Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0BVEauIek3OLp7TPqUj-Wugelrs.roa
File: 0BVEauIek3OLp7TPqUj-Wugelrs.roa (raw, json)
Hash identifier: eAt1vv4ZNtvzZxOXzcfVU1e2r3c9nN8DDcJEaZt8Y2s=
Subject key identifier: D0:15:44:6A:E2:1E:93:73:8B:A7:B4:CF:A9:48:FE:5A:E8:1E:96:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC115DD1E22319239C0D3BC632ABBE0FC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0BVEauIek3OLp7TPqUj-Wugelrs.roa
Signing time: Sun 12 Nov 2023 01:11:57 +0000
ROA not before: Sun 12 Nov 2023 01:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:15:dd:1e:22:31:92:39:c0:d3:bc:63:2a:bb:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 01:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d015446ae21e93738ba7b4cfa948fe5ae81e96bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:71:46:8c:86:5e:3b:b2:7f:2f:20:49:c4:
61:21:fc:d8:f6:98:e2:e5:98:6c:b4:b8:c5:10:45:
e0:dc:1d:e1:be:cc:4a:6f:64:50:fa:c3:d8:aa:33:
46:27:43:77:73:c6:3b:7c:00:12:0f:fd:b9:96:cf:
4a:cf:15:05:77:5a:a3:a7:fe:09:00:64:f0:87:25:
77:2f:3d:3b:12:ea:cb:b0:a2:cd:d7:4f:c8:8a:f1:
23:e9:fc:b1:d4:19:3e:d7:d4:36:0b:6c:e7:ac:04:
4d:8b:2c:c2:3e:3c:f5:24:78:a6:4b:8d:e3:e7:bd:
2e:0b:55:0d:6c:5c:28:be:29:65:99:14:8f:1f:21:
8b:46:26:05:5d:b9:a6:b7:69:e9:61:67:06:d1:61:
15:6f:f9:6d:1a:66:77:23:32:21:54:21:0b:aa:8f:
f4:d4:66:a3:87:21:59:99:fb:11:5a:b4:c9:f9:4e:
ef:13:b4:d9:ef:4d:72:12:2a:2b:2d:56:61:b0:55:
b2:bd:67:92:5c:d7:0c:aa:ae:74:23:89:72:61:2e:
a4:66:0a:3a:f9:43:db:1d:79:46:f1:35:86:8a:d7:
92:cf:3c:85:0e:15:5b:8e:9c:07:18:f6:c1:ed:a1:
31:30:83:63:4c:36:81:e7:f1:22:d0:34:da:d5:8f:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:44:6A:E2:1E:93:73:8B:A7:B4:CF:A9:48:FE:5A:E8:1E:96:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0BVEauIek3OLp7TPqUj-Wugelrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:98:8c:b0:ac:04:da:52:ca:21:c4:67:77:f7:13:67:76:d1:
00:7e:04:f9:52:ad:96:65:69:0a:4f:14:fd:fd:55:89:3f:ac:
64:a7:8f:14:4a:21:96:95:aa:bf:1e:f3:53:5c:4f:a0:19:60:
e1:e5:6f:e1:3a:16:69:bd:e2:43:af:7d:ea:f1:ff:d2:c2:44:
89:07:e7:ea:94:94:76:8f:61:2b:bf:7e:e1:fe:13:be:0a:9d:
66:b2:19:04:03:b4:8a:bd:bb:ec:d8:de:01:ac:f0:37:6a:f5:
d9:b9:a0:f9:d4:11:18:b5:9b:f9:28:98:52:bb:e7:7b:de:bb:
8d:da:2d:82:65:5f:71:c8:b5:68:a7:c9:92:0d:f7:bf:1a:3e:
61:b7:5b:75:b4:52:d0:6e:21:de:72:45:30:28:aa:5a:dc:aa:
b3:b6:24:1e:ab:fa:46:ab:20:29:86:e5:98:e6:55:bf:48:67:
20:53:ec:cf:df:84:92:e7:2b:69:e0:5c:ca:96:37:24:d6:c2:
32:83:a5:cc:44:f2:03:94:2f:2c:44:0a:5e:61:c8:5e:99:09:
4c:83:aa:60:13:c9:54:ca:63:ba:3f:f4:75:74:69:bf:64:2e:
13:9f:57:eb:4e:98:12:41:ee:bd:e7:a4:34:93:87:9c:92:ef:
24:8d:df:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvBFd0eIjGSOcDTvGMqu+D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEyMDExMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE1NDQ2YWUyMWU5MzczOGJhN2I0Y2ZhOTQ4ZmU1YWU4MWU5NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwRxRoyGXjuyfy8gScRhIfzY9pji
5ZhstLjFEEXg3B3hvsxKb2RQ+sPYqjNGJ0N3c8Y7fAASD/25ls9KzxUFd1qjp/4J
AGTwhyV3Lz07EurLsKLN10/IivEj6fyx1Bk+19Q2C2znrARNiyzCPjz1JHimS43j
570uC1UNbFwovillmRSPHyGLRiYFXbmmt2npYWcG0WEVb/ltGmZ3IzIhVCELqo/0
1GajhyFZmfsRWrTJ+U7vE7TZ701yEiorLVZhsFWyvWeSXNcMqq50I4lyYS6kZgo6
+UPbHXlG8TWGiteSzzyFDhVbjpwHGPbB7aExMINjTDaB5/Ei0DTa1Y/QjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNAVRGriHpNzi6e0z6lI/lroHpa7MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMEJWRWF1SWVrM09McDdUUHFVai1XdWdlbHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGaYjLCsBNpSyiHEZ3f3
E2d20QB+BPlSrZZlaQpPFP39VYk/rGSnjxRKIZaVqr8e81NcT6AZYOHlb+E6Fmm9
4kOvferx/9LCRIkH5+qUlHaPYSu/fuH+E74KnWayGQQDtIq9u+zY3gGs8Ddq9dm5
oPnUERi1m/komFK753veu43aLYJlX3HItWinyZIN978aPmG3W3W0UtBuId5yRTAo
qlrcqrO2JB6r+karICmG5ZjmVb9IZyBT7M/fhJLnK2ngXMqWNyTWwjKDpcxE8gOU
LyxECl5hyF6ZCUyDqmATyVTKY7o/9HV0ab9kLhOfV+tOmBJB7r3npDSTh5yS7ySN
38A=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:51 2025 by rpki-client