Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5TxMWzkh89D35ffEGeUajCfsIy8.roa
File: 5TxMWzkh89D35ffEGeUajCfsIy8.roa (raw, json)
Hash identifier: un5CakGgnzZERgjHsg/Nht59t1i8qZpEL1JM5Xxpj3U=
Subject key identifier: E5:3C:4C:5B:39:21:F3:D0:F7:E5:F7:C4:19:E5:1A:8C:27:EC:23:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B159D0DB402DDE87C7F8F7E7CCD5920AE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5TxMWzkh89D35ffEGeUajCfsIy8.roa
Signing time: Mon 09 Oct 2023 18:04:56 +0000
ROA not before: Mon 09 Oct 2023 18:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:159c:7449/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:9d:0d:b4:02:dd:e8:7c:7f:8f:7e:7c:cd:59:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 18:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53c4c5b3921f3d0f7e5f7c419e51a8c27ec232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:48:95:7d:17:a0:5e:cf:66:61:df:59:bd:
fb:ff:ce:60:57:f9:86:9f:b9:c4:dc:04:41:08:bd:
e9:ca:cd:d1:f4:6c:2a:89:d7:a7:4e:91:30:65:11:
84:e5:18:52:d5:eb:01:50:48:39:27:90:d8:12:00:
0c:1d:0d:ec:a4:f0:d9:f9:62:12:8b:a5:db:72:a9:
ec:bf:6e:c5:4c:c9:f7:8a:29:ec:0d:52:6d:aa:9f:
4c:1e:b3:6b:2e:bf:76:72:e0:4b:3a:55:6e:0d:84:
27:4c:6a:61:36:97:53:82:0f:a1:06:88:e7:75:91:
0d:66:5f:b1:4e:04:c8:7a:b4:cb:ac:3c:06:01:9d:
7f:74:64:eb:20:6c:84:56:69:7f:e2:7c:31:e4:4a:
3f:e5:fb:dd:cf:09:da:9b:f4:e9:43:b0:5b:cf:75:
a7:31:16:03:ad:b4:93:6c:4c:c8:b6:e7:42:12:ea:
d9:0d:e7:17:4c:b3:4a:ff:ab:d3:e0:49:92:65:26:
d4:f0:cb:ee:ad:8c:78:14:7f:4a:14:17:2d:20:10:
86:bd:19:32:be:9b:36:de:10:2a:8f:2e:67:d6:fb:
cb:c2:e6:0a:b2:9e:d0:cd:89:40:39:73:36:11:4b:
a1:f2:d0:16:fe:42:82:51:4e:69:83:68:1d:4e:b9:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:4C:5B:39:21:F3:D0:F7:E5:F7:C4:19:E5:1A:8C:27:EC:23:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5TxMWzkh89D35ffEGeUajCfsIy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:ba:93:c0:eb:ef:f8:91:a0:2e:a9:57:42:d8:f1:fc:24:8e:
11:84:bf:97:3d:20:41:c0:2e:b3:d1:37:28:a0:85:6e:f1:08:
da:37:ef:30:d7:9f:79:d9:70:3f:72:95:69:9e:07:df:43:62:
99:fb:5d:7c:a3:c4:1c:c6:39:97:c8:bd:34:78:35:75:3b:63:
aa:33:15:27:11:92:23:78:20:4b:db:75:a2:17:36:8d:ec:68:
11:86:8f:b5:01:dc:50:08:15:30:50:1c:fe:ee:b8:d4:71:ad:
61:b1:24:57:7b:91:05:df:cc:ae:a0:84:c8:e1:c3:9b:21:e2:
91:51:80:90:c0:33:db:7a:ab:ef:63:30:0d:b4:a7:ba:f7:37:
29:8a:3b:58:59:d8:31:b5:98:d2:8c:a9:c3:68:4e:92:f7:ff:
38:12:5a:78:31:34:58:d2:fa:47:5b:38:a2:bc:c6:da:7b:cc:
c1:56:c6:06:85:b6:4d:34:9f:55:f5:6c:e4:12:1b:fe:56:cc:
18:5e:fa:53:73:f9:69:ca:bd:e7:70:fa:30:66:7f:64:1a:9c:
d8:f4:6b:b8:bd:0f:51:0a:76:cd:f4:5d:51:fa:c0:57:71:28:
df:32:2e:0c:12:5d:aa:01:7b:cd:dc:57:a3:c0:f9:3a:76:51:
32:58:99:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsVnQ20At3ofH+PfnzNWSCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA5MTgwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTNjNGM1YjM5MjFmM2QwZjdlNWY3YzQxOWU1MWE4YzI3ZWMyMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0exIlX0XoF7PZmHfWb37/85gV/mG
n7nE3ARBCL3pys3R9GwqidenTpEwZRGE5RhS1esBUEg5J5DYEgAMHQ3spPDZ+WIS
i6Xbcqnsv27FTMn3iinsDVJtqp9MHrNrLr92cuBLOlVuDYQnTGphNpdTgg+hBojn
dZENZl+xTgTIerTLrDwGAZ1/dGTrIGyEVml/4nwx5Eo/5fvdzwnam/TpQ7Bbz3Wn
MRYDrbSTbEzItudCEurZDecXTLNK/6vT4EmSZSbU8MvurYx4FH9KFBctIBCGvRky
vps23hAqjy5n1vvLwuYKsp7QzYlAOXM2EUuh8tAW/kKCUU5pg2gdTrlX8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOU8TFs5IfPQ9+X3xBnlGown7CMvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNVR4TVd6a2g4OUQzNWZmRUdlVWFqQ2ZzSXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFm6k8Dr7/iRoC6pV0LY
8fwkjhGEv5c9IEHALrPRNyighW7xCNo37zDXn3nZcD9ylWmeB99DYpn7XXyjxBzG
OZfIvTR4NXU7Y6ozFScRkiN4IEvbdaIXNo3saBGGj7UB3FAIFTBQHP7uuNRxrWGx
JFd7kQXfzK6ghMjhw5sh4pFRgJDAM9t6q+9jMA20p7r3NymKO1hZ2DG1mNKMqcNo
TpL3/zgSWngxNFjS+kdbOKK8xtp7zMFWxgaFtk00n1X1bOQSG/5WzBhe+lNz+WnK
vedw+jBmf2QanNj0a7i9D1EKds30XVH6wFdxKN8yLgwSXaoBe83cV6PA+Tp2UTJY
mYc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:25 2025 by rpki-client