Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpTCExGBsW6B2xEk3-tTwSAUls.roa
File: 8TpTCExGBsW6B2xEk3-tTwSAUls.roa (raw, json)
Hash identifier: q2nNDn8p3MmpJPYly0QsU4ZIq8Kh/j02dwj00tT+76E=
Subject key identifier: F1:3A:53:08:4C:46:06:C5:BA:07:6C:44:93:7F:AD:4F:04:80:52:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5337E2522EDBCDD5369E173B72EAEC75
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpTCExGBsW6B2xEk3-tTwSAUls.roa
Signing time: Sun 10 Dec 2023 10:13:40 +0000
ROA not before: Sun 10 Dec 2023 10:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:37:e2:52:2e:db:cd:d5:36:9e:17:3b:72:ea:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 10:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13a53084c4606c5ba076c44937fad4f0480525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:b8:bf:2e:6f:35:bd:6b:f2:46:de:fb:9e:
15:34:65:1c:a4:2e:4f:bf:44:4e:51:69:34:60:0a:
b6:9f:44:19:43:2a:1d:74:a5:4f:fe:dc:27:1d:af:
8d:e5:f2:70:f6:6e:92:32:48:1e:8b:5b:bf:65:a8:
8a:06:24:76:95:b1:64:6d:92:d0:f6:78:3f:eb:27:
39:14:64:23:7a:d4:68:23:c6:f0:1d:42:f0:eb:a1:
21:b1:0d:15:5e:8f:2a:06:33:9c:08:0b:4b:6b:05:
c9:15:95:82:bd:ad:7d:71:c0:eb:cf:f3:2e:9c:0e:
34:1d:3f:71:98:ba:fb:da:50:8e:2a:08:7d:e2:76:
7f:f4:e2:a2:77:ef:19:97:ec:b7:5b:70:d0:21:da:
da:3e:d8:79:7a:a2:56:4d:49:95:bc:60:1f:28:2f:
ca:e2:58:57:df:59:a5:96:ca:73:7c:97:6e:58:34:
3f:63:fc:bb:ea:5f:ac:56:d1:25:f2:23:b5:4a:a7:
6a:17:c4:00:4b:d5:90:cf:92:75:d4:76:ff:37:12:
45:8f:02:01:90:9e:0d:45:02:56:2b:a8:a7:ff:ab:
56:fe:bf:b7:8d:a3:c1:72:d3:05:d0:e8:95:61:16:
9f:a9:95:09:2b:30:1d:34:f9:50:eb:a5:b4:f8:e6:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:53:08:4C:46:06:C5:BA:07:6C:44:93:7F:AD:4F:04:80:52:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpTCExGBsW6B2xEk3-tTwSAUls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:c0:bf:61:57:de:95:74:f6:42:47:c0:80:c0:00:4f:86:7b:
ff:6d:94:4a:23:b4:f3:2c:bd:c4:b0:91:1d:dc:50:3f:6e:45:
af:e1:7c:d2:58:d0:fd:8d:be:f4:94:af:1b:1f:5d:6d:6e:01:
85:b2:19:e4:ed:d4:dd:01:e7:89:1d:9e:2a:3e:62:4b:1c:8b:
87:2d:40:c5:37:49:27:0d:a1:3f:e3:26:8f:43:7e:67:45:3e:
29:82:18:6c:f6:37:90:d8:43:93:65:de:5b:d8:4e:2d:10:23:
2a:1c:d7:49:62:61:42:ca:8c:9b:fb:ae:0a:96:4e:bc:31:f4:
73:d8:e7:29:8d:9b:72:62:d1:63:e6:8d:22:9f:fa:a7:12:97:
1e:09:4c:a3:6a:de:07:cb:13:73:35:c0:8e:71:74:38:b7:14:
f1:18:ce:25:8a:fe:c7:e3:2d:2f:13:2e:6b:ed:c8:1d:8a:26:
e6:f3:66:fd:aa:c9:ee:cb:60:d6:d0:ba:52:e2:17:3b:c2:b0:
d5:1c:39:65:c1:db:23:e8:6a:06:42:f0:af:da:fd:df:01:d3:
97:ba:cc:38:f2:9b:c3:22:82:dc:5f:91:89:88:89:f0:cf:fc:
31:64:9c:9f:b5:1c:b2:9b:01:e3:9c:fc:00:a9:ed:b1:9a:ca:
20:6d:a0:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxTN+JSLtvN1TaeFzty6ux1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEwMTAxMzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTNhNTMwODRjNDYwNmM1YmEwNzZjNDQ5MzdmYWQ0ZjA0ODA1MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKm4vy5vNb1r8kbe+54VNGUcpC5P
v0ROUWk0YAq2n0QZQyoddKVP/twnHa+N5fJw9m6SMkgei1u/ZaiKBiR2lbFkbZLQ
9ng/6yc5FGQjetRoI8bwHULw66EhsQ0VXo8qBjOcCAtLawXJFZWCva19ccDrz/Mu
nA40HT9xmLr72lCOKgh94nZ/9OKid+8Zl+y3W3DQIdraPth5eqJWTUmVvGAfKC/K
4lhX31mllspzfJduWDQ/Y/y76l+sVtEl8iO1SqdqF8QAS9WQz5J11Hb/NxJFjwIB
kJ4NRQJWK6in/6tW/r+3jaPBctMF0OiVYRafqZUJKzAdNPlQ66W0+OYj9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPE6UwhMRgbFugdsRJN/rU8EgFJbMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOFRwVENFeEdCc1c2QjJ4RWszLXRUd1NBVWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFjAv2FX3pV09kJHwIDA
AE+Ge/9tlEojtPMsvcSwkR3cUD9uRa/hfNJY0P2NvvSUrxsfXW1uAYWyGeTt1N0B
54kdnio+Yksci4ctQMU3SScNoT/jJo9DfmdFPimCGGz2N5DYQ5Nl3lvYTi0QIyoc
10liYULKjJv7rgqWTrwx9HPY5ymNm3Ji0WPmjSKf+qcSlx4JTKNq3gfLE3M1wI5x
dDi3FPEYziWK/sfjLS8TLmvtyB2KJubzZv2qye7LYNbQulLiFzvCsNUcOWXB2yPo
agZC8K/a/d8B05e6zDjym8MigtxfkYmIifDP/DFknJ+1HLKbAeOc/ACp7bGayiBt
oDY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:32 2025 by rpki-client