Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RHTVEp9imAhNpYGHIEONrhlwy4.roa
File: 5RHTVEp9imAhNpYGHIEONrhlwy4.roa (raw, json)
Hash identifier: uY9QLFzRTlW/WyLoTLBksSCGU5f7MxzqlgR1jVVNXro=
Subject key identifier: E5:11:D3:54:4A:7D:8A:60:21:36:96:06:1C:81:0E:36:B8:65:C3:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B646758200DC514E48BD6A51993F32526
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RHTVEp9imAhNpYGHIEONrhlwy4.roa
Signing time: Wed 25 Oct 2023 01:16:16 +0000
ROA not before: Wed 25 Oct 2023 01:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:64:67:58:20:0d:c5:14:e4:8b:d6:a5:19:93:f3:25:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 01:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e511d3544a7d8a60213696061c810e36b865c32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:7d:90:fb:bc:74:44:1f:b6:d6:27:f4:46:
a4:88:af:26:10:55:67:79:e4:46:6f:46:70:16:10:
b5:0f:24:69:af:b3:54:32:d3:c3:20:3e:39:a6:ec:
fd:16:1d:d4:e3:96:ea:6b:ca:4b:27:9b:fc:96:28:
98:3c:cb:ca:a8:24:e4:b3:ac:2e:91:dc:05:35:13:
ce:b6:0b:7d:75:5f:71:b8:52:4c:14:91:89:19:f8:
68:94:2d:1f:71:b0:3b:c4:ad:d2:2f:b4:f7:fa:6a:
d0:f4:e1:6a:9f:08:cc:04:39:01:1d:27:84:ae:e7:
3e:80:f6:68:70:79:bf:b1:5b:bf:f1:8e:96:35:09:
e5:6a:c4:f4:6d:9f:11:4f:5d:09:46:f2:ef:78:12:
2f:48:1c:0e:5b:ca:e7:c4:33:dd:33:49:65:a2:d7:
58:4b:31:4b:93:9c:83:fc:d3:e6:83:d9:6c:73:c6:
b4:1f:5c:e2:a7:63:6c:6c:04:c7:7c:30:32:ce:52:
b1:fe:66:dd:38:e5:e1:47:75:f4:f1:3e:c9:cf:78:
18:74:a2:0b:1b:3f:b6:e4:8a:9f:3b:d6:a2:71:bf:
4f:dd:a2:64:bd:c4:25:49:c8:9d:db:f6:04:c5:19:
9f:18:9c:e1:a7:09:36:7f:79:a3:f1:62:e1:9d:56:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:D3:54:4A:7D:8A:60:21:36:96:06:1C:81:0E:36:B8:65:C3:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RHTVEp9imAhNpYGHIEONrhlwy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:50:cf:f2:06:3b:9b:69:38:63:d4:59:e3:de:09:53:fc:fa:
53:59:66:25:9a:17:09:e5:0f:1a:4a:ba:f5:2e:29:98:94:4e:
d8:40:6a:0c:fa:30:ea:e4:a5:82:78:36:94:b5:93:43:60:0c:
cf:4d:cf:d7:eb:2e:2e:4d:5e:82:75:be:ab:ee:cf:f1:65:2d:
0f:0c:c1:77:47:36:75:60:3e:1a:dc:84:48:58:a3:9c:4a:ad:
37:0e:3e:06:60:64:3e:5a:a2:94:a8:02:38:5f:13:43:ab:f2:
f1:e8:43:f3:2d:86:55:84:33:9f:cf:9c:90:14:4c:c4:c7:c7:
e4:41:97:df:85:db:53:79:fe:a8:c1:ee:38:3b:5b:0d:9a:5b:
6d:7f:cb:75:ac:34:c3:0a:9f:2b:1b:4f:11:f2:a9:43:1f:99:
42:c8:0e:7e:bf:e2:78:72:55:cb:a3:25:51:f1:05:af:8b:dc:
0d:8f:a0:17:67:5b:e9:78:e0:20:8f:6a:f7:ef:8f:f8:f2:30:
ae:36:39:d0:0e:e5:22:27:b9:11:61:07:6c:54:b4:c0:1b:d3:
83:fe:93:48:e2:57:d7:07:1b:ca:2a:fd:0f:46:94:c4:87:0d:
9b:3d:6b:63:d6:b5:ee:54:f2:4c:4b:71:b1:f2:c3:7b:be:c0:
1b:0b:aa:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtkZ1ggDcUU5IvWpRmT8yUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI1MDExNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTExZDM1NDRhN2Q4YTYwMjEzNjk2MDYxYzgxMGUzNmI4NjVjMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRF9kPu8dEQfttYn9EakiK8mEFVn
eeRGb0ZwFhC1DyRpr7NUMtPDID45puz9Fh3U45bqa8pLJ5v8liiYPMvKqCTks6wu
kdwFNRPOtgt9dV9xuFJMFJGJGfholC0fcbA7xK3SL7T3+mrQ9OFqnwjMBDkBHSeE
ruc+gPZocHm/sVu/8Y6WNQnlasT0bZ8RT10JRvLveBIvSBwOW8rnxDPdM0llotdY
SzFLk5yD/NPmg9lsc8a0H1zip2NsbATHfDAyzlKx/mbdOOXhR3X08T7Jz3gYdKIL
Gz+25IqfO9aicb9P3aJkvcQlScid2/YExRmfGJzhpwk2f3mj8WLhnVYIZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOUR01RKfYpgITaWBhyBDja4ZcMuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNVJIVFZFcDlpbUFoTnBZR0hJRU9Ocmhsd3k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZQz/IGO5tpOGPUWePe
CVP8+lNZZiWaFwnlDxpKuvUuKZiUTthAagz6MOrkpYJ4NpS1k0NgDM9Nz9frLi5N
XoJ1vqvuz/FlLQ8MwXdHNnVgPhrchEhYo5xKrTcOPgZgZD5aopSoAjhfE0Or8vHo
Q/MthlWEM5/PnJAUTMTHx+RBl9+F21N5/qjB7jg7Ww2aW21/y3WsNMMKnysbTxHy
qUMfmULIDn6/4nhyVcujJVHxBa+L3A2PoBdnW+l44CCPavfvj/jyMK42OdAO5SIn
uRFhB2xUtMAb04P+k0jiV9cHG8oq/Q9GlMSHDZs9a2PWte5U8kxLcbHyw3u+wBsL
qjs=
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:17:56 2025 by rpki-client