Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-NgGdEBr9CCbWECwRd-CDcyTBWY.roa
File: 1-NgGdEBr9CCbWECwRd-CDcyTBWY.roa (raw, json)
Hash identifier: qAyZpACLmV4+D4Q54pHN2kQrrUd1TCkj8Z2tIRIVZgY=
Subject key identifier: F8:D8:06:74:40:6B:F4:20:9B:58:40:B0:45:DF:82:0D:CC:93:05:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFB40BAE0B78A9C4F6CA64F339D20DF48
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-NgGdEBr9CCbWECwRd-CDcyTBWY.roa
Signing time: Wed 04 Oct 2023 15:13:57 +0000
ROA not before: Wed 04 Oct 2023 15:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:40:ba:e0:b7:8a:9c:4f:6c:a6:4f:33:9d:20:df:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 15:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d80674406bf4209b5840b045df820dcc930566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:83:07:e0:60:3c:9f:3a:79:d5:40:1c:54:
4b:a0:e3:25:cc:20:3f:86:c6:14:b4:14:c6:65:0f:
4d:5f:ad:fa:41:cd:a3:72:cd:33:22:35:ea:15:72:
46:71:7f:be:65:ff:aa:61:88:8d:d0:9d:f7:2a:99:
ad:8d:ba:43:7a:01:4c:6d:55:04:b9:f8:e5:91:54:
76:2e:32:bb:3a:a2:0c:96:c7:70:89:37:45:06:ed:
ef:72:14:96:78:00:aa:c2:2b:e3:d6:51:88:5f:d7:
28:ee:24:82:36:25:2b:78:c9:3d:fa:f6:25:bb:4a:
e2:82:99:1c:8b:94:89:bd:db:63:48:79:c2:36:c8:
b0:5b:2f:6d:f7:71:e2:e2:47:db:fd:0b:8e:4a:1b:
0b:99:0f:63:b4:b0:78:a0:25:4a:ea:01:c8:1f:ad:
5c:cb:1f:b7:29:b7:56:fe:9e:e4:36:f6:cb:ef:b4:
d6:10:ef:32:1c:82:0f:a5:3b:27:00:87:f5:28:7a:
c5:34:a6:8d:f3:24:21:6f:1b:cd:60:f6:97:1d:f3:
1f:ef:46:bb:27:9c:10:48:97:ae:0c:84:a4:10:2b:
48:f4:60:7c:ed:f3:2c:af:2d:8b:85:0a:d2:ee:11:
8a:0a:11:7f:26:7b:a2:95:94:33:7e:07:16:69:0e:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:06:74:40:6B:F4:20:9B:58:40:B0:45:DF:82:0D:CC:93:05:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-NgGdEBr9CCbWECwRd-CDcyTBWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:5e:82:65:7e:f1:9e:33:69:49:df:99:f5:fe:fb:ac:e5:ec:
03:28:15:20:95:eb:42:ca:80:ec:c3:2d:e8:4a:84:9f:ef:c3:
15:73:5a:40:4f:3d:97:3e:f5:ac:d3:c2:f1:bc:3c:bc:f5:b6:
bc:09:8f:a3:2b:80:d2:ba:9f:33:d4:d1:b5:f1:c5:f8:e5:46:
f5:e7:23:3c:85:f2:69:3e:14:c2:6c:5f:1f:df:0c:78:b8:53:
e0:36:15:0a:06:f3:01:1f:dc:d7:a6:6c:19:2b:ea:ca:86:86:
1d:7b:36:83:3e:45:bd:73:9d:fd:90:17:96:da:a3:4b:26:03:
45:fd:70:f9:91:60:84:e1:0f:d4:8c:a8:a5:9e:86:e1:bb:06:
d5:16:fc:9e:5c:2e:3e:35:bd:fe:68:ed:a5:cb:04:0a:ab:a3:
5b:6e:d4:c2:f6:7b:e1:63:75:02:10:e0:64:e5:ee:26:f8:35:
d6:5e:b5:11:c6:7f:89:6c:4e:c2:01:86:fc:79:f4:ab:05:2c:
0a:df:28:ec:d0:cb:ed:8a:fe:b9:23:13:47:88:40:85:ff:46:
84:b6:fa:ab:57:2a:5e:cf:92:d1:9c:1d:09:d9:f6:ba:7d:51:
97:b6:34:ed:b0:c8:22:b5:b4:b0:a2:38:4c:ff:64:8b:d4:46:
c0:7a:bc:20
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYr7QLrgt4qcT2ymTzOdIN9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA0MTUxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQ4MDY3NDQwNmJmNDIwOWI1ODQwYjA0NWRmODIwZGNjOTMwNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglGDB+BgPJ86edVAHFRLoOMlzCA/
hsYUtBTGZQ9NX636Qc2jcs0zIjXqFXJGcX++Zf+qYYiN0J33KpmtjbpDegFMbVUE
ufjlkVR2LjK7OqIMlsdwiTdFBu3vchSWeACqwivj1lGIX9co7iSCNiUreMk9+vYl
u0rigpkci5SJvdtjSHnCNsiwWy9t93Hi4kfb/QuOShsLmQ9jtLB4oCVK6gHIH61c
yx+3KbdW/p7kNvbL77TWEO8yHIIPpTsnAIf1KHrFNKaN8yQhbxvNYPaXHfMf70a7
J5wQSJeuDISkECtI9GB87fMsry2LhQrS7hGKChF/JnuilZQzfgcWaQ4GZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPjYBnRAa/Qgm1hAsEXfgg3MkwVmMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1OZ0dkRUJyOUNDYldFQ3dSZC1DRGN5VEJXWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQDMXoJlfvGeM2lJ35n1
/vus5ewDKBUgletCyoDswy3oSoSf78MVc1pATz2XPvWs08LxvDy89ba8CY+jK4DS
up8z1NG18cX45Ub15yM8hfJpPhTCbF8f3wx4uFPgNhUKBvMBH9zXpmwZK+rKhoYd
ezaDPkW9c539kBeW2qNLJgNF/XD5kWCE4Q/UjKilnobhuwbVFvyeXC4+Nb3+aO2l
ywQKq6NbbtTC9nvhY3UCEOBk5e4m+DXWXrURxn+JbE7CAYb8efSrBSwK3yjs0Mvt
iv65IxNHiECF/0aEtvqrVypez5LRnB0J2fa6fVGXtjTtsMgitbSwojhM/2SL1EbA
erwg
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:10 2025 by rpki-client