Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/17HAS1sk2KYB6JRAfRedj1nhY8g.roa
File: 17HAS1sk2KYB6JRAfRedj1nhY8g.roa (raw, json)
Hash identifier: Pjc/D+kcgUdGLxy2Du2d9es86TiPRqABV5AIOEk+EIc=
Subject key identifier: D7:B1:C0:4B:5B:24:D8:A6:01:E8:94:40:7D:17:9D:8F:59:E1:63:C8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7FA31523417C1994ED1BADE3B824F824
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/17HAS1sk2KYB6JRAfRedj1nhY8g.roa
Signing time: Mon 30 Oct 2023 08:11:16 +0000
ROA not before: Mon 30 Oct 2023 08:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:a3:15:23:41:7c:19:94:ed:1b:ad:e3:b8:24:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 08:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7b1c04b5b24d8a601e894407d179d8f59e163c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:25:53:70:ae:0d:93:33:f7:91:7f:ac:93:
36:9b:95:b0:e3:ae:29:9a:e4:5e:c5:20:11:a1:b2:
1d:25:b3:e6:05:44:37:b3:b8:f6:ff:1c:a0:d7:7f:
5d:86:38:d9:98:ec:9f:d6:ef:a2:cd:d1:50:d4:b4:
72:ef:e3:8b:27:88:46:c3:5f:e3:d5:79:a7:cd:bc:
fb:78:3e:8e:ae:c6:93:28:f8:84:d1:19:67:61:5b:
23:fb:65:4d:4a:78:2e:44:cc:2e:ac:e8:12:e0:c4:
c2:54:8c:31:bc:5f:bf:99:66:e2:aa:28:05:74:84:
49:f3:10:e5:3d:c2:f6:e4:f5:03:8c:c3:9c:e9:98:
0e:93:a7:2a:bc:37:4c:5c:5c:e1:0e:93:c3:f6:a1:
3c:57:18:f4:a4:9e:ba:7a:d5:7d:5f:2b:c4:85:7e:
91:ba:71:36:db:42:1d:bb:0c:94:83:d1:14:2e:6d:
f9:a5:16:c5:b7:a6:bc:10:7c:24:5e:6e:2b:49:c5:
1c:41:62:01:13:2d:71:2d:4d:3d:d0:9c:46:57:8e:
e8:9c:7d:d8:c7:f8:dd:db:f6:c6:88:af:79:e2:9e:
47:1e:42:c1:ab:8e:0a:de:90:3f:16:93:85:a1:51:
e6:dd:c3:3a:6d:2a:ef:e0:b1:29:f7:68:99:62:a0:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:C0:4B:5B:24:D8:A6:01:E8:94:40:7D:17:9D:8F:59:E1:63:C8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/17HAS1sk2KYB6JRAfRedj1nhY8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:b6:d5:78:c5:52:bf:cb:4e:69:d2:b9:a9:0d:27:1c:3a:fd:
f5:5e:b6:69:9b:3d:40:5f:ed:5a:19:44:4c:1c:78:3f:38:35:
8e:42:30:3f:4a:da:7f:d3:7e:e9:78:13:55:94:d9:41:c1:cb:
45:9b:94:7d:30:29:8d:90:c8:93:a6:7b:bc:52:2b:fc:d8:d0:
07:9d:f8:2e:cf:90:6e:c3:a6:a2:84:18:3f:63:0a:00:c5:36:
f1:b4:db:33:fb:8e:a8:2b:e1:ea:f3:69:27:33:00:9d:5c:7a:
3d:f5:63:3a:d0:00:a5:e1:f7:69:7a:f8:72:91:dd:7c:75:25:
21:6f:ea:83:e7:12:d6:8c:d0:98:bf:53:f1:30:b1:9e:30:c8:
a7:69:1b:34:3d:a7:08:79:3e:5a:9d:17:63:23:51:f5:e7:57:
52:5d:e9:5b:f6:ec:96:e3:68:90:55:87:aa:5d:e0:59:0c:6d:
02:cb:bc:0e:7f:10:53:64:57:3d:24:70:c4:96:81:bf:1f:d6:
5b:7a:fd:ad:fb:6f:3f:ad:69:dd:e7:58:9b:8c:f7:64:21:ee:
12:a7:d5:69:dd:1e:cc:9e:10:a7:92:dd:3b:cc:12:0a:84:f9:
6a:86:f7:a7:8b:5b:1c:e6:91:0e:4e:c7:52:b4:04:c5:fb:72:
8b:7c:fe:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt/oxUjQXwZlO0breO4JPgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMwMDgxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2IxYzA0YjViMjRkOGE2MDFlODk0NDA3ZDE3OWQ4ZjU5ZTE2M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwElU3CuDZMz95F/rJM2m5Ww464p
muRexSARobIdJbPmBUQ3s7j2/xyg139dhjjZmOyf1u+izdFQ1LRy7+OLJ4hGw1/j
1Xmnzbz7eD6OrsaTKPiE0RlnYVsj+2VNSnguRMwurOgS4MTCVIwxvF+/mWbiqigF
dIRJ8xDlPcL25PUDjMOc6ZgOk6cqvDdMXFzhDpPD9qE8Vxj0pJ66etV9XyvEhX6R
unE220IduwyUg9EULm35pRbFt6a8EHwkXm4rScUcQWIBEy1xLU090JxGV47onH3Y
x/jd2/bGiK954p5HHkLBq44K3pA/FpOFoVHm3cM6bSrv4LEp92iZYqAliQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNexwEtbJNimAeiUQH0XnY9Z4WPIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMTdIQVMxc2syS1lCNkpSQWZSZWRqMW5oWThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHO21XjFUr/LTmnSuakN
Jxw6/fVetmmbPUBf7VoZREwceD84NY5CMD9K2n/Tful4E1WU2UHBy0WblH0wKY2Q
yJOme7xSK/zY0Aed+C7PkG7DpqKEGD9jCgDFNvG02zP7jqgr4erzaSczAJ1cej31
YzrQAKXh92l6+HKR3Xx1JSFv6oPnEtaM0Ji/U/EwsZ4wyKdpGzQ9pwh5PlqdF2Mj
UfXnV1Jd6Vv27JbjaJBVh6pd4FkMbQLLvA5/EFNkVz0kcMSWgb8f1lt6/a37bz+t
ad3nWJuM92Qh7hKn1WndHsyeEKeS3TvMEgqE+WqG96eLWxzmkQ5Ox1K0BMX7cot8
/qk=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:46:36 2025 by rpki-client