Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/41VRSauAdNtfTzppUpM69V7YhCA.roa
File: 41VRSauAdNtfTzppUpM69V7YhCA.roa (raw, json)
Hash identifier: P8zW2thNJaA457yQ4JjTdGRUm2Z1yfcnAjAKHapwN4A=
Subject key identifier: E3:55:51:49:AB:80:74:DB:5F:4F:3A:69:52:93:3A:F5:5E:D8:84:20
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6985C0D2F80370990CE96D2A159356F5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/41VRSauAdNtfTzppUpM69V7YhCA.roa
Signing time: Wed 06 Sep 2023 08:04:47 +0000
ROA not before: Wed 06 Sep 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:6985:4341/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:85:c0:d2:f8:03:70:99:0c:e9:6d:2a:15:93:56:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 6 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3555149ab8074db5f4f3a6952933af55ed88420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:b7:65:76:41:85:b6:0b:d3:8a:79:56:90:
67:55:09:55:46:dc:62:e5:ce:9a:50:89:2d:f3:4e:
63:e3:ba:b8:b1:8a:83:3e:d4:c0:88:03:44:c8:1c:
b1:b8:94:11:d1:23:7d:5e:18:c0:51:5d:0e:e9:38:
b4:23:f3:5f:b8:2a:60:32:7f:e5:b4:38:21:b4:79:
9c:fc:9a:fd:c1:56:47:f2:3a:e4:53:5b:d5:57:07:
7f:ec:d4:bb:ac:9b:96:29:38:4f:ec:89:57:d7:de:
7c:93:13:a9:90:df:12:aa:a6:a5:87:8b:19:ce:00:
ff:9a:60:61:bb:bd:f7:6a:c5:5c:0e:cd:82:5c:a3:
dc:3c:db:b2:9d:44:c0:6d:d2:50:2e:2b:be:8e:79:
8a:5c:05:53:4b:99:7f:60:1a:a6:0c:73:3a:17:77:
f3:cf:88:0c:d1:1d:c0:c7:e3:b8:68:af:0f:04:27:
ce:ea:fe:39:f8:1f:31:c5:7b:ff:9d:36:75:6e:c2:
24:81:bf:cc:88:3f:b8:ba:cb:ea:47:6b:b7:7f:22:
dc:18:28:64:cd:64:1c:1e:cd:eb:07:d5:79:c0:18:
60:92:ca:9a:ca:e0:9c:01:67:9c:84:19:a7:5c:94:
d0:cb:20:6b:7b:7a:ac:7b:30:e4:c5:16:a2:58:6b:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:51:49:AB:80:74:DB:5F:4F:3A:69:52:93:3A:F5:5E:D8:84:20
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/41VRSauAdNtfTzppUpM69V7YhCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:c4:f0:71:4c:08:d7:5b:14:ba:c4:b6:d1:ce:68:a1:e6:37:
de:92:99:c7:86:c2:2f:fd:aa:35:df:d9:55:16:68:f5:75:cb:
39:15:3e:ca:3b:7f:63:6e:3f:ec:bd:4f:2f:d5:e5:a5:90:2c:
c3:fe:ed:26:f5:31:5c:24:09:e5:42:80:4e:d7:89:78:64:ee:
c1:1f:8b:d5:da:0d:5d:c9:e2:65:cd:c5:b0:ce:cd:d9:ab:92:
c7:b3:21:37:51:3f:23:ad:3b:ec:66:4b:8a:d7:c1:3a:20:1f:
46:b3:c9:e6:a0:b4:76:6d:c6:43:7e:b9:6f:bb:6e:61:87:f6:
e3:ec:5a:3f:cf:8c:82:df:58:bd:d3:32:fa:8d:96:5c:5e:f2:
fe:20:7b:ed:28:29:e6:5c:1c:f1:2e:6c:28:9a:b4:ff:2d:19:
7c:0d:c2:b2:a9:ba:68:85:00:2f:d1:67:07:29:f5:10:5b:ad:
f8:81:ae:85:33:ec:c8:c2:68:77:df:10:fe:9e:89:ff:31:77:
fa:d8:94:d3:eb:bf:b5:46:bb:5f:2d:19:47:9b:c0:c9:34:08:
42:7b:5a:05:d3:e2:63:d1:91:c9:68:f4:bf:1e:49:82:72:2e:
7a:65:4a:1f:15:09:58:f4:e4:4d:e1:c5:b0:75:05:f3:35:db:
9d:2b:08:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpphcDS+ANwmQzpbSoVk1b1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA2MDgwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU1NTE0OWFiODA3NGRiNWY0ZjNhNjk1MjkzM2FmNTVlZDg4NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghy3ZXZBhbYL04p5VpBnVQlVRtxi
5c6aUIkt805j47q4sYqDPtTAiANEyByxuJQR0SN9XhjAUV0O6Ti0I/NfuCpgMn/l
tDghtHmc/Jr9wVZH8jrkU1vVVwd/7NS7rJuWKThP7IlX1958kxOpkN8Sqqalh4sZ
zgD/mmBhu733asVcDs2CXKPcPNuynUTAbdJQLiu+jnmKXAVTS5l/YBqmDHM6F3fz
z4gM0R3Ax+O4aK8PBCfO6v45+B8xxXv/nTZ1bsIkgb/MiD+4usvqR2u3fyLcGChk
zWQcHs3rB9V5wBhgksqayuCcAWechBmnXJTQyyBre3qsezDkxRaiWGtdwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFONVUUmrgHTbX086aVKTOvVe2IQgMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvNDFWUlNhdUFkTnRmVHpwcFVwTTY5VjdZaENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH/E8HFMCNdbFLrEttHO
aKHmN96SmceGwi/9qjXf2VUWaPV1yzkVPso7f2NuP+y9Ty/V5aWQLMP+7Sb1MVwk
CeVCgE7XiXhk7sEfi9XaDV3J4mXNxbDOzdmrksezITdRPyOtO+xmS4rXwTogH0az
yeagtHZtxkN+uW+7bmGH9uPsWj/PjILfWL3TMvqNllxe8v4ge+0oKeZcHPEubCia
tP8tGXwNwrKpumiFAC/RZwcp9RBbrfiBroUz7MjCaHffEP6eif8xd/rYlNPrv7VG
u18tGUebwMk0CEJ7WgXT4mPRkclo9L8eSYJyLnplSh8VCVj05E3hxbB1BfM1250r
CEI=
-----END CERTIFICATE-----
Generated at Sun May 11 18:11:59 2025 by rpki-client