Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zCxIAehiqLtQBpqrKjUcbZEs_OM.roa
File: zCxIAehiqLtQBpqrKjUcbZEs_OM.roa (raw, json)
Hash identifier: lY7ZXqf8D0cA+vebmY13PX+17F/DClhdHKNbFV2LgIQ=
Subject key identifier: CC:2C:48:01:E8:62:A8:BB:50:06:9A:AB:2A:35:1C:6D:91:2C:FC:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB5BA8FC6ADF6F50A22ECB97B8BA246D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zCxIAehiqLtQBpqrKjUcbZEs_OM.roa
Signing time: Thu 21 Sep 2023 03:13:37 +0000
ROA not before: Thu 21 Sep 2023 03:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:ba:8f:c6:ad:f6:f5:0a:22:ec:b9:7b:8b:a2:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 03:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc2c4801e862a8bb50069aab2a351c6d912cfce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:a9:a4:c6:05:a9:06:be:91:0a:5a:a4:59:
4e:c7:43:c8:d9:e1:a4:0e:1e:c6:d2:67:82:58:a2:
8f:1c:f0:52:86:4d:36:8b:14:28:04:68:ce:fe:90:
21:81:23:42:b5:3f:b8:18:b8:2b:13:1a:f0:e2:a0:
ec:26:9a:7b:75:e6:b5:9c:a5:0e:82:d4:d1:a8:45:
d9:ab:02:a8:1c:90:fa:c2:3c:3f:df:b1:fe:72:06:
2c:89:59:5c:d1:ea:11:de:ac:3a:9b:f2:e3:96:4d:
79:64:d9:55:5e:18:84:4a:cd:19:44:1f:07:54:42:
5d:ea:cc:d1:6a:c3:01:c2:79:da:2a:42:9d:3f:86:
b3:1e:0c:b9:b5:4b:51:f3:c6:eb:a0:da:b1:20:e6:
d1:3a:4b:4e:2e:a7:42:93:79:2b:4e:58:65:44:ba:
a4:6a:81:11:52:21:b9:34:7e:f8:f3:ee:97:a4:4f:
e1:20:d5:67:39:5f:8d:1d:78:b3:4f:83:ff:90:cc:
ba:3a:0b:d0:0e:db:86:94:67:ed:b5:1f:5f:1c:33:
a5:37:1d:85:2e:33:0f:b0:d2:02:40:e3:ab:b3:f4:
b7:2a:b9:dc:d9:d3:a3:87:fa:a4:2d:61:09:6f:bf:
31:85:17:77:ba:67:da:f7:19:31:da:6a:ff:4d:9c:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:48:01:E8:62:A8:BB:50:06:9A:AB:2A:35:1C:6D:91:2C:FC:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zCxIAehiqLtQBpqrKjUcbZEs_OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:95:5c:6c:f1:68:74:26:d2:b9:ba:9a:7e:51:23:8f:08:b2:
2c:e8:47:50:a8:cc:6f:0c:8a:f1:c8:bf:6e:ba:3b:0a:60:5e:
6e:75:a6:b9:8e:8f:fe:d5:66:79:f0:5c:47:e6:d3:28:ef:47:
1c:c2:ff:5d:cb:1c:71:c9:18:cf:5d:59:1c:fe:0a:c4:12:c4:
fe:e8:1e:f6:5e:74:58:4b:8b:47:77:09:ee:d2:24:74:a4:30:
5c:2a:d7:74:07:53:5d:84:86:a8:39:61:0a:d8:ea:cf:8a:73:
38:cc:37:64:b8:4b:d5:46:8b:05:e0:0c:7b:92:80:c3:e4:b7:
4d:9f:53:5d:66:40:3d:fd:e6:69:4f:f8:25:91:ae:1e:71:20:
3c:dd:f5:17:62:b0:ad:cd:df:e5:b6:d4:b2:ae:c0:b8:67:42:
81:6b:a7:48:96:6c:00:cf:ee:0a:73:86:d0:0b:16:67:8c:86:
2a:e3:41:d8:97:a8:cb:3c:0e:7d:7a:a6:2e:f8:4b:ca:69:8a:
85:5d:9a:3a:3f:df:03:75:38:b4:f1:f0:fe:3e:59:f0:8a:8f:
c3:87:c8:c7:d3:ea:96:b1:c2:a1:59:a5:4b:6b:05:a0:8f:eb:
05:51:a1:e8:64:96:60:32:cd:31:e8:a3:98:e3:c2:5c:59:a9:
56:b2:59:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq1uo/Grfb1CiLsuXuLokbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIxMDMxMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJjNDgwMWU4NjJhOGJiNTAwNjlhYWIyYTM1MWM2ZDkxMmNmY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uppMYFqQa+kQpapFlOx0PI2eGk
Dh7G0meCWKKPHPBShk02ixQoBGjO/pAhgSNCtT+4GLgrExrw4qDsJpp7dea1nKUO
gtTRqEXZqwKoHJD6wjw/37H+cgYsiVlc0eoR3qw6m/Ljlk15ZNlVXhiESs0ZRB8H
VEJd6szRasMBwnnaKkKdP4azHgy5tUtR88broNqxIObROktOLqdCk3krTlhlRLqk
aoERUiG5NH748+6XpE/hINVnOV+NHXizT4P/kMy6OgvQDtuGlGfttR9fHDOlNx2F
LjMPsNICQOOrs/S3Krnc2dOjh/qkLWEJb78xhRd3umfa9xkx2mr/TZwInwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMwsSAHoYqi7UAaaqyo1HG2RLPzjMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvekN4SUFlaGlxTHRRQnBxcktqVWNiWkVzX09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGeVXGzxaHQm0rm6mn5R
I48IsizoR1CozG8MivHIv266OwpgXm51prmOj/7VZnnwXEfm0yjvRxzC/13LHHHJ
GM9dWRz+CsQSxP7oHvZedFhLi0d3Ce7SJHSkMFwq13QHU12Ehqg5YQrY6s+KczjM
N2S4S9VGiwXgDHuSgMPkt02fU11mQD395mlP+CWRrh5xIDzd9RdisK3N3+W21LKu
wLhnQoFrp0iWbADP7gpzhtALFmeMhirjQdiXqMs8Dn16pi74S8ppioVdmjo/3wN1
OLTx8P4+WfCKj8OHyMfT6paxwqFZpUtrBaCP6wVRoehklmAyzTHoo5jjwlxZqVay
WUI=
-----END CERTIFICATE-----
Generated at Mon May 12 19:24:53 2025 by rpki-client