Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yER4ldLD6h7-eNgdIIwMyXKye_c.roa
File: yER4ldLD6h7-eNgdIIwMyXKye_c.roa (raw, json)
Hash identifier: +a9pSPusej5jC0vH47MvXL4PMwkJCnXiSoCSRrMAWi8=
Subject key identifier: C8:44:78:95:D2:C3:EA:1E:FE:78:D8:1D:20:8C:0C:C9:72:B2:7B:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4354E571F81DB27D0598CD956F7F0D3F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yER4ldLD6h7-eNgdIIwMyXKye_c.roa
Signing time: Wed 18 Oct 2023 15:08:39 +0000
ROA not before: Wed 18 Oct 2023 15:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4350:ef22/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:54:e5:71:f8:1d:b2:7d:05:98:cd:95:6f:7f:0d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 15:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8447895d2c3ea1efe78d81d208c0cc972b27bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:15:5e:f3:f6:ab:dc:fd:0c:d9:80:60:17:
5a:f4:a7:19:cf:28:55:f6:dd:02:58:2c:d6:6e:54:
f5:ec:4e:2f:e7:c3:e4:6d:42:95:3a:df:8e:73:63:
63:ee:6c:fd:63:8a:0c:a8:f1:41:e0:77:0c:db:8f:
77:b4:fd:84:5a:59:68:c3:a5:e7:93:32:f5:7f:6c:
5e:8a:1b:e3:df:76:2d:c5:25:ea:93:02:cc:e4:00:
0b:64:47:1f:a3:5a:2a:93:3c:1c:15:0b:58:8c:a0:
a2:c4:70:b3:6d:e0:06:7e:4b:b2:68:f5:81:47:2d:
9c:29:00:1a:fe:aa:4d:cd:11:55:9f:a8:41:25:84:
87:32:5e:f2:51:6a:ff:87:2f:88:4e:1e:65:3d:c1:
12:ac:36:e1:39:d6:16:9b:8b:e3:cc:86:98:5f:cf:
d0:31:29:8e:34:74:a2:08:9f:32:1a:7b:24:09:6b:
fd:30:9d:a5:bf:ce:c2:f7:09:7f:2a:3c:e3:cc:58:
fa:85:a6:ef:4c:25:ed:c2:bf:f6:63:5e:1d:37:28:
44:0e:22:01:22:ff:25:21:1a:2e:af:1c:5d:7c:85:
a0:0e:d9:cb:1a:7f:08:de:98:13:84:f4:63:90:90:
cb:4b:a9:7d:09:79:16:47:af:ba:1b:ad:96:9f:31:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:78:95:D2:C3:EA:1E:FE:78:D8:1D:20:8C:0C:C9:72:B2:7B:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yER4ldLD6h7-eNgdIIwMyXKye_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:6d:69:c4:a4:90:ed:fa:0a:e7:9c:bf:55:18:52:1f:b7:ab:
19:12:bd:ad:d1:eb:ec:ce:09:55:f6:a4:08:5d:07:60:3a:18:
6c:e9:71:79:af:6e:71:e9:da:62:6f:37:3f:43:b0:37:85:47:
8e:fb:39:48:47:bc:e8:13:c3:1c:23:fa:5b:0f:0d:b4:06:93:
4b:32:7e:72:95:1a:d4:4d:ae:2a:96:39:5e:6c:ac:91:89:b5:
cf:13:6e:59:ac:5f:12:ee:1f:c7:e9:f1:51:67:34:30:40:18:
81:d3:9b:39:61:d2:16:d5:b4:b5:59:b3:79:3f:74:a0:91:68:
ae:5a:ee:7f:a8:c2:af:d2:6b:3c:84:46:2f:a5:65:83:ea:90:
30:70:74:a2:1e:fc:36:80:14:b6:ea:b6:c6:b4:0d:12:ae:89:
df:cc:e7:30:4a:e0:67:9c:41:f7:70:ff:a3:1b:d9:73:65:3f:
aa:c6:71:f4:85:cd:4b:b6:77:89:20:91:91:fd:64:f1:bf:e6:
68:4c:a0:05:29:dc:bc:c1:2e:78:80:32:32:d6:3d:35:b3:c4:
be:f0:6f:09:c9:59:0e:1e:bd:ed:72:d4:39:0f:6f:76:a4:db:
55:8c:f3:6d:04:9a:80:cd:55:6a:2a:06:6c:99:28:e6:9d:07:
55:d5:2c:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtDVOVx+B2yfQWYzZVvfw0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE4MTUwODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ0Nzg5NWQyYzNlYTFlZmU3OGQ4MWQyMDhjMGNjOTcyYjI3YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJEVXvP2q9z9DNmAYBda9KcZzyhV
9t0CWCzWblT17E4v58PkbUKVOt+Oc2Nj7mz9Y4oMqPFB4HcM2493tP2EWllow6Xn
kzL1f2xeihvj33YtxSXqkwLM5AALZEcfo1oqkzwcFQtYjKCixHCzbeAGfkuyaPWB
Ry2cKQAa/qpNzRFVn6hBJYSHMl7yUWr/hy+ITh5lPcESrDbhOdYWm4vjzIaYX8/Q
MSmONHSiCJ8yGnskCWv9MJ2lv87C9wl/KjzjzFj6habvTCXtwr/2Y14dNyhEDiIB
Iv8lIRourxxdfIWgDtnLGn8I3pgThPRjkJDLS6l9CXkWR6+6G62WnzEWjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMhEeJXSw+oe/njYHSCMDMlysnv3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveUVSNGxkTEQ2aDctZU5nZElJd015WEt5ZV9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKptacSkkO36Cuecv1UY
Uh+3qxkSva3R6+zOCVX2pAhdB2A6GGzpcXmvbnHp2mJvNz9DsDeFR477OUhHvOgT
wxwj+lsPDbQGk0syfnKVGtRNriqWOV5srJGJtc8TblmsXxLuH8fp8VFnNDBAGIHT
mzlh0hbVtLVZs3k/dKCRaK5a7n+owq/SazyERi+lZYPqkDBwdKIe/DaAFLbqtsa0
DRKuid/M5zBK4GecQfdw/6Mb2XNlP6rGcfSFzUu2d4kgkZH9ZPG/5mhMoAUp3LzB
LniAMjLWPTWzxL7wbwnJWQ4eve1y1DkPb3ak21WM820EmoDNVWoqBmyZKOadB1XV
LPc=
-----END CERTIFICATE-----
Generated at Sun May 11 14:57:36 2025 by rpki-client