Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-c7xtgHmMGO_c-sLmEerHBBqYe4.roa
File: 1-c7xtgHmMGO_c-sLmEerHBBqYe4.roa (raw, json)
Hash identifier: lXr/FNcoCqaOMWJoHpwjVU4QzxCmk2bcOtCBFvpu/sk=
Subject key identifier: F9:CE:F1:B6:01:E6:30:63:BF:73:EB:0B:98:47:AB:1C:10:6A:61:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C45B26AFD20DC9D5EA4EB54AB360EBDCE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-c7xtgHmMGO_c-sLmEerHBBqYe4.roa
Signing time: Thu 07 Dec 2023 19:12:49 +0000
ROA not before: Thu 07 Dec 2023 19:12:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:b2:6a:fd:20:dc:9d:5e:a4:eb:54:ab:36:0e:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 19:12:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9cef1b601e63063bf73eb0b9847ab1c106a61ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:1a:b7:4e:a5:db:cf:f7:89:a0:c5:f2:67:
aa:39:25:35:8d:da:71:43:ca:d5:f5:45:54:cb:88:
be:14:b0:10:49:61:6d:a2:82:5e:f1:b3:57:d4:6d:
d4:e9:7a:47:6b:ec:66:22:4a:b2:c6:2f:9d:b3:4f:
a4:ad:a1:00:4a:1f:73:60:ce:4f:41:65:e5:b9:5e:
e6:56:5b:12:b5:ab:06:e1:fe:e9:71:cc:2a:cb:6d:
52:51:73:52:b3:30:9c:d4:63:0c:6d:80:49:e2:41:
3c:2c:20:cb:a4:9f:24:a4:6d:03:97:ad:17:0c:54:
1e:27:6e:b3:5a:3b:61:a9:13:61:0a:b3:50:99:95:
01:1d:fb:75:59:b9:f8:2e:40:29:70:13:13:a7:2a:
e7:af:98:1d:46:20:35:20:90:54:a2:9e:9c:72:4f:
b7:39:a3:11:4c:58:56:b2:f4:d6:48:3f:15:e2:21:
ad:d6:c2:da:a2:b9:fe:dc:68:a0:fe:37:8f:0e:7e:
39:45:5c:32:0b:74:13:5e:06:07:c7:02:b5:b3:e5:
97:cf:36:46:95:7a:f4:b2:ed:a7:ad:94:b3:d6:ce:
38:f7:79:e2:db:a2:93:c0:23:f1:e4:93:89:47:7a:
bf:1e:ff:79:29:39:ca:b3:e3:15:34:5d:9c:c2:9a:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:F1:B6:01:E6:30:63:BF:73:EB:0B:98:47:AB:1C:10:6A:61:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-c7xtgHmMGO_c-sLmEerHBBqYe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:57:63:67:16:5c:fc:44:0a:e7:23:d9:ce:4d:6b:15:93:8f:
87:5d:54:fb:6a:c7:47:10:35:87:d1:bb:b0:e1:9c:af:25:cc:
4c:13:30:a0:7d:8a:32:28:16:2f:02:36:94:17:c3:c9:25:1e:
e1:24:4c:c3:bb:51:24:e5:19:6d:ed:86:e8:15:9e:e0:cf:70:
9e:8d:a5:e0:cc:f2:d6:7f:32:87:b7:9a:6a:9d:2b:a9:bf:4b:
49:3e:bf:37:a7:49:96:92:43:56:5b:68:3a:8a:66:e2:42:a1:
5a:bf:cf:86:b2:f7:2a:68:40:74:2e:38:8b:75:ba:c7:24:a8:
d8:25:d6:4b:8b:7b:c3:ad:cf:a4:65:1b:e1:fa:22:8b:29:eb:
44:72:86:d7:4d:ce:1c:69:eb:b9:15:ab:0d:20:ab:50:c9:e1:
ad:18:79:69:d6:19:85:1d:34:cc:fa:4d:27:2e:82:58:d6:63:
52:61:f6:6d:fd:70:58:60:86:3c:23:5e:9a:dc:09:02:b7:73:
bd:7f:71:c2:a8:b7:82:06:b2:6d:40:da:3c:93:bd:b7:32:fc:
eb:93:32:5a:66:24:a0:86:86:51:e9:96:d6:60:4b:e4:38:f5:
80:f4:64:a8:9a:e3:b1:cc:41:4e:7a:51:f8:cb:65:84:28:ff:
3d:bf:50:56
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxFsmr9INydXqTrVKs2Dr3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA3MTkxMjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNlZjFiNjAxZTYzMDYzYmY3M2ViMGI5ODQ3YWIxYzEwNmE2MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphwat06l28/3iaDF8meqOSU1jdpx
Q8rV9UVUy4i+FLAQSWFtooJe8bNX1G3U6XpHa+xmIkqyxi+ds0+kraEASh9zYM5P
QWXluV7mVlsStasG4f7pccwqy21SUXNSszCc1GMMbYBJ4kE8LCDLpJ8kpG0Dl60X
DFQeJ26zWjthqRNhCrNQmZUBHft1Wbn4LkApcBMTpyrnr5gdRiA1IJBUop6cck+3
OaMRTFhWsvTWSD8V4iGt1sLaorn+3Gig/jePDn45RVwyC3QTXgYHxwK1s+WXzzZG
lXr0su2nrZSz1s4493ni26KTwCPx5JOJR3q/Hv95KTnKs+MVNF2cwppfTQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPnO8bYB5jBjv3PrC5hHqxwQamHuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1jN3h0Z0htTUdPX2Mtc0xtRWVySEJCcVllNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQA2V2NnFlz8RArnI9nO
TWsVk4+HXVT7asdHEDWH0buw4ZyvJcxMEzCgfYoyKBYvAjaUF8PJJR7hJEzDu1Ek
5Rlt7YboFZ7gz3CejaXgzPLWfzKHt5pqnSupv0tJPr83p0mWkkNWW2g6imbiQqFa
v8+GsvcqaEB0LjiLdbrHJKjYJdZLi3vDrc+kZRvh+iKLKetEcobXTc4caeu5FasN
IKtQyeGtGHlp1hmFHTTM+k0nLoJY1mNSYfZt/XBYYIY8I16a3AkCt3O9f3HCqLeC
BrJtQNo8k723MvzrkzJaZiSghoZR6ZbWYEvkOPWA9GSomuOxzEFOelH4y2WEKP89
v1BW
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:15 2025 by rpki-client