Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/12IW7BaAhEXC8vPEdb6qGRUAMxU.roa
File: 12IW7BaAhEXC8vPEdb6qGRUAMxU.roa (raw, json)
Hash identifier: TblfjIrmmHK/UF5oAG/Jg+IV35YvB2UwMgurskQ6SD8=
Subject key identifier: D7:62:16:EC:16:80:84:45:C2:F2:F3:C4:75:BE:AA:19:15:00:33:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6DD4B6B995445844BDA96A454E906170
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/12IW7BaAhEXC8vPEdb6qGRUAMxU.roa
Signing time: Fri 15 Dec 2023 14:15:06 +0000
ROA not before: Fri 15 Dec 2023 14:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:d4:b6:b9:95:44:58:44:bd:a9:6a:45:4e:90:61:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 14:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76216ec16808445c2f2f3c475beaa1915003315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:f1:f4:52:ac:69:d4:bd:4b:df:01:1b:dd:
55:fb:ca:70:8b:28:b2:e1:82:ed:6e:ed:36:15:14:
b8:3c:ab:70:ff:b1:31:cc:12:9b:a0:b2:4a:fc:e6:
92:9b:1b:2a:47:80:70:30:db:76:3d:0e:c6:d2:04:
73:fe:f4:a4:e3:53:5c:26:d5:b7:e8:08:4c:7e:30:
53:11:f0:0e:a1:e2:55:7e:ee:50:85:2d:b0:ba:d0:
7f:9a:35:75:97:12:5e:c3:8e:7c:f7:f3:12:34:dd:
73:44:df:d3:41:50:d7:ab:89:6c:77:8f:b1:31:f0:
1d:04:9a:17:27:22:52:82:07:8c:31:9a:b9:f4:12:
30:5a:78:ac:e7:e4:a9:60:08:64:af:f1:e0:9a:fe:
8f:29:bd:f2:83:c8:1b:52:18:a4:22:57:8b:b9:19:
22:c5:bb:b1:90:d6:06:57:a6:9f:d0:60:fe:2c:7c:
58:d2:df:ac:00:af:25:5a:cd:12:da:2d:17:5c:32:
b9:6f:53:e1:2e:a5:82:87:4e:95:db:c2:ae:28:63:
b6:2d:87:1c:9a:56:37:63:11:45:1c:27:d6:36:b8:
a1:ff:b3:5d:a7:58:16:9b:c8:2e:07:46:a1:39:1f:
f5:3d:11:2b:b9:44:1f:0e:55:ba:a3:f7:b9:4d:ff:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:16:EC:16:80:84:45:C2:F2:F3:C4:75:BE:AA:19:15:00:33:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/12IW7BaAhEXC8vPEdb6qGRUAMxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:03:34:da:ff:50:be:ef:11:49:0f:cc:e2:56:28:7f:66:9b:
0e:a9:3e:82:aa:9d:2d:36:8b:c6:39:49:d8:d0:7c:50:1e:1f:
c6:93:62:ac:fb:a5:4b:52:7a:db:67:d5:04:a7:f4:bb:f2:e2:
02:30:76:47:7d:61:d9:3c:11:d6:79:33:7d:10:94:63:a3:2f:
82:0d:a3:d8:0f:03:4a:e5:5f:06:20:fc:39:f1:f2:35:04:25:
a0:36:0b:99:ac:27:89:b6:08:83:a3:43:10:47:51:82:f2:05:
82:d6:2a:35:c7:04:ec:9c:ed:35:69:ee:90:5a:de:ce:85:0f:
4a:82:b3:a5:4f:1b:66:0b:bb:46:b8:43:48:fd:fe:b4:14:92:
3f:68:53:ef:f8:74:9c:3b:01:34:fd:e3:0b:9d:ba:e6:3f:0c:
5f:62:90:3f:a1:5c:26:e9:8e:3d:53:05:4e:11:78:ba:b7:74:
3f:58:b2:14:e5:d9:82:ef:e5:6e:da:f6:2d:58:b1:1d:42:f6:
23:26:67:f9:65:61:cc:6a:30:96:c2:63:28:2f:6a:90:12:ee:
e9:26:38:f5:24:5a:4a:f9:54:01:7b:23:59:1f:91:25:93:07:
98:6a:38:b7:f2:8c:5f:b8:ab:fd:62:3b:7d:17:db:18:5b:81:
91:19:c9:40
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxt1La5lURYRL2pakVOkGFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE1MTQxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzYyMTZlYzE2ODA4NDQ1YzJmMmYzYzQ3NWJlYWExOTE1MDAzMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU3x9FKsadS9S98BG91V+8pwiyiy
4YLtbu02FRS4PKtw/7ExzBKboLJK/OaSmxsqR4BwMNt2PQ7G0gRz/vSk41NcJtW3
6AhMfjBTEfAOoeJVfu5QhS2wutB/mjV1lxJew4589/MSNN1zRN/TQVDXq4lsd4+x
MfAdBJoXJyJSggeMMZq59BIwWnis5+SpYAhkr/Hgmv6PKb3yg8gbUhikIleLuRki
xbuxkNYGV6af0GD+LHxY0t+sAK8lWs0S2i0XXDK5b1PhLqWCh06V28KuKGO2LYcc
mlY3YxFFHCfWNrih/7Ndp1gWm8guB0ahOR/1PREruUQfDlW6o/e5Tf8qTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNdiFuwWgIRFwvLzxHW+qhkVADMVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMTJJVzdCYUFoRVhDOHZQRWRiNnFHUlVBTXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEcDNNr/UL7vEUkPzOJW
KH9mmw6pPoKqnS02i8Y5SdjQfFAeH8aTYqz7pUtSettn1QSn9Lvy4gIwdkd9Ydk8
EdZ5M30QlGOjL4INo9gPA0rlXwYg/Dnx8jUEJaA2C5msJ4m2CIOjQxBHUYLyBYLW
KjXHBOyc7TVp7pBa3s6FD0qCs6VPG2YLu0a4Q0j9/rQUkj9oU+/4dJw7ATT94wud
uuY/DF9ikD+hXCbpjj1TBU4ReLq3dD9YshTl2YLv5W7a9i1YsR1C9iMmZ/llYcxq
MJbCYygvapAS7ukmOPUkWkr5VAF7I1kfkSWTB5hqOLfyjF+4q/1iO30X2xhbgZEZ
yUA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:03:15 2025 by rpki-client