Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/180cMmuYncZmHH3yPvHClZmMPmw.roa
File: 180cMmuYncZmHH3yPvHClZmMPmw.roa (raw, json)
Hash identifier: SkEGIfz1RGg7kQrv3WW4YGSKKhWe0o0Am0FsCXFJSNg=
Subject key identifier: D7:CD:1C:32:6B:98:9D:C6:66:1C:7D:F2:3E:F1:C2:95:99:8C:3E:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBDDC0E21A867DEC54E5D7813E223297E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/180cMmuYncZmHH3yPvHClZmMPmw.roa
Signing time: Sat 11 Nov 2023 10:09:57 +0000
ROA not before: Sat 11 Nov 2023 10:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:dc:0e:21:a8:67:de:c5:4e:5d:78:13:e2:23:29:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 10:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7cd1c326b989dc6661c7df23ef1c295998c3e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:da:bf:51:49:d2:e1:f4:27:98:54:49:80:
84:cd:7e:51:92:2d:27:22:1f:c9:28:69:13:ab:68:
8b:a8:74:6f:ca:77:36:0a:fc:5e:90:74:2a:be:50:
24:24:96:f4:47:38:79:7f:1e:e7:4f:e4:0e:ec:68:
53:50:1e:52:a7:85:b8:db:af:53:fd:f5:98:df:8a:
30:6e:f5:6c:3d:26:a5:40:f4:2f:e8:7f:2e:3a:3b:
df:49:d6:2a:35:7d:81:5d:7f:38:84:b6:aa:83:00:
b2:fe:0c:16:63:45:be:da:02:78:3a:dc:40:18:ce:
a7:7a:f6:e9:65:06:27:8d:95:ee:3f:01:67:de:90:
67:d2:ca:2b:e9:ac:fa:53:07:86:8f:81:78:7a:23:
1b:8e:36:cf:50:93:a1:47:b5:9a:ef:90:09:e4:9a:
5f:33:d2:d1:f2:96:f9:76:da:94:e6:a9:5f:71:d2:
ad:a9:6c:0f:b8:17:80:6e:1f:d7:02:d1:04:41:a4:
78:ea:86:fe:64:d1:d0:2e:ad:8d:48:2f:a7:89:f9:
cb:b0:65:e9:29:f4:da:0a:e7:cf:1c:9e:f5:e8:0c:
11:b1:7d:ac:11:2d:17:46:8c:c3:f9:b9:c1:e8:ff:
96:c9:b8:07:52:fa:fd:0d:8c:46:59:9c:02:22:f9:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:1C:32:6B:98:9D:C6:66:1C:7D:F2:3E:F1:C2:95:99:8C:3E:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/180cMmuYncZmHH3yPvHClZmMPmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:34:a7:0f:eb:80:d1:8d:69:ee:74:ed:33:5d:c6:ea:9a:eb:
96:40:be:59:d3:07:64:0e:f0:27:24:da:ec:00:51:cc:48:5c:
e1:1e:3e:e1:c5:c9:45:42:d9:8d:b3:b0:51:39:e7:bc:01:65:
85:06:45:37:7d:9c:e4:5e:dd:40:e7:be:40:aa:2f:43:f9:57:
dd:fc:26:35:c5:e4:f6:e3:78:00:8e:05:19:67:3c:44:e7:d3:
4d:4b:4b:bf:b0:ba:88:bd:fd:b2:46:7f:00:20:e0:22:c2:bf:
ad:52:c9:21:08:ea:ff:51:ba:5e:8e:2e:9b:29:db:9e:13:8c:
8b:9f:f9:66:26:05:fa:ea:d9:0e:96:ea:99:8e:d1:d5:49:c5:
ca:ad:41:f9:51:e3:fb:60:5d:24:33:a0:cb:56:e4:5d:3b:52:
60:a4:85:9f:5e:1e:86:f0:da:33:50:3b:d2:65:45:d8:e0:1e:
fa:9a:29:25:32:bc:c4:15:0e:45:ad:3b:0d:57:14:55:23:ad:
8d:9b:74:84:5b:57:b1:c4:08:03:d5:af:c9:15:5c:34:a1:f4:
e2:53:fa:1f:19:89:2b:13:4b:ea:e3:15:3a:07:10:a2:15:00:
24:a4:65:a8:f3:5e:af:5f:5e:ac:a4:0b:8a:41:97:21:af:40:
3f:12:c4:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu93A4hqGfexU5deBPiIyl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTExMTAwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2NkMWMzMjZiOTg5ZGM2NjYxYzdkZjIzZWYxYzI5NTk5OGMzZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHav1FJ0uH0J5hUSYCEzX5Rki0n
Ih/JKGkTq2iLqHRvync2CvxekHQqvlAkJJb0Rzh5fx7nT+QO7GhTUB5Sp4W4269T
/fWY34owbvVsPSalQPQv6H8uOjvfSdYqNX2BXX84hLaqgwCy/gwWY0W+2gJ4OtxA
GM6nevbpZQYnjZXuPwFn3pBn0sor6az6UweGj4F4eiMbjjbPUJOhR7Wa75AJ5Jpf
M9LR8pb5dtqU5qlfcdKtqWwPuBeAbh/XAtEEQaR46ob+ZNHQLq2NSC+nifnLsGXp
KfTaCufPHJ716AwRsX2sES0XRozD+bnB6P+WybgHUvr9DYxGWZwCIvmGYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNfNHDJrmJ3GZhx98j7xwpWZjD5sMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMTgwY01tdVluY1ptSEgzeVB2SENsWm1NUG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEo0pw/rgNGNae507TNd
xuqa65ZAvlnTB2QO8Cck2uwAUcxIXOEePuHFyUVC2Y2zsFE557wBZYUGRTd9nORe
3UDnvkCqL0P5V938JjXF5PbjeACOBRlnPETn001LS7+wuoi9/bJGfwAg4CLCv61S
ySEI6v9Rul6OLpsp254TjIuf+WYmBfrq2Q6W6pmO0dVJxcqtQflR4/tgXSQzoMtW
5F07UmCkhZ9eHobw2jNQO9JlRdjgHvqaKSUyvMQVDkWtOw1XFFUjrY2bdIRbV7HE
CAPVr8kVXDSh9OJT+h8ZiSsTS+rjFToHEKIVACSkZajzXq9fXqykC4pBlyGvQD8S
xEM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:07 2025 by rpki-client