Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5J4jFa4SQliidjtY86XJ9stM6_A.roa
File: 5J4jFa4SQliidjtY86XJ9stM6_A.roa (raw, json)
Hash identifier: T4WhCqtwpYGzyL9T0ptb0oW+DKIawUvfGXJlY2+mT5M=
Subject key identifier: E4:9E:23:15:AE:12:42:58:A2:76:3B:58:F3:A5:C9:F6:CB:4C:EB:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEA163AA41E8C78D5C3B1FAD963A7BC87
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5J4jFa4SQliidjtY86XJ9stM6_A.roa
Signing time: Sun 01 Oct 2023 07:13:59 +0000
ROA not before: Sun 01 Oct 2023 07:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:16:3a:a4:1e:8c:78:d5:c3:b1:fa:d9:63:a7:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 07:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49e2315ae124258a2763b58f3a5c9f6cb4cebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d4:f8:81:3b:d0:e9:a0:e6:22:3d:2e:fb:15:
22:54:53:62:6b:ed:c7:90:eb:57:81:e6:43:1d:91:
06:9e:eb:ea:d4:d7:c1:55:01:80:bb:31:25:8d:6b:
ae:dc:2f:a0:37:27:af:84:d3:3c:fe:6e:37:3b:f3:
e2:41:96:97:7a:01:4f:cf:0a:e7:9b:43:ba:e4:53:
a2:a4:d5:7d:cd:54:69:89:24:a0:e2:a5:35:a4:8b:
85:d5:ef:27:47:09:bf:08:46:0b:fa:ec:17:a8:ce:
2e:b8:c9:bd:03:64:b5:f4:73:03:bf:34:15:a5:f7:
21:c5:83:b7:d9:1f:fd:b1:46:38:d5:bb:55:f7:54:
38:f7:df:a2:63:4e:a2:bb:a8:0d:b0:6b:03:df:33:
88:ad:08:8b:bf:ae:30:41:78:b0:f7:46:7c:98:c9:
45:3a:02:1e:7c:21:eb:9f:45:c4:cb:c4:c5:da:2a:
d8:c3:b3:de:be:09:7e:ff:2b:4b:95:00:5c:ca:92:
31:67:51:e5:b0:80:05:34:37:f6:38:ce:ee:ff:e2:
23:3d:a2:f3:f7:4b:d4:0b:1c:45:13:79:1e:8a:ee:
ed:db:7e:e4:bf:33:cf:03:8c:57:25:9b:8a:74:83:
b6:d6:3e:13:63:80:35:25:d9:03:a6:34:21:58:56:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:23:15:AE:12:42:58:A2:76:3B:58:F3:A5:C9:F6:CB:4C:EB:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5J4jFa4SQliidjtY86XJ9stM6_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:74:d4:1b:76:90:45:55:55:60:7e:35:f8:50:a3:58:bb:5b:
e2:b9:62:ff:cb:86:f5:f8:d3:4e:e8:01:fc:6d:8e:15:ef:9f:
9e:e0:9f:c8:99:c1:f8:a4:28:ed:63:c2:d5:ec:06:ea:2e:45:
f1:a2:af:63:78:b8:10:03:55:77:4c:06:b9:23:2a:f1:a3:a8:
dc:59:c6:eb:fa:51:74:c2:5d:ac:8a:e6:fb:8f:a0:ac:f4:88:
ec:eb:a7:38:a3:b0:93:ec:76:d5:99:d4:ad:09:6b:63:3e:6d:
92:56:b7:6d:35:f7:c3:44:d6:9d:40:b6:ef:62:6d:d5:b7:8c:
6b:eb:88:6b:de:c5:8f:c6:67:1a:f4:23:32:f9:3f:44:02:d8:
87:0a:84:dc:48:3b:d3:d1:a7:9a:ae:f5:1a:0f:f0:a6:df:4d:
a0:c4:4c:31:4e:7b:3f:49:78:da:3d:6d:c9:36:30:ae:56:7b:
f1:6a:e5:ec:d9:a8:42:c9:4b:2c:79:71:4a:4f:80:15:1d:22:
66:cf:5c:87:4c:f0:04:2e:34:ae:09:9d:d4:89:c9:3d:31:c1:
02:33:9e:db:0a:2a:ce:34:bb:81:7b:91:32:8a:b0:65:dd:f1:
5f:9d:cf:4d:a5:81:5e:d0:41:c9:8b:2e:9d:64:34:aa:9d:6a:
ba:62:8a:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrqFjqkHox41cOx+tljp7yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAxMDcxMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDllMjMxNWFlMTI0MjU4YTI3NjNiNThmM2E1YzlmNmNiNGNlYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNT4gTvQ6aDmIj0u+xUiVFNia+3H
kOtXgeZDHZEGnuvq1NfBVQGAuzEljWuu3C+gNyevhNM8/m43O/PiQZaXegFPzwrn
m0O65FOipNV9zVRpiSSg4qU1pIuF1e8nRwm/CEYL+uwXqM4uuMm9A2S19HMDvzQV
pfchxYO32R/9sUY41btV91Q499+iY06iu6gNsGsD3zOIrQiLv64wQXiw90Z8mMlF
OgIefCHrn0XEy8TF2irYw7Pevgl+/ytLlQBcypIxZ1HlsIAFNDf2OM7u/+IjPaLz
90vUCxxFE3keiu7t237kvzPPA4xXJZuKdIO21j4TY4A1JdkDpjQhWFZrxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOSeIxWuEkJYonY7WPOlyfbLTOvwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNUo0akZhNFNRbGlpZGp0WTg2WEo5c3RNNl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGt01Bt2kEVVVWB+NfhQ
o1i7W+K5Yv/LhvX4007oAfxtjhXvn57gn8iZwfikKO1jwtXsBuouRfGir2N4uBAD
VXdMBrkjKvGjqNxZxuv6UXTCXayK5vuPoKz0iOzrpzijsJPsdtWZ1K0Ja2M+bZJW
t20198NE1p1Atu9ibdW3jGvriGvexY/GZxr0IzL5P0QC2IcKhNxIO9PRp5qu9RoP
8KbfTaDETDFOez9JeNo9bck2MK5We/Fq5ezZqELJSyx5cUpPgBUdImbPXIdM8AQu
NK4JndSJyT0xwQIzntsKKs40u4F7kTKKsGXd8V+dz02lgV7QQcmLLp1kNKqdarpi
ihU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:47 2025 by rpki-client