Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sw6BzU6DeiFBLPBM3r6KLO7_32M.roa
File: sw6BzU6DeiFBLPBM3r6KLO7_32M.roa (raw, json)
Hash identifier: pW57+ixGo7jKBGoUnrpTHdvyMLkopxAah5TyDN1Y2/A=
Subject key identifier: B3:0E:81:CD:4E:83:7A:21:41:2C:F0:4C:DE:BE:8A:2C:EE:FF:DF:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7F6BE22D9C62E4C904430F71DFBA663C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sw6BzU6DeiFBLPBM3r6KLO7_32M.roa
Signing time: Mon 30 Oct 2023 07:10:58 +0000
ROA not before: Mon 30 Oct 2023 07:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:7f65:eed6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:6b:e2:2d:9c:62:e4:c9:04:43:0f:71:df:ba:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 07:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30e81cd4e837a21412cf04cdebe8a2ceeffdf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:b6:8b:8d:6c:2e:77:94:0b:b2:85:92:81:
ea:6d:b3:43:3d:51:6a:f2:70:7b:f1:bd:d5:74:59:
50:11:60:12:3a:a1:b2:a5:78:5d:7c:69:6c:f3:cf:
01:3d:30:43:f5:96:70:f3:9e:7e:4b:58:f6:b6:6d:
04:17:1d:1c:f0:c2:d7:bb:b7:ee:5d:f4:a5:0b:4a:
57:5f:d3:30:e5:99:b7:c7:39:36:cc:fd:84:d9:19:
34:01:e1:40:e7:9b:28:5b:17:e9:4b:75:57:ad:69:
09:d4:19:0f:50:5f:40:6d:ca:61:23:34:32:33:6d:
19:a3:37:1b:cc:bb:8c:bd:a8:f9:ba:0b:02:1b:f4:
86:0f:43:dd:2f:36:fd:e8:13:07:ba:11:6f:77:b1:
7b:24:0f:71:4a:7b:70:b5:5f:35:60:e5:9b:c8:70:
8a:4b:1c:48:05:a5:3b:ff:3d:fd:37:cb:e9:86:74:
4c:25:1a:69:8e:6b:56:55:5f:c3:31:e2:96:ea:d2:
86:be:47:5e:ce:b8:3f:49:43:68:92:aa:16:ca:0e:
3f:42:40:de:2a:aa:5e:dd:d3:45:c1:0a:bf:41:4e:
36:97:97:29:a2:99:59:00:d1:00:98:d0:db:b0:1d:
b9:6d:55:39:34:08:2b:17:95:b5:5b:34:e5:4b:b3:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:81:CD:4E:83:7A:21:41:2C:F0:4C:DE:BE:8A:2C:EE:FF:DF:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sw6BzU6DeiFBLPBM3r6KLO7_32M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:c7:4c:15:40:d7:d2:79:b8:93:99:2c:d1:a1:7a:1d:c1:ec:
aa:42:03:f3:48:81:a3:d2:55:6f:f3:d3:61:5a:76:83:64:2b:
59:6d:94:51:d4:15:76:32:fe:d8:f5:28:90:f4:ea:17:0a:e1:
c4:53:11:d4:09:24:45:67:99:43:8f:9a:e1:31:6a:de:4a:bd:
4b:dc:c5:a4:89:25:77:8d:3c:42:ae:fa:d3:e8:a5:b1:41:f3:
1e:7d:cd:4a:a9:50:c5:14:22:07:52:50:be:2b:b5:e0:4c:a3:
67:5e:48:64:a1:ea:bc:66:ec:8d:0e:47:65:f2:e1:d5:59:46:
8f:a8:b9:5f:f5:70:3d:1c:82:be:cc:8f:57:79:6d:6b:dc:e7:
a8:7b:5c:3e:4a:39:ee:14:a8:38:18:ef:66:61:f7:e4:01:62:
96:28:95:76:e9:85:a2:db:de:fc:43:56:91:9a:29:c5:38:03:
ca:bd:02:59:d0:c4:6d:6c:ba:9a:bd:1e:85:28:f6:09:74:70:
46:25:4f:07:53:27:70:51:ba:2e:3b:7d:d9:fa:98:98:5b:8c:
9d:24:40:05:65:ff:3a:8d:c5:9d:f3:48:b7:d8:77:dd:bc:07:
1e:93:42:f0:97:a9:21:71:51:44:38:81:82:99:3b:3b:0e:c4:
71:2b:15:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt/a+ItnGLkyQRDD3HfumY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMwMDcxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzBlODFjZDRlODM3YTIxNDEyY2YwNGNkZWJlOGEyY2VlZmZkZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8K2i41sLneUC7KFkoHqbbNDPVFq
8nB78b3VdFlQEWASOqGypXhdfGls888BPTBD9ZZw855+S1j2tm0EFx0c8MLXu7fu
XfSlC0pXX9Mw5Zm3xzk2zP2E2Rk0AeFA55soWxfpS3VXrWkJ1BkPUF9AbcphIzQy
M20ZozcbzLuMvaj5ugsCG/SGD0PdLzb96BMHuhFvd7F7JA9xSntwtV81YOWbyHCK
SxxIBaU7/z39N8vphnRMJRppjmtWVV/DMeKW6tKGvkdezrg/SUNokqoWyg4/QkDe
Kqpe3dNFwQq/QU42l5cpoplZANEAmNDbsB25bVU5NAgrF5W1WzTlS7Mb5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLMOgc1Og3ohQSzwTN6+iizu/99jMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc3c2QnpVNkRlaUZCTFBCTTNyNktMTzdfMzJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHHHTBVA19J5uJOZLNGh
eh3B7KpCA/NIgaPSVW/z02FadoNkK1ltlFHUFXYy/tj1KJD06hcK4cRTEdQJJEVn
mUOPmuExat5KvUvcxaSJJXeNPEKu+tPopbFB8x59zUqpUMUUIgdSUL4rteBMo2de
SGSh6rxm7I0OR2Xy4dVZRo+ouV/1cD0cgr7Mj1d5bWvc56h7XD5KOe4UqDgY72Zh
9+QBYpYolXbphaLb3vxDVpGaKcU4A8q9AlnQxG1supq9HoUo9gl0cEYlTwdTJ3BR
ui47fdn6mJhbjJ0kQAVl/zqNxZ3zSLfYd928Bx6TQvCXqSFxUUQ4gYKZOzsOxHEr
FRU=
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:52 2025 by rpki-client