Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z-TUnBeuGL3yRqlbH4Rf3ND--LY.roa
File: z-TUnBeuGL3yRqlbH4Rf3ND--LY.roa (raw, json)
Hash identifier: 2tuzp/4CbY39prdaPglLYjW57oW7aMTPkRql6I6pUVs=
Subject key identifier: CF:E4:D4:9C:17:AE:18:BD:F2:46:A9:5B:1F:84:5F:DC:D0:FE:F8:B6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7E280D13D10B1128459A3DACA1F3BE44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z-TUnBeuGL3yRqlbH4Rf3ND--LY.roa
Signing time: Mon 30 Oct 2023 01:17:15 +0000
ROA not before: Mon 30 Oct 2023 01:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:28:0d:13:d1:0b:11:28:45:9a:3d:ac:a1:f3:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 01:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfe4d49c17ae18bdf246a95b1f845fdcd0fef8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:e9:34:5c:53:47:39:8d:56:1e:58:11:82:
7f:44:ce:8c:00:ea:82:62:60:4d:69:94:42:26:11:
ce:e2:57:8f:2e:93:77:b3:e1:79:89:ed:6c:3d:f6:
6c:4b:9a:ba:fc:64:8e:bb:6d:c4:da:21:40:4a:a1:
3d:ff:e6:d8:ee:27:fa:a4:e4:1a:1f:48:30:35:9d:
68:62:20:8e:2d:b2:f3:ae:0a:3f:fb:65:a9:b1:2f:
1e:ea:9b:7e:05:fb:78:84:ef:0c:50:bd:0a:b9:e1:
4a:10:f3:9a:9e:6d:75:99:a9:8c:1b:d5:9c:35:67:
52:ff:e4:f4:c5:ae:fc:8d:1b:ab:ca:e7:53:eb:89:
14:29:f3:48:8f:2a:c6:cd:20:83:cc:97:f3:1d:da:
85:85:5f:86:48:b5:40:90:f6:e7:42:79:a2:e4:1f:
40:61:21:24:50:0c:12:ac:f0:e9:53:d2:a7:43:73:
ec:4d:ec:35:99:a5:be:ce:e9:bd:89:d8:97:b9:c0:
5a:2e:b8:c3:a0:91:f9:86:b5:05:0b:f5:2c:8a:cc:
f4:54:21:7c:5b:8b:84:e3:cc:36:93:06:60:86:0e:
84:25:87:32:4d:a4:74:46:0e:e8:f8:77:25:6c:0e:
9c:87:30:b8:32:8b:9e:9b:d8:2a:d8:56:20:bd:ce:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:D4:9C:17:AE:18:BD:F2:46:A9:5B:1F:84:5F:DC:D0:FE:F8:B6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z-TUnBeuGL3yRqlbH4Rf3ND--LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:01:ef:fa:0a:04:96:1f:02:5f:11:5a:36:41:f1:cb:78:2c:
5d:ce:6e:ca:17:09:25:f7:80:80:42:be:07:95:72:0a:13:dd:
fa:d2:25:d1:59:bd:2e:f1:c1:33:24:b1:59:f5:e9:ee:b7:e1:
7a:7d:43:c8:d3:0e:f7:1b:5b:fe:90:b3:a6:a4:14:af:62:ee:
a2:bf:8c:2d:a1:a5:ae:91:31:44:c0:e0:21:f6:10:16:e5:cc:
17:27:ae:61:39:80:36:ef:23:51:47:47:89:3c:1d:20:43:0a:
46:61:3c:fc:0d:5c:16:85:d8:dc:86:6e:4b:87:ac:0a:84:a0:
26:c9:42:f1:9f:40:40:a1:c1:63:19:dc:a8:c7:cb:ba:8e:73:
35:32:6e:85:af:b4:29:43:6c:36:e6:a1:76:54:5d:c1:9a:df:
28:33:93:f7:fa:14:30:75:0e:80:18:63:f9:b0:46:05:c9:07:
32:25:32:35:9f:41:c3:54:0d:d5:a8:d0:8b:3b:c8:00:b3:ca:
1d:cc:73:89:aa:ac:1b:86:46:55:35:f6:25:c9:d9:1a:f6:36:
55:2f:6b:62:dd:b5:bd:25:df:15:2d:7d:ed:32:ce:c5:10:b6:
fc:8a:f0:02:42:40:18:15:9e:59:66:f5:ad:9c:3d:eb:00:16:
a3:02:7c:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt+KA0T0QsRKEWaPayh875EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMwMDExNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmU0ZDQ5YzE3YWUxOGJkZjI0NmE5NWIxZjg0NWZkY2QwZmVmOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb7pNFxTRzmNVh5YEYJ/RM6MAOqC
YmBNaZRCJhHO4lePLpN3s+F5ie1sPfZsS5q6/GSOu23E2iFASqE9/+bY7if6pOQa
H0gwNZ1oYiCOLbLzrgo/+2WpsS8e6pt+Bft4hO8MUL0KueFKEPOanm11mamMG9Wc
NWdS/+T0xa78jRuryudT64kUKfNIjyrGzSCDzJfzHdqFhV+GSLVAkPbnQnmi5B9A
YSEkUAwSrPDpU9KnQ3PsTew1maW+zum9idiXucBaLrjDoJH5hrUFC/Usisz0VCF8
W4uE48w2kwZghg6EJYcyTaR0Rg7o+HclbA6chzC4Mouem9gq2FYgvc5G8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM/k1JwXrhi98kapWx+EX9zQ/vi2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvei1UVW5CZXVHTDN5UnFsYkg0UmYzTkQtLUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAQB7/oKBJYfAl8RWjZB
8ct4LF3ObsoXCSX3gIBCvgeVcgoT3frSJdFZvS7xwTMksVn16e634Xp9Q8jTDvcb
W/6Qs6akFK9i7qK/jC2hpa6RMUTA4CH2EBblzBcnrmE5gDbvI1FHR4k8HSBDCkZh
PPwNXBaF2NyGbkuHrAqEoCbJQvGfQEChwWMZ3KjHy7qOczUyboWvtClDbDbmoXZU
XcGa3ygzk/f6FDB1DoAYY/mwRgXJBzIlMjWfQcNUDdWo0Is7yACzyh3Mc4mqrBuG
RlU19iXJ2Rr2NlUva2Ldtb0l3xUtfe0yzsUQtvyK8AJCQBgVnllm9a2cPesAFqMC
fN4=
-----END CERTIFICATE-----
Generated at Sun May 11 12:50:13 2025 by rpki-client