Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8PKndl2voe_yc5KwuLbQaF54A74.roa
File: 8PKndl2voe_yc5KwuLbQaF54A74.roa (raw, json)
Hash identifier: wh+ZRviITPb/O29IOW5JRjSmIEoTe/1KyFTYGl86WDg=
Subject key identifier: F0:F2:A7:76:5D:AF:A1:EF:F2:73:92:B0:B8:B6:D0:68:5E:78:03:BE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C021E9B56B3F6025843088C27825DDB5C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8PKndl2voe_yc5KwuLbQaF54A74.roa
Signing time: Fri 24 Nov 2023 16:16:49 +0000
ROA not before: Fri 24 Nov 2023 16:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:1e:9b:56:b3:f6:02:58:43:08:8c:27:82:5d:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 16:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0f2a7765dafa1eff27392b0b8b6d0685e7803be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:8d:4e:dd:54:7e:26:90:f1:7b:03:b4:54:
ed:e9:7f:54:33:a2:21:a7:42:36:83:23:09:9a:a4:
90:85:18:4f:30:14:24:5a:6e:53:ff:e8:1c:f9:4d:
5d:f8:08:ca:f7:92:d1:95:45:c8:a2:ff:53:a0:f9:
f9:ba:94:07:bd:80:85:c5:f0:01:df:2f:40:58:46:
35:cf:a0:5f:ab:9e:82:6c:f3:6a:bb:df:5e:d5:79:
a9:43:a3:6f:f0:85:50:6e:43:75:c2:23:9e:45:8d:
66:72:91:ed:4e:01:42:96:ac:65:00:ca:5c:35:fc:
6b:c1:de:1e:d0:fe:72:d7:f8:39:47:8d:70:ea:95:
eb:fe:78:7c:78:b7:42:71:47:28:f4:e6:26:20:28:
6f:04:61:30:c6:07:c3:31:83:b3:a6:00:a2:e9:84:
ba:9d:49:96:28:5c:49:36:e3:01:0d:25:cf:d1:40:
d2:48:2c:e1:fc:8d:7d:a8:4a:18:11:fc:74:7f:15:
1f:48:e0:7d:27:6a:84:55:3e:76:d8:8e:cc:17:8c:
85:bd:49:6f:05:69:28:6e:ba:b8:f5:a7:2c:e6:50:
ee:67:a0:b3:3f:6b:0c:93:d8:0a:8e:a2:32:eb:52:
a8:af:e1:11:cc:2f:92:a3:7d:3f:e5:da:f0:ad:86:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:A7:76:5D:AF:A1:EF:F2:73:92:B0:B8:B6:D0:68:5E:78:03:BE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8PKndl2voe_yc5KwuLbQaF54A74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:d0:bf:a2:07:3a:1d:9c:ed:98:47:ff:f1:63:19:f6:d4:fa:
fe:a2:93:08:34:01:cf:1b:79:1f:cc:d5:6a:df:e7:cd:7e:e9:
87:c0:71:41:1b:eb:9b:49:48:c5:c9:c9:5f:32:21:02:34:f7:
1b:04:d9:72:01:41:86:65:7c:f8:e1:ca:a9:9d:aa:8c:1c:6e:
c0:f3:52:6a:5c:d8:2a:58:21:f7:f2:ad:2c:ae:d2:51:aa:18:
7e:2c:ef:ce:af:38:f5:bf:3e:9f:90:40:a4:42:77:50:59:0c:
fd:da:ec:75:74:fe:86:2e:15:e9:4a:f2:16:8e:cf:bc:df:1f:
58:3e:f4:d7:48:12:5e:1f:de:6b:17:83:e6:97:eb:10:83:6b:
e0:11:f5:5f:f3:0e:8e:c1:16:1e:66:6b:08:b3:19:b1:3c:3c:
66:ce:bc:71:79:45:75:38:47:4d:c7:7a:ba:c7:d9:d8:22:45:
77:f2:35:f5:6c:b5:df:c6:9c:f7:76:9a:c5:02:0f:8d:d5:f8:
2d:f9:9e:f8:83:49:70:96:70:43:04:b6:ff:f6:c9:58:e0:0d:
b1:dc:b2:e6:ff:8a:db:49:d3:5b:71:44:74:2f:ae:d8:10:78:
12:af:5b:02:c1:9b:6b:fa:62:09:54:85:6c:ba:63:e9:4d:fe:
70:a8:22:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwCHptWs/YCWEMIjCeCXdtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI0MTYxNjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGYyYTc3NjVkYWZhMWVmZjI3MzkyYjBiOGI2ZDA2ODVlNzgwM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxCNTt1UfiaQ8XsDtFTt6X9UM6Ih
p0I2gyMJmqSQhRhPMBQkWm5T/+gc+U1d+AjK95LRlUXIov9ToPn5upQHvYCFxfAB
3y9AWEY1z6Bfq56CbPNqu99e1XmpQ6Nv8IVQbkN1wiOeRY1mcpHtTgFClqxlAMpc
Nfxrwd4e0P5y1/g5R41w6pXr/nh8eLdCcUco9OYmIChvBGEwxgfDMYOzpgCi6YS6
nUmWKFxJNuMBDSXP0UDSSCzh/I19qEoYEfx0fxUfSOB9J2qEVT522I7MF4yFvUlv
BWkobrq49acs5lDuZ6CzP2sMk9gKjqIy61Kor+ERzC+So30/5drwrYbQdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPDyp3Zdr6Hv8nOSsLi20GheeAO+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOFBLbmRsMnZvZV95YzVLd3VMYlFhRjU0QTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADXQv6IHOh2c7ZhH//Fj
GfbU+v6ikwg0Ac8beR/M1Wrf581+6YfAcUEb65tJSMXJyV8yIQI09xsE2XIBQYZl
fPjhyqmdqowcbsDzUmpc2CpYIffyrSyu0lGqGH4s786vOPW/Pp+QQKRCd1BZDP3a
7HV0/oYuFelK8haOz7zfH1g+9NdIEl4f3msXg+aX6xCDa+AR9V/zDo7BFh5mawiz
GbE8PGbOvHF5RXU4R03HerrH2dgiRXfyNfVstd/GnPd2msUCD43V+C35nviDSXCW
cEMEtv/2yVjgDbHcsub/ittJ01txRHQvrtgQeBKvWwLBm2v6YglUhWy6Y+lN/nCo
IlY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:15 2025 by rpki-client