Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-plv5dxazAXAbhw9j4-BEVrbaGE.roa
File: 1-plv5dxazAXAbhw9j4-BEVrbaGE.roa (raw, json)
Hash identifier: ip09p62iHOKqXUSjnCiAiejg4/ZJuQWtaYKkwJIcOJE=
Subject key identifier: FA:99:6F:E5:DC:5A:CC:05:C0:6E:1C:3D:8F:8F:81:11:5A:DB:68:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF1CFDA9003CD7763CCC7E58E6BE0DA82
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-plv5dxazAXAbhw9j4-BEVrbaGE.roa
Signing time: Tue 21 Nov 2023 12:16:52 +0000
ROA not before: Tue 21 Nov 2023 12:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:cf:da:90:03:cd:77:63:cc:c7:e5:8e:6b:e0:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 12:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa996fe5dc5acc05c06e1c3d8f8f81115adb6861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:ba:15:fc:c6:30:b3:ce:4f:02:50:fe:ce:
21:28:b1:16:26:b3:f6:cd:fd:f9:22:95:5b:2e:32:
ea:d4:e2:f6:da:83:4c:e2:70:71:f1:bc:95:5d:5b:
78:82:98:93:ce:ea:e6:51:1e:4c:59:6d:eb:58:6c:
92:80:25:96:36:e2:91:3d:a4:eb:47:57:3b:9d:1c:
9b:82:7b:3e:a4:b8:5a:69:70:c8:f6:b6:8f:51:5f:
67:1c:2a:8e:63:98:56:bc:47:25:42:26:4c:b8:75:
95:d5:da:f0:f9:c0:34:54:8c:48:15:71:3f:a4:8f:
64:a8:6a:35:59:03:6c:20:18:5e:8d:10:49:01:d3:
c7:9d:ee:6e:1d:37:54:4c:ae:68:32:35:80:59:8b:
0a:8f:3c:3d:eb:55:72:e9:f4:aa:f7:bb:a1:d8:72:
33:14:56:1f:d9:69:01:07:d7:7b:da:53:57:51:aa:
cd:ae:86:bf:f4:30:47:ea:4e:dd:8d:b1:b6:a6:f4:
0c:32:25:54:09:b1:32:b3:dc:48:00:d0:da:15:32:
fa:fc:77:37:5e:19:33:d6:d4:c9:6e:b9:40:4b:f8:
de:6c:89:6f:02:2a:9a:0f:d5:bb:da:d9:8a:38:2d:
e6:f7:df:e0:aa:46:02:dc:b0:f0:cd:f7:f8:89:cf:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:6F:E5:DC:5A:CC:05:C0:6E:1C:3D:8F:8F:81:11:5A:DB:68:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-plv5dxazAXAbhw9j4-BEVrbaGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:29:0c:fa:00:84:0a:88:4c:90:33:d6:81:2b:92:cd:74:5b:
56:ac:92:8f:f0:32:d9:5d:e1:73:f7:fe:aa:b6:aa:06:ee:85:
77:05:52:22:d4:de:55:65:b1:0e:10:aa:ec:ae:f6:01:d7:98:
3d:8e:eb:e0:1e:73:f1:d2:41:ee:b3:fa:1f:9f:ff:f4:9a:3e:
2a:f9:65:68:a9:2a:f7:3e:00:64:da:d3:84:e6:f1:86:1b:c6:
ad:c5:24:84:cd:8f:dc:35:52:a4:a1:49:0a:10:b2:b1:fa:ca:
41:eb:8b:33:f0:1d:80:04:55:b2:01:39:6b:70:db:64:4a:62:
87:82:e9:4c:73:c1:07:1e:ef:89:ea:f9:ff:7e:58:6c:c1:72:
75:69:5c:0b:40:5c:0f:91:4d:d9:32:8b:9e:67:d8:13:5a:98:
0a:53:dc:66:2a:5c:a9:f0:db:96:c7:64:68:1f:fb:fb:ca:9c:
fb:93:af:b6:1e:0f:80:b2:76:16:53:35:ad:1e:96:de:00:4c:
19:f2:fc:63:e7:e3:72:69:2a:78:b1:e7:c7:6f:52:00:90:d0:
22:b2:97:93:a7:17:e8:f2:0a:9c:03:cc:f0:b9:12:49:84:61:
5d:7c:93:9a:d2:b9:ee:e3:c4:8b:20:28:05:cf:dc:19:0c:89:
c1:de:56:d8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYvxz9qQA813Y8zH5Y5r4NqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIxMTIxNjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTk5NmZlNWRjNWFjYzA1YzA2ZTFjM2Q4ZjhmODExMTVhZGI2ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8i6FfzGMLPOTwJQ/s4hKLEWJrP2
zf35IpVbLjLq1OL22oNM4nBx8byVXVt4gpiTzurmUR5MWW3rWGySgCWWNuKRPaTr
R1c7nRybgns+pLhaaXDI9raPUV9nHCqOY5hWvEclQiZMuHWV1drw+cA0VIxIFXE/
pI9kqGo1WQNsIBhejRBJAdPHne5uHTdUTK5oMjWAWYsKjzw961Vy6fSq97uh2HIz
FFYf2WkBB9d72lNXUarNroa/9DBH6k7djbG2pvQMMiVUCbEys9xIANDaFTL6/Hc3
Xhkz1tTJbrlAS/jebIlvAiqaD9W72tmKOC3m99/gqkYC3LDwzff4ic/VlQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPqZb+XcWswFwG4cPY+PgRFa22hhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1wbHY1ZHhhekFYQWJodzlqNC1CRVZyYmFHRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCZKQz6AIQKiEyQM9aB
K5LNdFtWrJKP8DLZXeFz9/6qtqoG7oV3BVIi1N5VZbEOEKrsrvYB15g9juvgHnPx
0kHus/ofn//0mj4q+WVoqSr3PgBk2tOE5vGGG8atxSSEzY/cNVKkoUkKELKx+spB
64sz8B2ABFWyATlrcNtkSmKHgulMc8EHHu+J6vn/flhswXJ1aVwLQFwPkU3ZMoue
Z9gTWpgKU9xmKlyp8NuWx2RoH/v7ypz7k6+2Hg+AsnYWUzWtHpbeAEwZ8vxj5+Ny
aSp4sefHb1IAkNAispeTpxfo8gqcA8zwuRJJhGFdfJOa0rnu48SLICgFz9wZDInB
3lbY
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:28:25 2025 by rpki-client