Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8znxNBoh5oP6m5fVbIGjTLGss1s.roa
File: 8znxNBoh5oP6m5fVbIGjTLGss1s.roa (raw, json)
Hash identifier: SHaRL4lP7EpPlbxTpN57PuSeZZg1fdHy/k7NVRhCnYs=
Subject key identifier: F3:39:F1:34:1A:21:E6:83:FA:9B:97:D5:6C:81:A3:4C:B1:AC:B3:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0367002A3D1C11EC6C1AEE773AF52C82
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8znxNBoh5oP6m5fVbIGjTLGss1s.roa
Signing time: Fri 06 Oct 2023 05:12:43 +0000
ROA not before: Fri 06 Oct 2023 05:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:67:00:2a:3d:1c:11:ec:6c:1a:ee:77:3a:f5:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 05:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f339f1341a21e683fa9b97d56c81a34cb1acb35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:f1:e8:1b:31:0e:6e:01:a0:6d:4a:e2:7f:
37:2d:c8:16:00:55:ab:fb:93:c1:40:9a:4f:4f:b6:
1b:df:20:87:e7:02:b0:fb:52:ff:94:c0:8a:9a:1a:
63:4b:bb:0d:75:76:5a:d1:18:b0:fb:39:14:aa:54:
d4:80:0c:8c:ae:a0:f0:58:7a:1d:c2:40:df:61:4e:
ab:4b:28:06:84:79:f3:b2:ac:06:f6:18:b7:ad:39:
b8:d2:61:51:68:56:18:02:e4:c7:94:e4:12:d8:fb:
3e:3c:47:9d:fb:1d:23:d9:61:88:e2:25:10:d5:e1:
c9:14:66:81:e9:9b:ca:14:c3:2e:a0:43:f1:2b:28:
5d:6a:8d:a1:ad:5d:76:05:92:9e:d6:f5:1f:fb:21:
bd:4a:f1:73:72:85:89:23:4e:8d:04:0d:44:45:dc:
88:9d:0d:c0:94:04:c7:d9:43:59:7d:48:da:fa:04:
d0:76:e4:cf:7a:66:00:cb:7b:9b:f4:3e:dc:16:0b:
c3:76:e0:29:09:00:83:e2:84:e5:1e:fd:6b:67:88:
96:04:f9:a2:76:e9:fa:7f:89:91:72:1c:c4:09:fc:
dd:9c:9f:ad:58:b5:9e:72:4d:1e:84:b9:9e:90:80:
49:3a:7f:0a:cc:49:b8:ed:46:78:59:98:56:a1:b8:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:F1:34:1A:21:E6:83:FA:9B:97:D5:6C:81:A3:4C:B1:AC:B3:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8znxNBoh5oP6m5fVbIGjTLGss1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:66:7c:9b:22:ac:44:c8:0f:2d:b7:27:47:0a:cc:98:ca:d1:
e4:41:3b:cb:ec:e6:6c:31:e0:88:c8:10:ca:a7:9d:99:32:8f:
99:a2:da:42:ac:e4:9d:10:8b:de:10:7b:54:8b:d5:22:39:3a:
75:61:9d:a4:35:17:84:43:1e:66:28:31:f3:32:2c:0c:e8:ab:
7a:6b:5e:df:ac:31:e4:a4:49:2f:ff:c9:35:fb:90:7e:87:e1:
b2:64:5e:2c:eb:a9:68:93:45:b5:b0:2f:dd:7f:f9:24:62:d4:
3c:d1:b5:86:cd:06:c6:37:8e:cf:a5:4e:45:a2:ee:98:39:2b:
08:a9:0b:d4:45:a9:f0:33:c5:b4:db:0b:ae:7a:c3:6a:ac:00:
5c:79:e4:35:85:f4:5c:f2:2d:ff:19:16:97:4b:cb:6a:d0:6e:
1d:a6:4f:99:38:af:20:20:e9:4f:dc:16:1a:17:20:fd:84:82:
c4:5e:7c:91:59:c9:01:8c:07:e3:4f:33:54:8d:e0:e3:81:57:
4c:b7:cb:8b:bb:03:2b:82:c2:28:7a:7f:89:5e:33:35:6c:e9:
94:09:73:72:df:cf:1e:31:87:db:ac:98:72:17:bf:4a:e4:81:
77:36:5c:21:25:77:07:89:2c:12:86:2b:4f:cb:3c:9c:04:24:
23:70:ea:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsDZwAqPRwR7Gwa7nc69SyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA2MDUxMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzM5ZjEzNDFhMjFlNjgzZmE5Yjk3ZDU2YzgxYTM0Y2IxYWNiMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Px6BsxDm4BoG1K4n83LcgWAFWr
+5PBQJpPT7Yb3yCH5wKw+1L/lMCKmhpjS7sNdXZa0Riw+zkUqlTUgAyMrqDwWHod
wkDfYU6rSygGhHnzsqwG9hi3rTm40mFRaFYYAuTHlOQS2Ps+PEed+x0j2WGI4iUQ
1eHJFGaB6ZvKFMMuoEPxKyhdao2hrV12BZKe1vUf+yG9SvFzcoWJI06NBA1ERdyI
nQ3AlATH2UNZfUja+gTQduTPemYAy3ub9D7cFgvDduApCQCD4oTlHv1rZ4iWBPmi
dun6f4mRchzECfzdnJ+tWLWeck0ehLmekIBJOn8KzEm47UZ4WZhWobibswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPM58TQaIeaD+puX1WyBo0yxrLNbMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOHpueE5Cb2g1b1A2bTVmVmJJR2pUTEdzczFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE9mfJsirETIDy23J0cK
zJjK0eRBO8vs5mwx4IjIEMqnnZkyj5mi2kKs5J0Qi94Qe1SL1SI5OnVhnaQ1F4RD
HmYoMfMyLAzoq3prXt+sMeSkSS//yTX7kH6H4bJkXizrqWiTRbWwL91/+SRi1DzR
tYbNBsY3js+lTkWi7pg5KwipC9RFqfAzxbTbC656w2qsAFx55DWF9FzyLf8ZFpdL
y2rQbh2mT5k4ryAg6U/cFhoXIP2EgsRefJFZyQGMB+NPM1SN4OOBV0y3y4u7AyuC
wih6f4leMzVs6ZQJc3Lfzx4xh9usmHIXv0rkgXc2XCEldweJLBKGK0/LPJwEJCNw
6tE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:28:26 2025 by rpki-client