Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-J2ZZY1evsj074TOzvnzxnmdRzs.roa
File: 1-J2ZZY1evsj074TOzvnzxnmdRzs.roa (raw, json)
Hash identifier: NM4vler5RNiPdxF6/tXFj4MnrFd+7oAOfYYIBHsQciU=
Subject key identifier: F8:9D:99:65:8D:5E:BE:C8:F4:EF:84:CE:CE:F9:F3:C6:79:9D:47:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCE2ADD980CB64E128AE210E8BC98CDF1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-J2ZZY1evsj074TOzvnzxnmdRzs.roa
Signing time: Tue 14 Nov 2023 14:09:57 +0000
ROA not before: Tue 14 Nov 2023 14:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:2a:dd:98:0c:b6:4e:12:8a:e2:10:e8:bc:98:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 14:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89d99658d5ebec8f4ef84cecef9f3c6799d473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:44:94:84:1f:0a:34:fc:85:74:1e:9c:3c:
22:a4:f8:12:5c:0d:19:11:69:2c:a1:8d:27:d9:4c:
28:3e:ee:7a:f2:2e:c6:e6:67:24:6d:ec:1f:4c:60:
6a:8d:78:ef:14:94:18:a2:78:a6:a5:a3:e6:92:e4:
2a:57:8a:8a:d3:9f:ad:74:95:27:1e:af:1a:2e:4f:
a7:2e:ec:70:5e:ee:7c:be:b4:75:98:03:29:06:3b:
44:cc:d2:2c:2d:82:4c:fd:71:cb:f5:c2:0f:6b:57:
d3:6a:9b:ca:89:0b:4b:e5:ad:3a:73:fa:33:f3:b2:
c7:c5:68:53:5b:71:b6:41:81:99:55:56:50:fa:0c:
ba:3b:69:75:ed:c9:03:0b:c6:f3:6b:d9:fc:46:1e:
f1:11:56:9a:35:88:10:c4:cc:04:14:b5:0f:f9:37:
14:7a:b9:03:51:77:96:3c:35:d6:30:d4:64:7f:2f:
a7:da:67:ef:eb:e0:94:4a:02:e7:54:5e:85:b5:99:
e8:2e:73:26:27:27:0d:d4:0e:c0:b0:72:aa:31:00:
8d:da:64:b7:dd:d9:4d:05:6c:7f:b1:ef:ae:88:44:
46:84:36:7a:1d:93:7f:3e:78:58:9d:1e:7e:91:39:
9e:0a:3c:ae:1e:c3:ec:15:21:bf:ca:d9:e6:95:87:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:99:65:8D:5E:BE:C8:F4:EF:84:CE:CE:F9:F3:C6:79:9D:47:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-J2ZZY1evsj074TOzvnzxnmdRzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:02:c3:5d:06:20:3b:7b:6d:3b:e0:6c:67:c9:53:0e:6b:27:
a1:e8:60:54:02:93:03:25:c0:f9:fe:87:d6:0e:fa:73:03:c4:
d3:02:f9:33:5c:53:a8:8d:ee:84:cb:6f:fb:b4:ab:ce:3b:d5:
0e:e6:00:a7:30:f3:de:df:86:bd:22:59:68:4c:8b:99:3d:46:
39:7c:66:53:af:2a:b5:e7:50:61:e8:f4:db:8c:9e:0c:fa:70:
13:d2:c7:4c:85:bd:1c:17:0e:73:17:ce:a4:f2:97:0f:08:d5:
5d:e3:24:f8:aa:17:34:79:7f:39:f5:c1:d3:a3:fb:de:97:06:
79:6c:eb:6c:af:a5:3d:9a:3b:3c:6d:01:25:fd:5f:ff:22:83:
44:6c:07:2b:c7:78:af:f7:57:ae:a8:93:dc:fd:bc:d3:84:37:
fb:d4:d8:0c:b5:5f:fd:32:f9:9e:a7:52:68:dd:c3:7c:ab:a1:
63:1a:0b:65:fc:e6:49:99:d4:48:ce:6b:4e:19:d6:de:65:97:
37:39:be:2f:30:a7:5e:d7:f7:04:60:f2:8f:99:ab:26:90:e7:
70:8a:cb:29:f1:72:12:b6:3b:a2:40:d7:44:fe:91:1c:94:d9:
a9:86:35:59:39:82:b7:2a:e4:92:a5:c8:a7:b9:0a:52:44:c5:
32:8d:cc:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYvOKt2YDLZOEoriEOi8mM3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MTQwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODlkOTk2NThkNWViZWM4ZjRlZjg0Y2VjZWY5ZjNjNjc5OWQ0NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ5ElIQfCjT8hXQenDwipPgSXA0Z
EWksoY0n2UwoPu568i7G5mckbewfTGBqjXjvFJQYonimpaPmkuQqV4qK05+tdJUn
Hq8aLk+nLuxwXu58vrR1mAMpBjtEzNIsLYJM/XHL9cIPa1fTapvKiQtL5a06c/oz
87LHxWhTW3G2QYGZVVZQ+gy6O2l17ckDC8bza9n8Rh7xEVaaNYgQxMwEFLUP+TcU
erkDUXeWPDXWMNRkfy+n2mfv6+CUSgLnVF6FtZnoLnMmJycN1A7AsHKqMQCN2mS3
3dlNBWx/se+uiERGhDZ6HZN/PnhYnR5+kTmeCjyuHsPsFSG/ytnmlYctWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPidmWWNXr7I9O+Ezs7588Z5nUc7MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1KMlpaWTFldnNqMDc0VE96dm56eG5tZFJ6cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCdAsNdBiA7e2074Gxn
yVMOayeh6GBUApMDJcD5/ofWDvpzA8TTAvkzXFOoje6Ey2/7tKvOO9UO5gCnMPPe
34a9IlloTIuZPUY5fGZTryq151Bh6PTbjJ4M+nAT0sdMhb0cFw5zF86k8pcPCNVd
4yT4qhc0eX859cHTo/velwZ5bOtsr6U9mjs8bQEl/V//IoNEbAcrx3iv91euqJPc
/bzThDf71NgMtV/9Mvmep1Jo3cN8q6FjGgtl/OZJmdRIzmtOGdbeZZc3Ob4vMKde
1/cEYPKPmasmkOdwissp8XIStjuiQNdE/pEclNmphjVZOYK3KuSSpcinuQpSRMUy
jcyx
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:39 2025 by rpki-client