Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2g7GemcX_VzRoDaYIXfRbJ-GK74.roa
File: 2g7GemcX_VzRoDaYIXfRbJ-GK74.roa (raw, json)
Hash identifier: 2KjWxE93F/NL53JuHlP3agQgS56i/b3ImCpcG6TFH/c=
Subject key identifier: DA:0E:C6:7A:67:17:FD:5C:D1:A0:36:98:21:77:D1:6C:9F:86:2B:BE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C408C705D9414739F750C4C57ECA81884
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2g7GemcX_VzRoDaYIXfRbJ-GK74.roa
Signing time: Wed 06 Dec 2023 19:13:14 +0000
ROA not before: Wed 06 Dec 2023 19:13:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:8c:70:5d:94:14:73:9f:75:0c:4c:57:ec:a8:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 19:13:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0ec67a6717fd5cd1a036982177d16c9f862bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:21:fc:af:9d:56:a7:0e:ae:e5:98:8b:3e:
2b:a9:05:c4:9e:91:0f:ca:ce:51:f5:b2:9b:f0:71:
3b:2b:6b:f2:c4:69:32:26:22:ec:79:40:8e:42:30:
0a:90:19:19:1e:ee:12:a8:7c:98:77:fa:34:48:83:
8e:8a:ef:92:f7:5c:d6:f9:1e:63:6b:46:fa:05:b6:
67:93:6d:b8:8e:23:d1:27:d1:c8:5b:94:cc:fc:0a:
a8:a3:93:11:a2:80:b0:87:52:cb:47:f0:b4:ab:b6:
90:30:50:24:37:19:0c:30:ee:39:f5:22:5b:ba:37:
47:10:55:d8:a2:e9:84:7b:52:12:b0:11:97:d3:6e:
6d:f5:ef:2b:82:d4:a0:5b:b1:35:5e:ac:66:ef:8e:
9b:de:22:11:aa:a2:72:4b:48:54:3e:c2:e3:c1:47:
5f:4e:c8:a9:1a:06:44:e3:28:56:4b:12:a0:0b:68:
d7:1d:ab:a9:1e:e6:a4:e1:24:33:63:c7:06:2d:17:
86:96:17:ef:27:1b:92:66:ba:a5:1b:25:aa:88:47:
6c:0a:56:c2:93:fa:19:7b:4d:2f:76:16:81:90:2f:
48:07:bd:a8:33:ad:de:ce:a3:76:58:e0:a7:3c:6e:
0b:c9:c2:d8:22:52:e1:c8:a3:83:ae:6b:8f:31:e4:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:C6:7A:67:17:FD:5C:D1:A0:36:98:21:77:D1:6C:9F:86:2B:BE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2g7GemcX_VzRoDaYIXfRbJ-GK74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c3:19:5e:e3:82:7b:0a:ea:e7:c4:65:f2:0c:0a:db:dc:34:
47:06:3a:66:3b:8a:84:a0:27:5e:d6:37:bd:5a:d2:e6:79:95:
cc:36:22:13:d4:ef:95:d8:0d:2a:e5:5b:36:d9:1b:f7:bb:d4:
27:23:cb:83:4b:77:c0:8a:c3:43:39:eb:95:ff:06:2e:0d:d5:
1f:de:19:a6:50:ac:9f:a9:7c:91:83:c6:f7:09:82:57:fa:31:
79:4f:69:aa:ff:f3:1a:d5:b6:b9:aa:5a:3d:05:57:7d:40:f6:
aa:b8:fd:89:6b:81:55:e7:a8:c5:c8:b9:a0:65:c5:26:cb:bf:
33:5a:e6:62:37:2f:e9:56:10:b9:46:8c:70:bc:11:ec:c2:f3:
92:59:99:e6:c8:96:b3:3c:ef:08:c5:b0:5b:2f:6a:87:a2:15:
70:22:4a:a7:88:22:e0:df:3a:41:06:7a:9b:9d:bd:99:56:89:
4e:91:16:33:0b:32:d2:da:c8:da:c8:58:08:fc:ec:1f:49:08:
d9:67:be:e0:f0:d1:58:54:bc:f0:bc:ea:6b:93:fc:cb:9c:74:
57:28:41:30:ff:bf:aa:86:42:95:2b:ff:e3:67:e7:49:16:95:
5a:76:72:95:64:d9:7f:4f:3e:6f:29:83:06:92:cf:9c:79:54:
81:4b:f9:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxAjHBdlBRzn3UMTFfsqBiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTkxMzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTBlYzY3YTY3MTdmZDVjZDFhMDM2OTgyMTc3ZDE2YzlmODYyYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Mh/K+dVqcOruWYiz4rqQXEnpEP
ys5R9bKb8HE7K2vyxGkyJiLseUCOQjAKkBkZHu4SqHyYd/o0SIOOiu+S91zW+R5j
a0b6BbZnk224jiPRJ9HIW5TM/Aqoo5MRooCwh1LLR/C0q7aQMFAkNxkMMO459SJb
ujdHEFXYoumEe1ISsBGX025t9e8rgtSgW7E1Xqxm746b3iIRqqJyS0hUPsLjwUdf
TsipGgZE4yhWSxKgC2jXHaupHuak4SQzY8cGLReGlhfvJxuSZrqlGyWqiEdsClbC
k/oZe00vdhaBkC9IB72oM63ezqN2WOCnPG4LycLYIlLhyKODrmuPMeTngwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNoOxnpnF/1c0aA2mCF30Wyfhiu+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMmc3R2VtY1hfVnpSb0RhWUlYZlJiSi1HSzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKbDGV7jgnsK6ufEZfIM
CtvcNEcGOmY7ioSgJ17WN71a0uZ5lcw2IhPU75XYDSrlWzbZG/e71Ccjy4NLd8CK
w0M565X/Bi4N1R/eGaZQrJ+pfJGDxvcJglf6MXlPaar/8xrVtrmqWj0FV31A9qq4
/YlrgVXnqMXIuaBlxSbLvzNa5mI3L+lWELlGjHC8EezC85JZmebIlrM87wjFsFsv
aoeiFXAiSqeIIuDfOkEGepudvZlWiU6RFjMLMtLayNrIWAj87B9JCNlnvuDw0VhU
vPC86muT/MucdFcoQTD/v6qGQpUr/+Nn50kWlVp2cpVk2X9PPm8pgwaSz5x5VIFL
+U0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:29 2025 by rpki-client