Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92LJ6aDqGSle2urTSDoi99GrNZY.roa
File: 92LJ6aDqGSle2urTSDoi99GrNZY.roa (raw, json)
Hash identifier: zQbQLxhbB/tZYelQX9yY0B4xeqrmmMQ4TPLesR74QW4=
Subject key identifier: F7:62:C9:E9:A0:EA:19:29:5E:DA:EA:D3:48:3A:22:F7:D1:AB:35:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BACED58B4D9568BF5C1B76612ECF099AB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92LJ6aDqGSle2urTSDoi99GrNZY.roa
Signing time: Wed 08 Nov 2023 03:15:17 +0000
ROA not before: Wed 08 Nov 2023 03:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:ed:58:b4:d9:56:8b:f5:c1:b7:66:12:ec:f0:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 03:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f762c9e9a0ea19295edaead3483a22f7d1ab3596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:bb:ea:f7:21:0e:25:6b:fc:96:90:8b:dc:
7d:d4:98:e9:08:e8:81:2e:4f:f3:74:6e:be:3b:16:
dc:9d:74:f2:14:c8:41:14:30:74:89:7a:0a:ba:eb:
a2:67:20:9b:c8:24:40:4d:ff:79:aa:8b:cc:9f:53:
cb:51:de:80:fb:39:3b:30:8a:d7:75:54:55:55:02:
67:ad:02:13:f6:ec:15:4b:62:24:cb:c1:85:cd:9b:
bd:2e:a1:58:57:77:e5:20:78:5d:38:9a:2b:6a:f6:
57:e8:45:87:76:78:49:46:a9:01:e6:b7:1d:12:95:
ab:3a:70:6a:6d:53:56:7c:a2:21:f4:09:d5:f4:56:
86:28:de:54:04:69:f0:40:f0:6b:2a:7a:9b:bd:3f:
71:cb:64:40:ae:1a:23:c2:40:1d:d6:ca:f8:4b:09:
09:85:a2:53:5c:13:0b:ba:43:00:46:85:8a:a5:1c:
86:86:c6:f3:6e:55:be:40:30:22:10:c1:b0:9a:5e:
7e:ca:e2:a8:8c:ad:22:02:68:0a:2d:fa:68:fd:48:
8a:0b:6f:15:6e:33:4d:5e:08:21:53:41:9a:be:4e:
3c:1a:32:52:52:ee:0c:67:10:15:1d:f4:b4:46:56:
a0:b4:e5:e1:4a:61:b7:56:c5:52:c7:9c:87:e2:18:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:62:C9:E9:A0:EA:19:29:5E:DA:EA:D3:48:3A:22:F7:D1:AB:35:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92LJ6aDqGSle2urTSDoi99GrNZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d3:17:8d:ed:b9:e0:63:92:0d:fb:0e:f6:d3:bb:72:83:9b:
96:36:5d:09:74:3e:6d:72:c8:1c:b0:71:a2:26:7c:f7:94:5b:
4b:a7:73:2d:f9:49:2b:db:7e:3f:79:5c:bd:32:c2:a1:8f:55:
2e:1c:0c:f9:a5:ba:e3:41:07:2e:ce:78:e8:74:86:d4:20:1d:
8d:72:ae:e9:be:b0:60:5e:b5:29:1b:3e:95:ff:fe:1f:7b:3b:
ae:76:5b:48:7d:14:4c:a3:72:d2:4a:9c:62:10:ff:17:1a:e5:
5e:0e:39:8f:a5:d0:ef:f6:f5:7e:f3:2e:67:10:2e:62:d1:d6:
8e:27:58:19:e7:72:bd:4f:d6:42:f0:b0:c6:1e:ec:44:25:20:
53:e3:54:c3:f8:c1:ea:7d:0c:e6:c1:26:fe:da:4b:41:98:4c:
cb:ab:7f:c2:ce:35:d1:32:c6:bf:f4:fe:7b:6c:71:35:84:bb:
b5:7a:7a:46:1e:e1:03:00:4a:08:61:41:11:66:cf:c2:e8:7d:
2e:75:52:9f:99:fc:70:39:bd:54:8b:d6:b0:3c:91:b8:1e:e5:
7c:2b:b3:d0:f7:56:da:74:04:3b:d2:ab:65:ab:cc:92:77:7e:
f1:8c:70:ae:dd:7d:b4:f1:12:f7:49:be:67:4b:9f:d8:60:81:
a3:10:2d:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYus7Vi02VaL9cG3ZhLs8JmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MDMxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzYyYzllOWEwZWExOTI5NWVkYWVhZDM0ODNhMjJmN2QxYWIzNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWG76vchDiVr/JaQi9x91JjpCOiB
Lk/zdG6+OxbcnXTyFMhBFDB0iXoKuuuiZyCbyCRATf95qovMn1PLUd6A+zk7MIrX
dVRVVQJnrQIT9uwVS2Iky8GFzZu9LqFYV3flIHhdOJoravZX6EWHdnhJRqkB5rcd
EpWrOnBqbVNWfKIh9AnV9FaGKN5UBGnwQPBrKnqbvT9xy2RArhojwkAd1sr4SwkJ
haJTXBMLukMARoWKpRyGhsbzblW+QDAiEMGwml5+yuKojK0iAmgKLfpo/UiKC28V
bjNNXgghU0Gavk48GjJSUu4MZxAVHfS0RlagtOXhSmG3VsVSx5yH4hhNyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPdiyemg6hkpXtrq00g6IvfRqzWWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOTJMSjZhRHFHU2xlMnVyVFNEb2k5OUdyTlpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJjTF43tueBjkg37DvbT
u3KDm5Y2XQl0Pm1yyBywcaImfPeUW0uncy35SSvbfj95XL0ywqGPVS4cDPmluuNB
By7OeOh0htQgHY1yrum+sGBetSkbPpX//h97O652W0h9FEyjctJKnGIQ/xca5V4O
OY+l0O/29X7zLmcQLmLR1o4nWBnncr1P1kLwsMYe7EQlIFPjVMP4wep9DObBJv7a
S0GYTMurf8LONdEyxr/0/ntscTWEu7V6ekYe4QMASghhQRFmz8LofS51Up+Z/HA5
vVSL1rA8kbge5Xwrs9D3Vtp0BDvSq2WrzJJ3fvGMcK7dfbTxEvdJvmdLn9hggaMQ
LRw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:43:53 2025 by rpki-client