Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8N6PZoRGh8S3VLYwFGXq-THI9c.roa
File: u8N6PZoRGh8S3VLYwFGXq-THI9c.roa (raw, json)
Hash identifier: OUjj+wZkp99smqfsHMxKlFrf1Fq2VCR3FSyIBSjL/G4=
Subject key identifier: BB:C3:7A:3D:9A:11:1A:1F:12:DD:52:D8:C0:51:97:AB:E4:C7:23:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2D779DEF7A9B1CC19E7495D0249FEFF0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8N6PZoRGh8S3VLYwFGXq-THI9c.roa
Signing time: Sat 14 Oct 2023 09:14:55 +0000
ROA not before: Sat 14 Oct 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:77:9d:ef:7a:9b:1c:c1:9e:74:95:d0:24:9f:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbc37a3d9a111a1f12dd52d8c05197abe4c723d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:c3:41:f1:13:61:85:ef:c7:0c:ff:14:f1:
f1:2d:f6:87:54:1d:53:63:dc:64:5d:5b:2d:ac:3c:
20:b1:26:47:5f:99:f0:95:e4:d7:88:4f:76:74:ef:
4b:e9:35:40:cb:fa:67:64:89:90:6c:41:a8:1a:cf:
21:c0:6d:9a:59:a3:fb:a3:d0:da:4b:8b:c5:3d:ec:
96:c4:48:3f:a5:a5:7b:1a:50:90:9c:20:a8:15:cd:
ba:c3:c3:04:88:42:49:b2:9b:d7:49:b5:de:7f:4c:
35:e7:e1:ba:cc:41:9a:89:03:d4:90:ca:e9:f1:2e:
ca:8e:0e:dd:7f:03:f8:1d:10:37:8f:40:c0:81:42:
73:45:1b:34:a5:73:c0:be:d5:56:af:07:0c:66:24:
53:af:40:ac:2d:86:fb:16:24:ce:8a:d5:b6:43:8d:
dc:52:13:3a:3f:91:48:7d:76:70:63:1b:cd:7d:b8:
94:fd:34:83:7b:d3:e2:81:e8:7a:e5:00:39:f7:92:
81:dd:8d:9e:84:8e:e1:f1:ff:d8:79:dd:05:20:96:
e4:f6:63:0a:61:16:f4:37:f4:17:59:8b:e7:dd:f9:
66:2d:b2:77:55:71:aa:f0:37:c6:79:31:f3:0a:ec:
0d:c2:cf:10:c1:05:c2:f3:3d:c5:23:02:38:13:4a:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:7A:3D:9A:11:1A:1F:12:DD:52:D8:C0:51:97:AB:E4:C7:23:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u8N6PZoRGh8S3VLYwFGXq-THI9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:ac:3e:26:4d:c2:7d:1a:37:24:62:ae:41:50:8a:b0:0f:d7:
95:7d:59:26:61:69:e2:9e:d5:a1:13:b1:1e:eb:0f:99:8f:c4:
61:96:07:27:22:a1:ae:17:26:b6:a7:8d:23:89:13:57:31:05:
d3:5b:b2:a8:92:9d:00:6a:be:fa:9f:f6:1d:ca:23:7f:94:1c:
0c:c7:08:42:a6:eb:4d:e1:40:2a:62:95:a2:00:ca:a0:24:8f:
14:b6:0c:2b:e4:bf:41:66:fe:95:f3:37:f3:f6:d9:62:a6:ba:
24:d1:ab:28:c3:72:56:6b:20:18:9e:e8:f7:b9:5a:60:28:9f:
fc:a2:58:c1:8c:18:79:58:f6:52:e2:dd:82:75:6b:79:20:4b:
95:d6:03:73:98:c6:e3:74:93:56:26:8b:a7:be:03:3d:08:cd:
9e:bf:b2:fe:25:7e:3c:57:43:c8:61:d9:2c:73:eb:38:fd:bb:
8a:f0:72:54:18:bb:ad:06:be:45:4e:09:37:3d:f6:27:fc:5d:
19:a1:ca:76:59:ce:1f:d3:6b:bc:12:bf:67:44:02:1e:a4:d1:
eb:0a:17:68:53:a8:0a:2f:ef:7d:1e:ff:c1:27:f9:d8:3a:48:
62:79:33:8f:96:3f:e9:b5:82:ca:28:3a:3b:bb:62:41:d7:97:
e5:15:fb:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYstd53vepscwZ50ldAkn+/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MDkxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmMzN2EzZDlhMTExYTFmMTJkZDUyZDhjMDUxOTdhYmU0YzcyM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoPDQfETYYXvxwz/FPHxLfaHVB1T
Y9xkXVstrDwgsSZHX5nwleTXiE92dO9L6TVAy/pnZImQbEGoGs8hwG2aWaP7o9Da
S4vFPeyWxEg/paV7GlCQnCCoFc26w8MEiEJJspvXSbXef0w15+G6zEGaiQPUkMrp
8S7Kjg7dfwP4HRA3j0DAgUJzRRs0pXPAvtVWrwcMZiRTr0CsLYb7FiTOitW2Q43c
UhM6P5FIfXZwYxvNfbiU/TSDe9Pigeh65QA595KB3Y2ehI7h8f/Yed0FIJbk9mMK
YRb0N/QXWYvn3flmLbJ3VXGq8DfGeTHzCuwNws8QwQXC8z3FIwI4E0rTpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLvDej2aERofEt1S2MBRl6vkxyPXMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdThONlBab1JHaDhTM1ZMWXdGR1hxLVRISTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMusPiZNwn0aNyRirkFQ
irAP15V9WSZhaeKe1aETsR7rD5mPxGGWBycioa4XJranjSOJE1cxBdNbsqiSnQBq
vvqf9h3KI3+UHAzHCEKm603hQCpilaIAyqAkjxS2DCvkv0Fm/pXzN/P22WKmuiTR
qyjDclZrIBie6Pe5WmAon/yiWMGMGHlY9lLi3YJ1a3kgS5XWA3OYxuN0k1Ymi6e+
Az0IzZ6/sv4lfjxXQ8hh2Sxz6zj9u4rwclQYu60GvkVOCTc99if8XRmhynZZzh/T
a7wSv2dEAh6k0esKF2hTqAov730e/8En+dg6SGJ5M4+WP+m1gsooOju7YkHXl+UV
+xI=
-----END CERTIFICATE-----
Generated at Sat May 10 14:52:24 2025 by rpki-client