Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5KAllhOlYSWWBn1hITZDuX_8yFA.roa
File: 5KAllhOlYSWWBn1hITZDuX_8yFA.roa (raw, json)
Hash identifier: Uuj+E5TPdcVcmrn4dxB2kWeNjvJm1/cTMWvHzhtvfBo=
Subject key identifier: E4:A0:25:96:13:A5:61:25:96:06:7D:61:21:36:43:B9:7F:FC:C8:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B695146CE8BA15F617FA078275077B739
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5KAllhOlYSWWBn1hITZDuX_8yFA.roa
Signing time: Thu 26 Oct 2023 00:10:16 +0000
ROA not before: Thu 26 Oct 2023 00:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:51:46:ce:8b:a1:5f:61:7f:a0:78:27:50:77:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 00:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a0259613a5612596067d61213643b97ffcc850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:de:98:06:d3:c3:e6:63:20:11:fc:ff:54:
fe:20:1b:84:2d:8a:7a:8e:a1:4e:35:a6:1f:73:b8:
4a:85:2c:79:8e:c6:4d:0c:ab:df:d9:81:20:a6:45:
b5:2f:d4:1b:1c:ac:ef:ef:10:ad:28:0c:89:8e:84:
79:32:2a:9b:8a:b6:87:9e:ab:ac:bf:8c:86:af:66:
1b:fc:11:19:09:92:f4:42:40:57:6c:c4:d0:e4:a9:
a8:02:10:23:c9:70:a5:64:de:48:9f:18:9a:f9:d3:
3b:b1:57:dc:94:36:cb:e9:d0:de:23:79:1a:aa:78:
f8:8e:83:0b:71:e4:78:4a:e6:6e:40:a9:ff:9e:5f:
94:98:a7:2a:ff:f3:52:15:59:d3:fb:fa:d0:f6:d8:
fd:78:7d:00:10:60:51:e8:07:df:53:b1:55:dc:58:
05:4b:13:f1:f0:d3:24:1b:43:d2:67:0d:49:e4:eb:
9d:43:2e:c0:26:90:a6:f7:84:a3:c1:1e:ea:d7:47:
43:41:b6:01:ef:4d:3f:2e:79:c1:28:c9:c9:9d:28:
b0:67:49:17:0e:10:1d:8a:2a:16:60:a4:6c:d2:06:
05:4a:34:a5:f0:02:84:7c:2a:16:f7:9f:55:dd:7b:
75:b5:cd:31:11:ed:a2:c1:73:4d:e2:b4:57:65:ec:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:25:96:13:A5:61:25:96:06:7D:61:21:36:43:B9:7F:FC:C8:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5KAllhOlYSWWBn1hITZDuX_8yFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:68:8e:d0:82:4b:72:64:aa:96:ac:48:9c:a6:30:15:67:6b:
e7:85:09:e7:7a:ac:f1:f5:84:b9:40:2c:b6:ab:32:4c:6a:fc:
aa:d0:77:8f:d2:88:2a:d0:da:e9:99:83:41:3d:25:b7:91:ee:
59:7e:07:0c:99:4e:06:02:22:83:15:70:ec:60:0a:0e:b9:fd:
01:f4:6a:25:56:b2:e8:f8:f7:45:eb:91:9a:22:d5:5f:77:d0:
48:ed:0e:ee:e9:d7:a3:f7:0f:40:df:9e:fa:78:5f:17:90:42:
20:d6:b9:a9:64:a4:4e:97:1b:89:73:04:41:1b:7c:c4:12:fd:
d8:16:34:ac:d4:49:cd:39:87:d0:78:a6:c5:cf:d2:31:46:57:
05:49:f1:76:b2:90:67:b8:d6:d3:e8:c2:62:2a:0c:1b:d4:27:
c6:b7:6d:fd:0e:17:27:6d:92:6c:be:7b:4d:95:b4:86:87:e9:
aa:81:8d:12:0a:01:a5:80:e0:a8:d2:4b:3c:f9:3d:03:f1:60:
44:f6:1b:1c:9a:76:4b:c3:16:6f:8e:1e:82:a5:4a:69:0b:fd:
a8:a5:7a:c0:2e:5e:46:f4:b8:91:e4:25:d5:a2:44:b3:3f:b8:
c0:a1:13:6c:7c:69:37:8e:f5:28:b9:94:bc:99:ae:01:52:89:
e0:33:e5:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtpUUbOi6FfYX+geCdQd7c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MDAxMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGEwMjU5NjEzYTU2MTI1OTYwNjdkNjEyMTM2NDNiOTdmZmNjODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPemAbTw+ZjIBH8/1T+IBuELYp6
jqFONaYfc7hKhSx5jsZNDKvf2YEgpkW1L9QbHKzv7xCtKAyJjoR5MiqbiraHnqus
v4yGr2Yb/BEZCZL0QkBXbMTQ5KmoAhAjyXClZN5Inxia+dM7sVfclDbL6dDeI3ka
qnj4joMLceR4SuZuQKn/nl+UmKcq//NSFVnT+/rQ9tj9eH0AEGBR6AffU7FV3FgF
SxPx8NMkG0PSZw1J5OudQy7AJpCm94SjwR7q10dDQbYB700/LnnBKMnJnSiwZ0kX
DhAdiioWYKRs0gYFSjSl8AKEfCoW959V3Xt1tc0xEe2iwXNN4rRXZezqBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOSgJZYTpWEllgZ9YSE2Q7l//MhQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNUtBbGxoT2xZU1dXQm4xaElUWkR1WF84eUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIhojtCCS3JkqpasSJym
MBVna+eFCed6rPH1hLlALLarMkxq/KrQd4/SiCrQ2umZg0E9JbeR7ll+BwyZTgYC
IoMVcOxgCg65/QH0aiVWsuj490XrkZoi1V930EjtDu7p16P3D0Dfnvp4XxeQQiDW
ualkpE6XG4lzBEEbfMQS/dgWNKzUSc05h9B4psXP0jFGVwVJ8XaykGe41tPowmIq
DBvUJ8a3bf0OFydtkmy+e02VtIaH6aqBjRIKAaWA4KjSSzz5PQPxYET2GxyadkvD
Fm+OHoKlSmkL/ailesAuXkb0uJHkJdWiRLM/uMChE2x8aTeO9Si5lLyZrgFSieAz
5RA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:14:32 2025 by rpki-client