Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2q2kp_uKpIqtVDnE4q5M9Q5kHk.roa
File: x2q2kp_uKpIqtVDnE4q5M9Q5kHk.roa (raw, json)
Hash identifier: 8+5M3C3ne/RASTQ5Cm+pDXOX96X6eTTiY/LRU/lBvds=
Subject key identifier: C7:6A:B6:92:9F:EE:2A:92:2A:B5:50:E7:13:8A:B9:33:D4:39:90:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B16B707C06FA7FA6799E062DE0333FED2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2q2kp_uKpIqtVDnE4q5M9Q5kHk.roa
Signing time: Mon 09 Oct 2023 23:12:55 +0000
ROA not before: Mon 09 Oct 2023 23:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:b7:07:c0:6f:a7:fa:67:99:e0:62:de:03:33:fe:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 23:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c76ab6929fee2a922ab550e7138ab933d4399079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:43:52:9a:aa:09:20:9b:50:57:39:e8:aa:fd:
c2:73:86:e8:e1:5b:2e:15:a7:12:c3:bb:7a:22:73:
ee:0f:7c:61:22:75:bc:a5:cf:4d:6d:91:e9:66:e3:
b1:73:6d:58:af:a3:46:4a:fb:3f:03:50:9f:cc:18:
f2:12:91:73:76:d2:7b:50:e8:2e:6b:0f:ff:fe:e2:
63:1c:e8:e0:7b:45:0b:41:5c:6e:34:2f:cd:56:cc:
9e:34:48:aa:b5:0a:b6:b6:7e:83:18:6f:48:91:54:
9c:01:bc:9f:b8:3c:52:60:f9:7a:d8:32:63:eb:b0:
0e:53:4f:41:3e:22:af:50:3a:90:3e:55:be:a5:9e:
49:4c:dd:90:55:46:bd:66:09:98:98:e4:bd:7b:f5:
26:a2:12:56:9e:a1:b1:a4:ab:d7:ae:b2:fa:b5:be:
35:b2:9f:ac:69:d2:1b:25:06:44:35:58:de:50:f3:
04:91:a9:5d:05:40:2f:48:10:4b:7e:8e:b4:1d:d6:
ff:9a:fd:0c:d8:d3:a0:78:9b:f3:12:ac:a2:79:67:
5c:a2:28:89:ef:96:4f:9a:20:fc:e3:94:de:5e:fb:
1a:2c:c0:2b:ab:66:29:54:06:fc:f5:4e:2f:5e:7f:
22:ed:85:7a:bf:04:76:6e:8a:44:37:38:9e:02:0b:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:B6:92:9F:EE:2A:92:2A:B5:50:E7:13:8A:B9:33:D4:39:90:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2q2kp_uKpIqtVDnE4q5M9Q5kHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:c0:19:65:d4:23:fa:ac:ef:ed:90:c9:0b:a4:37:0c:d5:53:
1f:47:fb:8d:1a:0d:1f:56:ec:c7:9c:16:06:b0:d8:9d:8d:d0:
8d:e2:a5:d0:1b:61:24:0c:94:1a:05:93:55:9d:25:2d:ee:15:
5f:f1:59:bf:90:66:5a:cb:a7:ba:cf:23:b5:ff:b8:de:0e:90:
74:07:df:e1:2f:13:cc:50:12:51:b5:ff:ea:f9:d9:73:b5:39:
dd:7e:ba:ca:33:39:4b:83:5b:f2:7d:76:01:5a:8e:71:2a:14:
7f:15:46:4f:fc:99:17:d7:0c:bb:e9:04:1e:70:f6:fd:ba:a2:
7c:5a:92:b9:14:fc:35:15:72:c7:80:4d:0e:3b:3d:f2:13:1f:
3e:f9:44:42:f4:38:1b:53:21:fb:29:98:f2:71:8d:07:19:c5:
8b:4d:07:b2:62:6d:12:f1:99:1d:25:6b:f7:46:1f:46:68:58:
be:cd:dc:13:1d:bf:6e:a6:1a:03:e8:0c:1f:9c:ff:75:2b:c0:
97:c9:17:4c:d2:5d:ec:da:0e:cf:d9:54:41:3f:62:a6:78:82:
30:10:0d:c1:92:9e:e6:09:b2:b9:19:83:76:bb:37:4d:8f:ce:
7b:e4:17:1b:9b:02:d2:78:75:97:ab:d8:cc:51:ad:4e:94:3e:
ea:6f:4e:27
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsWtwfAb6f6Z5ngYt4DM/7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA5MjMxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzZhYjY5MjlmZWUyYTkyMmFiNTUwZTcxMzhhYjkzM2Q0Mzk5MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUNSmqoJIJtQVznoqv3Cc4bo4Vsu
FacSw7t6InPuD3xhInW8pc9NbZHpZuOxc21Yr6NGSvs/A1CfzBjyEpFzdtJ7UOgu
aw///uJjHOjge0ULQVxuNC/NVsyeNEiqtQq2tn6DGG9IkVScAbyfuDxSYPl62DJj
67AOU09BPiKvUDqQPlW+pZ5JTN2QVUa9ZgmYmOS9e/UmohJWnqGxpKvXrrL6tb41
sp+sadIbJQZENVjeUPMEkaldBUAvSBBLfo60Hdb/mv0M2NOgeJvzEqyieWdcoiiJ
75ZPmiD845TeXvsaLMArq2YpVAb89U4vXn8i7YV6vwR2bopENzieAgsbwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMdqtpKf7iqSKrVQ5xOKuTPUOZB5MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveDJxMmtwX3VLcElxdFZEbkU0cTVNOVE1a0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHHAGWXUI/qs7+2QyQuk
NwzVUx9H+40aDR9W7MecFgaw2J2N0I3ipdAbYSQMlBoFk1WdJS3uFV/xWb+QZlrL
p7rPI7X/uN4OkHQH3+EvE8xQElG1/+r52XO1Od1+usozOUuDW/J9dgFajnEqFH8V
Rk/8mRfXDLvpBB5w9v26onxakrkU/DUVcseATQ47PfITHz75REL0OBtTIfspmPJx
jQcZxYtNB7JibRLxmR0la/dGH0ZoWL7N3BMdv26mGgPoDB+c/3UrwJfJF0zSXeza
Ds/ZVEE/YqZ4gjAQDcGSnuYJsrkZg3a7N02PznvkFxubAtJ4dZer2MxRrU6UPupv
Tic=
-----END CERTIFICATE-----
Generated at Sat May 10 11:22:29 2025 by rpki-client