Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sNLBE3x6YNaKD6VXAbRP3CDOZz4.roa
File: sNLBE3x6YNaKD6VXAbRP3CDOZz4.roa (raw, json)
Hash identifier: WwgvED1L1V3Aze5NjUQzmCML8K5JrPwY5e5ef359A7E=
Subject key identifier: B0:D2:C1:13:7C:7A:60:D6:8A:0F:A5:57:01:B4:4F:DC:20:CE:67:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C672C2A91E6A357FD711F7D3F53F67A8D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sNLBE3x6YNaKD6VXAbRP3CDOZz4.roa
Signing time: Thu 14 Dec 2023 07:13:16 +0000
ROA not before: Thu 14 Dec 2023 07:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:2c:2a:91:e6:a3:57:fd:71:1f:7d:3f:53:f6:7a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 07:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d2c1137c7a60d68a0fa55701b44fdc20ce673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:6d:5a:b7:70:d8:9a:24:05:0e:1f:98:ca:
56:4d:1d:d3:0c:ad:99:74:aa:51:eb:7a:f5:fa:8a:
12:6f:b8:36:d0:6d:3f:14:52:c2:72:6a:a6:35:dc:
b6:24:30:26:e2:87:34:c3:f6:f5:21:b6:d2:71:87:
e5:42:1c:f8:bb:06:c0:1b:99:f4:f0:6c:51:04:02:
5f:70:20:cd:6b:4e:e9:af:97:cd:97:5b:5f:4c:00:
c4:b0:e2:6a:74:63:93:53:5a:cc:1f:92:1e:ea:03:
31:3c:48:3f:13:34:bb:22:67:fb:3e:17:0c:cc:cf:
3b:96:ce:0c:0f:46:0c:02:3e:47:68:e8:a3:02:e9:
bb:d9:1e:f2:12:60:78:09:bf:43:e6:ce:fa:a3:1d:
cc:d9:79:fd:8a:0e:09:b5:08:e1:e6:39:e6:2b:0a:
66:38:e8:f4:f9:3c:60:62:0e:56:33:73:92:00:45:
c3:5d:d8:8b:2e:59:dd:bd:80:9e:0e:44:ca:e3:fd:
7f:72:63:77:52:63:e3:d6:f0:08:91:0c:02:d5:f8:
8f:7f:ed:f3:58:c3:e2:65:fb:b7:1a:b2:89:b1:28:
a3:f6:26:24:32:25:91:cf:17:f7:c8:8a:58:74:6b:
2c:6c:31:52:ce:f5:5f:0e:69:b5:78:d5:1d:42:b0:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:C1:13:7C:7A:60:D6:8A:0F:A5:57:01:B4:4F:DC:20:CE:67:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sNLBE3x6YNaKD6VXAbRP3CDOZz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:f5:b7:72:a8:1a:c8:0f:e7:05:de:07:cf:c1:a4:5f:5c:00:
d2:d1:9f:70:c5:d1:93:00:01:1d:f1:ba:01:6e:c4:81:03:33:
99:b6:aa:1d:52:81:b9:da:42:b4:d6:ab:64:78:71:6d:66:0b:
2f:6c:00:aa:54:e2:7e:67:40:e6:3b:e2:63:59:d5:db:e4:c9:
0a:bc:5e:4b:48:5f:a6:5c:90:1e:5b:19:8f:b3:53:d2:3c:37:
8b:fa:e7:76:e2:e1:5f:d3:69:4e:ff:c3:b0:46:1b:50:01:ac:
e3:c9:4b:20:86:54:84:38:9e:ee:0b:ca:61:5c:fb:b6:64:17:
12:08:96:f0:2d:7b:dc:d3:c8:f8:7f:c9:35:7a:73:30:38:7f:
61:a0:b2:c1:b3:1e:b6:25:ae:1f:13:79:d8:85:0b:88:31:14:
56:ec:57:0c:eb:88:73:84:4f:53:5c:68:79:94:32:d6:d6:2e:
4a:7c:14:16:d6:29:96:d8:a9:08:35:e7:de:f1:be:cc:fc:c4:
75:e4:0e:cb:ba:09:dd:21:8f:20:82:f6:e3:7d:de:d4:87:05:
f8:6a:3e:67:db:c2:6a:78:bb:cb:95:26:71:e3:f6:82:a3:b0:
b0:d0:cf:62:0f:9c:db:5a:d0:42:f7:fb:25:6d:08:52:01:0c:
b6:3d:5c:16
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxnLCqR5qNX/XEffT9T9nqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MDcxMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGQyYzExMzdjN2E2MGQ2OGEwZmE1NTcwMWI0NGZkYzIwY2U2NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlhtWrdw2JokBQ4fmMpWTR3TDK2Z
dKpR63r1+ooSb7g20G0/FFLCcmqmNdy2JDAm4oc0w/b1IbbScYflQhz4uwbAG5n0
8GxRBAJfcCDNa07pr5fNl1tfTADEsOJqdGOTU1rMH5Ie6gMxPEg/EzS7Imf7PhcM
zM87ls4MD0YMAj5HaOijAum72R7yEmB4Cb9D5s76ox3M2Xn9ig4JtQjh5jnmKwpm
OOj0+TxgYg5WM3OSAEXDXdiLLlndvYCeDkTK4/1/cmN3UmPj1vAIkQwC1fiPf+3z
WMPiZfu3GrKJsSij9iYkMiWRzxf3yIpYdGssbDFSzvVfDmm1eNUdQrCmlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLDSwRN8emDWig+lVwG0T9wgzmc+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc05MQkUzeDZZTmFLRDZWWEFiUlAzQ0RPWno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGD1t3KoGsgP5wXeB8/B
pF9cANLRn3DF0ZMAAR3xugFuxIEDM5m2qh1SgbnaQrTWq2R4cW1mCy9sAKpU4n5n
QOY74mNZ1dvkyQq8XktIX6ZckB5bGY+zU9I8N4v653bi4V/TaU7/w7BGG1ABrOPJ
SyCGVIQ4nu4LymFc+7ZkFxIIlvAte9zTyPh/yTV6czA4f2GgssGzHrYlrh8TediF
C4gxFFbsVwzriHOET1NcaHmUMtbWLkp8FBbWKZbYqQg1597xvsz8xHXkDsu6Cd0h
jyCC9uN93tSHBfhqPmfbwmp4u8uVJnHj9oKjsLDQz2IPnNta0EL3+yVtCFIBDLY9
XBY=
-----END CERTIFICATE-----
Generated at Tue May 13 08:28:44 2025 by rpki-client