:01:5d:
46:01:3f:11:a5:99:c8:98:c6:56:d5:cb:45:df:f8:fe:2f:da:
fa:cf:b8:0a:f6:95:ab:46:b0:6e:bb:a0:75:f1:59:36:92:2b:
5f:5e:91:fc:ca:4c:ea:eb:d6:ea:a3:ba:40:18:ea:7b:ab:01:
c5:4b:e6:12:35:63:d6:f6:1a:15:a5:22:ce:30:21:01:de:12:
d3:b0:cb:a8:0f:0c:a1:9a:b9:27:87:bc:2f:dd:b3:da:bc:67:
10:a6:8e:51:5d:3d:36:47:e8:18:11:af:ba:ee:4f:51:1f:c7:
b9:c6:b0:cf:9b:15:a0:b6:eb:8c:6b:be:cf:d0:a5:ed:70:59:
08:a5:c2:8d:d9:22:dc:b6:aa:60:5b:44:cb:7e:db:aa:94:8a:
56:61:72:c6:a3:f3:bc:18:26:8e:8a:72:9f:42:cd:bf:d0:fc:
6b:9d:26:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwn4prm/ApftC7rHMshA14uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAyMDAxNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzY5YTRjY2YzM2ViZWY5ZTU5ZDUxNWE3MGQwMjQwYjQxM2U2YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHgFXyg8teULC7k2MYMbz3C6ar70
J/eOjbuudReSrwf/B54YXeeczwTBGB4Z3LQS01XPsZoH0XYiS6xoCA+XpMjRLXNZ
4mY8pU7JReM/nQDW73WNHNt+cDfeLgaLsdKwr2+0T4/5n0/TbbW/9foWAGw2Yw5o
qEw/0JvXC0jP3j/ymiqt2O+7U/6HPBT/qq3G0gWMg+ggUH8oip1kEUl7vdkuWA4D
O5wJpMP/cGOpsI0YMKwM8TQDQz70+Q7VKto2enb/ZBmsW819CfpXcthZCpP/JEg4
W5zHA47B0Q9L7dQpCW2VYgFHooTs4yrMQjZqnE88N/80hZtbm7dr1rMcGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKxppMzzPr755Z1RWnDQJAtBPmsyMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvckdta3pQTS12dm5sblZGYWNOQWtDMEUtYXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG1gKLF7oR0SNFPsuujc
hk20f+B69obqdlIGF87+2wJNVaiBuVYSR6E8l95g5G6430Epw68c3K6jKvZ1rmQu
0Uha1ycEdKpLLwwTY3O2SnOeC/S6pOkaUG0BXUYBPxGlmciYxlbVy0Xf+P4v2vrP
uAr2latGsG67oHXxWTaSK19ekfzKTOrr1uqjukAY6nurAcVL5hI1Y9b2GhWlIs4w
IQHeEtOwy6gPDKGauSeHvC/ds9q8ZxCmjlFdPTZH6BgRr7ruT1Efx7nGsM+bFaC2
64xrvs/Qpe1wWQilwo3ZIty2qmBbRMt+26qUilZhcsaj87wYJo6Kcp9Czb/Q/Gud
JvE=
-----END CERTIFICATE-----
Generated at Sat May 10 13:33:33 2025 by rpki-client