Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svmoiZHXA-aVgXLktj9Je0vc1wY.roa
File: svmoiZHXA-aVgXLktj9Je0vc1wY.roa (raw, json)
Hash identifier: 0rkqd564Xr84RV8MvggjXpghr2nwyl8y6WjJWc+wNJ4=
Subject key identifier: B2:F9:A8:89:91:D7:03:E6:95:81:72:E4:B6:3F:49:7B:4B:DC:D7:06
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2B49247A75A3AF9AA2DEAF6E7E1A3680
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svmoiZHXA-aVgXLktj9Je0vc1wY.roa
Signing time: Fri 13 Oct 2023 23:04:55 +0000
ROA not before: Fri 13 Oct 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:2b48:a5f6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2b:49:24:7a:75:a3:af:9a:a2:de:af:6e:7e:1a:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f9a88991d703e6958172e4b63f497b4bdcd706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:2f:23:1a:68:b5:43:b1:e9:9c:77:cc:d5:
7d:9c:63:11:44:eb:40:93:f1:ae:6e:cf:70:e8:9d:
36:92:e3:6b:40:82:90:39:e8:e7:b1:52:13:20:6e:
92:56:18:9d:42:9d:c7:7a:5b:e5:4e:2e:2f:8e:8c:
c3:50:c9:99:99:57:72:24:c4:dd:59:df:45:7e:eb:
b8:53:8c:a0:e7:4e:38:0f:e2:f7:0a:2a:f6:5c:6e:
bc:eb:68:f6:a4:b1:7b:a6:1d:bc:47:bb:e7:cd:2e:
1e:d4:5b:8a:62:67:2c:59:eb:e0:99:89:9d:68:4e:
75:8b:54:9d:2e:99:63:4c:3a:6e:71:80:c5:b9:29:
5e:93:3b:36:4c:5f:9c:77:e1:53:14:6b:fd:05:10:
3e:ba:f4:81:60:83:83:15:dd:70:d0:50:f6:81:2b:
13:d2:f2:fe:70:3f:c5:fe:90:ec:d6:3a:37:f8:50:
6c:7d:68:ab:91:92:dc:18:ef:79:98:d8:ef:b0:79:
c7:44:57:17:fc:a7:e9:6c:48:a7:3c:45:4a:80:73:
b4:64:ff:2f:d5:a3:52:36:55:1c:0d:5d:37:36:51:
a5:3f:e9:81:9c:07:6f:85:b8:5f:96:da:78:a4:3c:
9c:61:df:7d:68:c2:f0:19:22:bc:fb:ae:36:b8:3b:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:A8:89:91:D7:03:E6:95:81:72:E4:B6:3F:49:7B:4B:DC:D7:06
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svmoiZHXA-aVgXLktj9Je0vc1wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:3a:4e:67:54:81:4f:fd:ab:0f:4e:34:50:94:55:e3:8a:d7:
9b:9e:ab:1f:fa:c5:f6:5b:c1:9d:95:24:bc:d4:b7:6d:b5:3c:
e7:61:c5:b5:98:81:68:27:ed:d4:9f:13:01:19:f9:4e:86:41:
92:22:67:c5:2a:4c:cd:d8:29:04:b8:67:23:01:10:72:7f:0e:
d6:d5:0f:b2:6e:b3:b1:6f:0b:24:76:01:c2:de:f0:b6:88:9f:
22:f6:cf:ab:6e:cd:fe:3b:4e:55:4e:36:27:4a:b9:34:80:86:
9a:98:0e:c3:43:b8:65:99:a2:08:43:78:5c:75:8c:58:23:ad:
ed:fe:34:6f:ea:29:a1:95:9f:80:89:2d:07:56:8e:3d:e1:30:
c4:0c:51:7f:1c:32:90:f5:dc:b0:24:1d:f2:5c:cf:b7:f7:5f:
f9:b3:59:4e:e9:f9:78:2e:26:51:a5:85:d5:45:2a:1c:c6:57:
c2:e4:ab:ad:d2:22:c6:c8:6f:41:5a:cf:9c:a4:35:da:5f:a4:
7f:c6:91:30:17:08:91:dc:91:83:25:b3:79:bb:d7:b1:66:9d:
b9:b3:a1:17:05:a6:42:a0:1a:b4:71:2b:ac:55:6c:26:73:e5:
71:50:1e:70:30:4c:4a:e0:9a:16:fb:bb:d1:d5:f2:a3:a1:de:
83:ba:2a:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsrSSR6daOvmqLer25+GjaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMjMwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmY5YTg4OTkxZDcwM2U2OTU4MTcyZTRiNjNmNDk3YjRiZGNkNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzYvIxpotUOx6Zx3zNV9nGMRROtA
k/Gubs9w6J02kuNrQIKQOejnsVITIG6SVhidQp3HelvlTi4vjozDUMmZmVdyJMTd
Wd9Ffuu4U4yg5044D+L3Cir2XG6862j2pLF7ph28R7vnzS4e1FuKYmcsWevgmYmd
aE51i1SdLpljTDpucYDFuSlekzs2TF+cd+FTFGv9BRA+uvSBYIODFd1w0FD2gSsT
0vL+cD/F/pDs1jo3+FBsfWirkZLcGO95mNjvsHnHRFcX/KfpbEinPEVKgHO0ZP8v
1aNSNlUcDV03NlGlP+mBnAdvhbhfltp4pDycYd99aMLwGSK8+642uDtHdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLL5qImR1wPmlYFy5LY/SXtL3NcGMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc3Ztb2laSFhBLWFWZ1hMa3RqOUplMHZjMXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFM6TmdUgU/9qw9ONFCU
VeOK15ueqx/6xfZbwZ2VJLzUt221POdhxbWYgWgn7dSfEwEZ+U6GQZIiZ8UqTM3Y
KQS4ZyMBEHJ/DtbVD7Jus7FvCyR2AcLe8LaInyL2z6tuzf47TlVONidKuTSAhpqY
DsNDuGWZoghDeFx1jFgjre3+NG/qKaGVn4CJLQdWjj3hMMQMUX8cMpD13LAkHfJc
z7f3X/mzWU7p+XguJlGlhdVFKhzGV8Lkq63SIsbIb0Faz5ykNdpfpH/GkTAXCJHc
kYMls3m717FmnbmzoRcFpkKgGrRxK6xVbCZz5XFQHnAwTErgmhb7u9HV8qOh3oO6
Kpk=
-----END CERTIFICATE-----
Generated at Wed May 14 20:54:01 2025 by rpki-client