Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8ngTDmpBkZ-i4zF4hBhHjYB0Ej0.roa
File: 8ngTDmpBkZ-i4zF4hBhHjYB0Ej0.roa (raw, json)
Hash identifier: e/kKTYE0/8XJujM2fm+02j7f3oYbyIa13bxnTUxboXk=
Subject key identifier: F2:78:13:0E:6A:41:91:9F:A2:E3:31:78:84:18:47:8D:80:74:12:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3A8CC707741B947FDA801D170658ECE9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8ngTDmpBkZ-i4zF4hBhHjYB0Ej0.roa
Signing time: Mon 16 Oct 2023 22:13:06 +0000
ROA not before: Mon 16 Oct 2023 22:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:8c:c7:07:74:1b:94:7f:da:80:1d:17:06:58:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 22:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f278130e6a41919fa2e331788418478d8074123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:e0:0d:b5:ff:73:82:a9:32:a9:a7:57:11:
bb:3c:8a:04:07:a0:80:2a:df:ce:e2:e3:00:2b:4f:
8d:be:76:6e:2a:b3:b4:06:6c:9f:1d:27:3a:13:9b:
0d:b5:b0:4c:ae:f5:a8:53:68:f9:2e:a8:a2:67:9f:
14:1e:70:39:af:30:ca:8b:7c:d0:3c:2f:65:ad:0d:
f8:63:f6:f9:13:d3:67:97:cc:ba:c1:ba:35:63:65:
5d:e4:1f:e7:52:e1:a0:7c:17:a4:66:6f:86:2c:68:
d3:83:99:1f:fa:71:9f:72:98:27:e0:07:51:90:fa:
ac:dd:ba:88:ff:80:15:8f:c9:80:4d:32:7a:b2:4d:
00:df:7d:ef:e1:fc:2d:0c:7f:b9:7d:9a:67:28:cf:
ea:7b:31:68:d4:b5:8b:70:d5:3e:8b:82:3a:46:97:
6e:20:bb:66:bf:6a:da:8f:4e:db:2c:e3:79:77:56:
f7:cc:08:c9:b3:57:21:79:6c:2a:94:c2:b5:41:70:
26:18:8b:b0:d6:07:ea:e5:24:16:9d:b1:ae:39:d4:
36:9f:50:07:94:59:d0:90:0e:1a:a4:ed:70:6f:d1:
7b:df:0c:51:fa:7f:39:cd:5c:56:1e:0c:c5:29:58:
b5:91:3d:99:0a:98:bd:42:56:0a:0e:6f:f7:79:dd:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:78:13:0E:6A:41:91:9F:A2:E3:31:78:84:18:47:8D:80:74:12:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8ngTDmpBkZ-i4zF4hBhHjYB0Ej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:e3:fe:2d:ce:d0:29:cb:70:5e:0a:44:08:5a:4d:53:eb:02:
b8:ea:26:e7:a9:a0:e7:84:55:cd:71:32:51:86:29:f0:51:c1:
aa:ae:fb:f7:7c:e5:fe:36:da:67:7d:7f:44:b3:e9:45:df:f0:
c0:21:b4:ac:f7:6a:19:cc:db:7a:12:92:d6:18:0a:12:bf:49:
ab:6e:98:16:46:51:e8:bd:95:72:d3:57:17:b5:09:f7:41:7b:
d6:db:42:a3:54:3c:85:4b:9d:d9:7a:52:b0:34:98:e3:91:c9:
54:73:82:6a:00:87:42:42:3b:d8:b6:3a:c4:1c:b3:13:f4:f2:
53:d7:02:a3:61:37:42:cc:72:e0:31:2e:c8:ff:03:7c:ae:88:
7a:b8:bf:84:fc:61:04:11:59:df:72:9a:bc:94:0a:5c:70:4f:
16:94:7e:b5:90:11:4f:35:6b:66:ed:5f:fb:3c:e0:ae:30:0a:
90:42:06:e6:13:5b:df:48:18:ff:75:ec:99:de:3a:0e:be:73:
45:e9:28:38:1b:5c:1a:88:01:ea:d4:e8:8d:70:34:7a:59:d8:
36:a8:0c:ea:1f:d8:78:0b:c0:6d:55:c5:1f:5d:18:f4:30:fa:
d6:0c:67:ef:cd:36:58:14:5a:5a:94:ef:0a:ce:9f:34:cd:4e:
88:fc:31:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs6jMcHdBuUf9qAHRcGWOzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE2MjIxMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjc4MTMwZTZhNDE5MTlmYTJlMzMxNzg4NDE4NDc4ZDgwNzQxMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHzgDbX/c4KpMqmnVxG7PIoEB6CA
Kt/O4uMAK0+NvnZuKrO0BmyfHSc6E5sNtbBMrvWoU2j5LqiiZ58UHnA5rzDKi3zQ
PC9lrQ34Y/b5E9Nnl8y6wbo1Y2Vd5B/nUuGgfBekZm+GLGjTg5kf+nGfcpgn4AdR
kPqs3bqI/4AVj8mATTJ6sk0A333v4fwtDH+5fZpnKM/qezFo1LWLcNU+i4I6Rpdu
ILtmv2raj07bLON5d1b3zAjJs1cheWwqlMK1QXAmGIuw1gfq5SQWnbGuOdQ2n1AH
lFnQkA4apO1wb9F73wxR+n85zVxWHgzFKVi1kT2ZCpi9QlYKDm/3ed1GwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPJ4Ew5qQZGfouMxeIQYR42AdBI9MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOG5nVERtcEJrWi1pNHpGNGhCaEhqWUIwRWowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHTj/i3O0CnLcF4KRAha
TVPrArjqJuepoOeEVc1xMlGGKfBRwaqu+/d85f422md9f0Sz6UXf8MAhtKz3ahnM
23oSktYYChK/SatumBZGUei9lXLTVxe1CfdBe9bbQqNUPIVLndl6UrA0mOORyVRz
gmoAh0JCO9i2OsQcsxP08lPXAqNhN0LMcuAxLsj/A3yuiHq4v4T8YQQRWd9ymryU
ClxwTxaUfrWQEU81a2btX/s84K4wCpBCBuYTW99IGP917JneOg6+c0XpKDgbXBqI
AerU6I1wNHpZ2DaoDOof2HgLwG1VxR9dGPQw+tYMZ+/NNlgUWlqU7wrOnzTNToj8
Mbo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:25 2025 by rpki-client