Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GQs4ufyBXpiHVvmr6a68kFR34Q.roa
File: 5GQs4ufyBXpiHVvmr6a68kFR34Q.roa (raw, json)
Hash identifier: bCk/J1/x/y24suCt0GmcZIQvIfCZSM1MTf77GDC0BDc=
Subject key identifier: E4:64:2C:E2:E7:F2:05:7A:62:1D:5B:E6:AF:A6:BA:F2:41:51:DF:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B52CE07CCB1A72A5CB3F45462BD2C2F55
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GQs4ufyBXpiHVvmr6a68kFR34Q.roa
Signing time: Sat 21 Oct 2023 15:15:15 +0000
ROA not before: Sat 21 Oct 2023 15:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:ce:07:cc:b1:a7:2a:5c:b3:f4:54:62:bd:2c:2f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 15:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4642ce2e7f2057a621d5be6afa6baf24151df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:22:62:40:94:9e:b0:2c:cd:43:81:d2:9f:
c9:ec:8b:73:d0:f8:12:96:36:89:f6:77:98:16:ff:
3d:e1:ed:1f:ce:2c:18:bb:15:fb:88:a4:e8:ea:91:
b8:5b:17:2a:f5:dd:22:20:d3:fd:1b:a2:d1:15:f2:
b2:19:f3:22:65:3b:dc:fb:e7:34:2e:8d:02:b3:a4:
85:30:c9:99:9e:cc:23:18:a8:dd:02:1d:8c:52:fe:
09:97:1a:19:d2:cd:a2:b3:4b:e5:f1:75:03:82:70:
dc:c8:a3:b6:2c:c5:5b:6c:9b:34:23:8d:e9:2b:a9:
30:83:90:cb:22:35:8c:51:cb:b0:10:3a:e0:c4:7a:
06:5a:6a:16:d5:07:08:de:1c:84:b0:d3:23:0e:7f:
f1:04:da:7d:f4:15:68:61:62:28:98:2e:0e:a2:c4:
f8:eb:c4:b1:3d:00:f6:dc:bd:1a:5f:0e:c3:1c:ac:
e2:84:08:85:c8:64:24:38:13:b3:55:b9:74:af:8d:
6f:a6:3b:a9:85:c3:00:9e:02:c0:7a:ea:b9:7b:cd:
6f:89:5f:e0:ce:e9:de:17:4e:73:33:17:64:a9:67:
e8:40:8f:31:b4:2d:05:23:66:27:e5:0d:db:24:d8:
9f:cf:34:a1:db:5a:a9:11:04:8b:58:f7:84:27:b6:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:2C:E2:E7:F2:05:7A:62:1D:5B:E6:AF:A6:BA:F2:41:51:DF:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5GQs4ufyBXpiHVvmr6a68kFR34Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:6e:25:76:09:79:4c:9a:80:c5:36:f2:f7:46:0e:7a:07:6f:
9e:17:20:33:bb:c0:50:22:ad:55:4b:81:9f:82:a8:72:18:40:
9a:18:14:39:e7:bb:4e:3e:41:b6:91:3e:ef:5a:5b:5f:e4:0c:
31:1d:41:65:ba:80:9f:06:5d:1c:34:28:3c:ba:65:bb:4e:e2:
6a:94:bc:4d:79:1a:cc:9a:e0:7b:56:0b:3c:98:cc:44:c2:3c:
01:2e:d0:37:9f:40:6c:ba:65:94:51:19:f8:12:da:4f:2b:c5:
e2:5b:65:18:76:b5:02:6e:9d:5c:27:71:4c:ee:ab:c4:b7:95:
b0:ba:60:cd:20:18:2e:a0:26:52:f7:95:f9:a1:3f:34:28:e2:
51:ac:05:59:97:7c:cc:aa:58:58:ae:9a:97:2d:d3:0c:b7:f3:
c0:0d:28:3a:81:fc:5b:89:e2:97:92:7d:33:2d:ce:31:d8:16:
7e:7a:14:ae:5a:25:aa:9b:d6:76:a5:df:27:2e:87:03:93:8b:
cc:50:fc:00:48:83:d9:2a:a4:a7:b7:10:08:dc:08:5c:8a:73:
4c:9c:3c:28:ab:f8:73:f1:47:21:1f:8c:85:35:2a:89:63:3a:
51:a3:1d:ec:7c:8f:f0:2a:03:bd:1d:95:bf:6d:bc:79:8d:83:
e2:c3:54:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtSzgfMsacqXLP0VGK9LC9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMTUxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDY0MmNlMmU3ZjIwNTdhNjIxZDViZTZhZmE2YmFmMjQxNTFkZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO8iYkCUnrAszUOB0p/J7Itz0PgS
ljaJ9neYFv894e0fziwYuxX7iKTo6pG4Wxcq9d0iINP9G6LRFfKyGfMiZTvc++c0
Lo0Cs6SFMMmZnswjGKjdAh2MUv4JlxoZ0s2is0vl8XUDgnDcyKO2LMVbbJs0I43p
K6kwg5DLIjWMUcuwEDrgxHoGWmoW1QcI3hyEsNMjDn/xBNp99BVoYWIomC4OosT4
68SxPQD23L0aXw7DHKzihAiFyGQkOBOzVbl0r41vpjuphcMAngLAeuq5e81viV/g
zuneF05zMxdkqWfoQI8xtC0FI2Yn5Q3bJNifzzSh21qpEQSLWPeEJ7b9oQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFORkLOLn8gV6Yh1b5q+muvJBUd+EMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNUdRczR1ZnlCWHBpSFZ2bXI2YTY4a0ZSMzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADpuJXYJeUyagMU28vdG
DnoHb54XIDO7wFAirVVLgZ+CqHIYQJoYFDnnu04+QbaRPu9aW1/kDDEdQWW6gJ8G
XRw0KDy6ZbtO4mqUvE15Gsya4HtWCzyYzETCPAEu0DefQGy6ZZRRGfgS2k8rxeJb
ZRh2tQJunVwncUzuq8S3lbC6YM0gGC6gJlL3lfmhPzQo4lGsBVmXfMyqWFiumpct
0wy388ANKDqB/FuJ4peSfTMtzjHYFn56FK5aJaqb1nal3ycuhwOTi8xQ/ABIg9kq
pKe3EAjcCFyKc0ycPCir+HPxRyEfjIU1KoljOlGjHex8j/AqA70dlb9tvHmNg+LD
VI0=
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:54 2025 by rpki-client