Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdGLuzBZDAh1KRHlmsT7Y1eaZDM.roa
File: rdGLuzBZDAh1KRHlmsT7Y1eaZDM.roa (raw, json)
Hash identifier: jbcoE+NUtZP9Y3Srcj0NBIOUY4eScJrB3ko9Hry3GkM=
Subject key identifier: AD:D1:8B:BB:30:59:0C:08:75:29:11:E5:9A:C4:FB:63:57:9A:64:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDB7469959363F3D95669C5AC372F2A5B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdGLuzBZDAh1KRHlmsT7Y1eaZDM.roa
Signing time: Fri 17 Nov 2023 04:05:21 +0000
ROA not before: Fri 17 Nov 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:db73:872f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:db:74:69:95:93:63:f3:d9:56:69:c5:ac:37:2f:2a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=add18bbb30590c08752911e59ac4fb63579a6433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:92:79:4a:23:94:13:44:7d:e4:b9:5a:24:
19:e9:b2:21:45:22:c6:3e:d1:91:26:7a:4e:3a:ca:
5e:56:2f:c2:fe:39:27:2a:27:39:aa:8e:67:e1:ed:
c4:bc:e3:ac:c3:a7:8a:d0:07:32:d8:7a:fc:93:43:
e8:94:f9:fb:96:c5:75:ba:f4:7c:22:5f:75:e4:b8:
16:41:93:ba:2c:42:26:be:76:c0:d5:52:97:45:90:
e8:1c:06:89:5b:24:a2:a1:67:d4:81:9c:e7:31:65:
2f:23:d3:c5:7b:98:4b:ff:bc:08:4b:b5:51:87:e9:
7c:e7:ad:d7:88:1e:1f:7f:a1:ca:48:78:18:c3:96:
07:fa:6b:b3:89:a8:f9:48:ad:26:8d:a0:6b:28:ea:
04:d8:e8:e0:f9:75:7a:2a:fb:84:73:a0:24:dd:75:
be:29:cc:78:f3:1d:ee:54:b5:ad:32:c2:b9:fb:4e:
c4:71:b3:5d:e8:7e:4a:bb:1d:79:da:9c:c9:e6:87:
28:4c:f6:24:aa:21:2e:1a:aa:81:9e:6d:9f:3a:08:
27:74:89:82:14:51:45:55:b6:ae:ba:55:f5:41:16:
e2:58:72:c7:c8:b6:3b:18:47:74:31:3b:95:ac:4b:
1e:06:97:80:c6:83:fc:a0:c6:c1:84:0b:dc:be:40:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:8B:BB:30:59:0C:08:75:29:11:E5:9A:C4:FB:63:57:9A:64:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdGLuzBZDAh1KRHlmsT7Y1eaZDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:56:c1:23:17:67:ad:db:4f:b3:81:46:69:df:88:cb:eb:12:
ee:ac:a4:27:6a:fb:a2:4b:16:e4:65:e4:3c:d8:c6:9c:8b:c6:
9a:e3:dd:1f:72:95:99:ba:e9:3c:ed:2e:dd:ad:9d:59:24:24:
26:82:97:10:45:e8:6e:17:92:bd:b1:18:e6:c8:65:20:0c:41:
33:d3:48:80:7f:df:7e:eb:e9:a9:ac:51:c4:f0:d4:bc:85:33:
85:a1:65:50:c1:db:58:cb:a0:51:5f:a3:1f:04:e3:ce:57:63:
21:4f:aa:e9:fb:b0:72:2b:2d:9b:52:c3:03:65:c7:3c:f3:50:
c3:03:4a:2d:81:4b:31:26:e5:2c:4b:ed:73:d2:5d:73:7f:6e:
71:1e:63:0d:fb:63:fc:4c:78:da:7c:e1:b1:0b:d0:19:28:d8:
65:ff:6a:2c:38:ae:81:18:33:b4:b1:2c:9b:4d:80:19:7f:b2:
8f:d2:44:1a:0a:df:ec:0a:a3:a9:9e:a2:55:23:69:ae:62:d6:
cf:02:61:06:96:dd:6f:0f:66:8a:be:7a:57:24:f1:a9:f1:5a:
73:e6:6b:af:8a:cb:30:b1:5a:49:09:07:10:1d:76:a8:aa:ac:
61:a2:cc:3d:d8:55:8a:18:21:73:78:45:1f:55:c2:9e:e7:c1:
dc:e1:b6:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvbdGmVk2Pz2VZpxaw3LypbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE3MDQwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGQxOGJiYjMwNTkwYzA4NzUyOTExZTU5YWM0ZmI2MzU3OWE2NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmSeUojlBNEfeS5WiQZ6bIhRSLG
PtGRJnpOOspeVi/C/jknKic5qo5n4e3EvOOsw6eK0Acy2Hr8k0PolPn7lsV1uvR8
Il915LgWQZO6LEImvnbA1VKXRZDoHAaJWySioWfUgZznMWUvI9PFe5hL/7wIS7VR
h+l8563XiB4ff6HKSHgYw5YH+muziaj5SK0mjaBrKOoE2Ojg+XV6KvuEc6Ak3XW+
Kcx48x3uVLWtMsK5+07EcbNd6H5Kux152pzJ5ocoTPYkqiEuGqqBnm2fOggndImC
FFFFVbauulX1QRbiWHLHyLY7GEd0MTuVrEseBpeAxoP8oMbBhAvcvkDbZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK3Ri7swWQwIdSkR5ZrE+2NXmmQzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcmRHTHV6QlpEQWgxS1JIbG1zVDdZMWVhWkRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFRWwSMXZ63bT7OBRmnf
iMvrEu6spCdq+6JLFuRl5DzYxpyLxprj3R9ylZm66TztLt2tnVkkJCaClxBF6G4X
kr2xGObIZSAMQTPTSIB/337r6amsUcTw1LyFM4WhZVDB21jLoFFfox8E485XYyFP
qun7sHIrLZtSwwNlxzzzUMMDSi2BSzEm5SxL7XPSXXN/bnEeYw37Y/xMeNp84bEL
0Bko2GX/aiw4roEYM7SxLJtNgBl/so/SRBoK3+wKo6meolUjaa5i1s8CYQaW3W8P
Zoq+elck8anxWnPma6+KyzCxWkkJBxAddqiqrGGizD3YVYoYIXN4RR9Vwp7nwdzh
tvM=
-----END CERTIFICATE-----
Generated at Sat May 10 11:47:47 2025 by rpki-client