Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-p7nzFlFkgaOOZQ4XO8Pb2933f0.roa
File: 1-p7nzFlFkgaOOZQ4XO8Pb2933f0.roa (raw, json)
Hash identifier: 6UR6WMkiZHDakx+DMH4xmDJVyT2NEd0x4qmwtsXWVE8=
Subject key identifier: FA:9E:E7:CC:59:45:92:06:8E:39:94:38:5C:EF:0F:6F:6F:77:DD:FD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0FA0220D2BDBEED05A671648736C1577
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-p7nzFlFkgaOOZQ4XO8Pb2933f0.roa
Signing time: Mon 27 Nov 2023 07:13:21 +0000
ROA not before: Mon 27 Nov 2023 07:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:a0:22:0d:2b:db:ee:d0:5a:67:16:48:73:6c:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 07:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9ee7cc594592068e3994385cef0f6f6f77ddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:2b:6a:77:73:0d:88:57:b0:99:42:b7:04:
da:62:4f:c4:43:91:9e:b4:07:dc:b1:5c:06:8c:13:
df:e5:22:94:ea:5c:b0:9d:e6:fe:18:3b:51:39:cf:
8f:75:6f:c3:d0:ef:d3:a0:63:8b:e7:cf:27:e2:ca:
1d:69:4c:66:d5:a1:9f:4f:15:1b:56:7c:b5:53:42:
af:a6:81:05:7c:9c:9d:54:79:68:94:1b:5c:cd:75:
2d:ac:57:0a:76:1a:a8:a6:16:2e:29:9b:51:f9:d9:
ea:c7:0d:f8:fd:b8:a2:0d:42:ba:e1:9b:55:e9:fa:
85:d3:38:4f:83:1d:8e:07:1a:55:df:93:56:37:97:
e0:95:f1:c7:1f:14:a2:ca:e8:d4:c6:c8:ca:98:c4:
b0:92:09:bb:49:c5:cd:9d:9b:d2:9c:0a:e4:af:78:
96:76:51:f6:c5:0c:96:73:50:30:29:62:9b:0e:09:
3a:fa:74:8c:f2:93:2e:14:1d:de:62:fa:9d:b5:9c:
06:7e:01:30:6a:3f:28:b2:1c:28:d1:9c:d6:09:07:
bc:21:45:2f:29:2d:a8:81:c6:2d:f2:c9:0f:43:44:
14:17:0f:14:4b:93:3c:1a:b2:09:7f:75:ff:9c:37:
d0:b7:a2:ca:1e:75:33:51:80:d8:36:52:1e:1e:3e:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:E7:CC:59:45:92:06:8E:39:94:38:5C:EF:0F:6F:6F:77:DD:FD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-p7nzFlFkgaOOZQ4XO8Pb2933f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:53:06:43:cd:f4:77:99:a2:43:11:44:4d:8d:99:e1:3a:4c:
95:52:88:31:54:41:03:cb:56:e9:cd:2f:0a:2e:c6:dc:72:61:
f1:97:14:6d:a4:94:c4:c5:99:99:5e:fe:c1:f7:98:b0:b0:86:
c9:6d:02:c4:a7:27:60:2e:3c:d7:27:a6:10:75:03:62:bd:4d:
a3:24:a9:a4:40:8d:b2:12:36:63:55:fa:78:4c:24:6a:9e:4c:
db:53:59:15:7b:de:89:84:77:89:88:cf:a4:63:12:4c:69:31:
98:af:32:d6:66:9c:f7:41:8f:d2:eb:99:c4:c6:8e:fa:2a:4e:
d1:c2:28:ad:82:c6:ba:22:98:79:ab:fd:81:97:de:ee:e6:70:
0c:51:85:85:19:8a:bb:e5:bf:3b:1e:9d:e4:94:84:25:75:df:
34:f7:4b:f1:8d:8d:25:ae:8f:2c:77:bc:8d:47:0c:11:d6:69:
24:a3:f0:0d:61:da:f0:1f:ff:16:fc:ab:28:ce:22:75:6a:f1:
4f:f0:c6:bd:23:f7:6b:36:c9:cb:82:87:90:eb:1b:e1:5d:6d:
86:ed:5d:aa:bf:9a:09:63:e9:2d:04:29:68:eb:d1:72:95:15:
cc:f4:2e:23:42:8c:7f:f4:cb:05:92:56:b7:d8:17:7d:d0:24:
0f:46:0e:42
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYwPoCINK9vu0FpnFkhzbBV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI3MDcxMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTllZTdjYzU5NDU5MjA2OGUzOTk0Mzg1Y2VmMGY2ZjZmNzdkZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYgrandzDYhXsJlCtwTaYk/EQ5Ge
tAfcsVwGjBPf5SKU6lywneb+GDtROc+PdW/D0O/ToGOL588n4sodaUxm1aGfTxUb
Vny1U0KvpoEFfJydVHlolBtczXUtrFcKdhqophYuKZtR+dnqxw34/biiDUK64ZtV
6fqF0zhPgx2OBxpV35NWN5fglfHHHxSiyujUxsjKmMSwkgm7ScXNnZvSnArkr3iW
dlH2xQyWc1AwKWKbDgk6+nSM8pMuFB3eYvqdtZwGfgEwaj8oshwo0ZzWCQe8IUUv
KS2ogcYt8skPQ0QUFw8US5M8GrIJf3X/nDfQt6LKHnUzUYDYNlIeHj5OHQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPqe58xZRZIGjjmUOFzvD29vd939MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1wN256RmxGa2dhT09aUTRYTzhQYjI5MzNmMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBkUwZDzfR3maJDEURN
jZnhOkyVUogxVEEDy1bpzS8KLsbccmHxlxRtpJTExZmZXv7B95iwsIbJbQLEpydg
LjzXJ6YQdQNivU2jJKmkQI2yEjZjVfp4TCRqnkzbU1kVe96JhHeJiM+kYxJMaTGY
rzLWZpz3QY/S65nExo76Kk7Rwiitgsa6Iph5q/2Bl97u5nAMUYWFGYq75b87Hp3k
lIQldd8090vxjY0lro8sd7yNRwwR1mkko/ANYdrwH/8W/KsoziJ1avFP8Ma9I/dr
NsnLgoeQ6xvhXW2G7V2qv5oJY+ktBClo69FylRXM9C4jQox/9MsFkla32Bd90CQP
Rg5C
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:36:23 2025 by rpki-client