Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YBz-lPI2O6dnYG4PmE7Lx8rpyg.roa
File: 9YBz-lPI2O6dnYG4PmE7Lx8rpyg.roa (raw, json)
Hash identifier: PJ3qsV8BFYoi4Be8fPVrP40Ys+1rZIqZVwNBHq5yKnk=
Subject key identifier: F5:80:73:FA:53:C8:D8:EE:9D:9D:81:B8:3E:61:3B:2F:1F:2B:A7:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C00D528674D72EB43CCA8C17FA8C11AA5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YBz-lPI2O6dnYG4PmE7Lx8rpyg.roa
Signing time: Fri 24 Nov 2023 10:16:58 +0000
ROA not before: Fri 24 Nov 2023 10:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:d5:28:67:4d:72:eb:43:cc:a8:c1:7f:a8:c1:1a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 10:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58073fa53c8d8ee9d9d81b83e613b2f1f2ba728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:c7:d6:5b:e3:96:f1:94:48:8a:89:88:c1:
24:a5:e4:55:05:44:97:57:b1:d2:24:79:7b:32:33:
31:23:63:e0:5f:a5:f9:84:30:e3:85:0c:f3:11:b2:
cc:74:f0:52:fe:ef:73:54:93:8d:87:28:dc:c2:97:
04:b8:d6:c7:17:88:49:da:28:6c:e2:28:41:77:2f:
ee:ae:56:4c:6e:10:78:68:08:2d:1e:c9:ea:21:76:
3a:a2:dd:e3:db:e0:ff:53:b8:c0:9e:fa:ff:c0:7e:
9f:6a:e5:38:8c:7a:87:b2:2e:0a:32:af:4b:ea:67:
be:7b:e6:e8:07:3d:78:00:04:ef:19:89:86:9b:0f:
af:3b:eb:3e:2d:1d:8f:f6:7e:be:3d:41:b6:f9:8a:
f5:9e:47:5e:d2:de:e1:11:b8:a6:3e:f7:85:94:c2:
64:a6:3a:c7:d4:66:c4:a4:b6:38:9d:6a:5b:ba:f8:
49:19:5f:7b:d2:47:79:da:15:d6:d3:9f:77:36:f9:
3b:8b:84:90:cf:a6:e8:94:c9:80:9a:58:31:6c:db:
1a:12:08:70:26:49:51:6b:7f:32:f9:da:59:a0:2e:
06:9a:65:db:b7:6e:67:5b:8e:4c:5e:e4:15:5e:0a:
27:4f:f4:a0:7e:fa:da:5a:58:ad:1c:99:d6:64:02:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:73:FA:53:C8:D8:EE:9D:9D:81:B8:3E:61:3B:2F:1F:2B:A7:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YBz-lPI2O6dnYG4PmE7Lx8rpyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a0:8b:79:51:d2:1c:7f:2a:14:77:fd:a8:93:91:66:35:19:
8e:ab:ad:1b:77:b9:38:37:ea:04:d1:be:92:9a:a4:d5:69:00:
01:9d:c7:60:ec:65:f8:57:72:35:5a:7c:67:20:71:f4:19:1f:
82:0a:9b:fe:a0:07:37:1f:4d:54:80:32:40:03:4f:96:c6:5b:
80:21:49:29:cc:5c:73:4d:0b:39:c5:15:73:e8:82:e5:fb:ec:
be:4f:fc:12:77:b5:19:35:e8:e5:ef:6b:46:71:34:76:cc:8c:
1d:22:0d:cc:02:c6:87:a5:23:e2:3f:c3:59:73:5e:81:2a:c2:
c2:79:e1:97:ce:4d:00:cf:3a:63:00:33:e4:8c:05:b7:34:53:
7e:a3:93:b5:19:fd:f6:3c:1e:ff:e8:6f:bf:0c:cc:6f:e9:6b:
dc:b7:4b:2f:da:a6:a6:ba:62:d6:e5:e2:14:07:bc:a5:bd:89:
c2:ce:de:60:d9:10:ca:9b:51:ea:13:16:ce:7e:50:a0:bd:fe:
7f:be:63:5c:f4:0a:60:01:8b:45:26:27:fe:37:8d:e7:e6:ca:
81:5f:68:5b:c5:f8:63:85:e0:fd:c0:3b:f4:c8:9e:f1:4a:73:
8f:f1:cc:3a:0a:4a:97:42:b2:70:67:1a:05:b9:0c:d3:5b:64:
fa:47:f2:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwA1ShnTXLrQ8yowX+owRqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI0MTAxNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTgwNzNmYTUzYzhkOGVlOWQ5ZDgxYjgzZTYxM2IyZjFmMmJhNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s3H1lvjlvGUSIqJiMEkpeRVBUSX
V7HSJHl7MjMxI2PgX6X5hDDjhQzzEbLMdPBS/u9zVJONhyjcwpcEuNbHF4hJ2ihs
4ihBdy/urlZMbhB4aAgtHsnqIXY6ot3j2+D/U7jAnvr/wH6fauU4jHqHsi4KMq9L
6me+e+boBz14AATvGYmGmw+vO+s+LR2P9n6+PUG2+Yr1nkde0t7hEbimPveFlMJk
pjrH1GbEpLY4nWpbuvhJGV970kd52hXW0593Nvk7i4SQz6bolMmAmlgxbNsaEghw
JklRa38y+dpZoC4GmmXbt25nW45MXuQVXgonT/SgfvraWlitHJnWZAIf5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWAc/pTyNjunZ2BuD5hOy8fK6coMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOVlCei1sUEkyTzZkbllHNFBtRTdMeDhycHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+gi3lR0hx/KhR3/aiT
kWY1GY6rrRt3uTg36gTRvpKapNVpAAGdx2DsZfhXcjVafGcgcfQZH4IKm/6gBzcf
TVSAMkADT5bGW4AhSSnMXHNNCznFFXPoguX77L5P/BJ3tRk16OXva0ZxNHbMjB0i
DcwCxoelI+I/w1lzXoEqwsJ54ZfOTQDPOmMAM+SMBbc0U36jk7UZ/fY8Hv/ob78M
zG/pa9y3Sy/apqa6Ytbl4hQHvKW9icLO3mDZEMqbUeoTFs5+UKC9/n++Y1z0CmAB
i0UmJ/43jefmyoFfaFvF+GOF4P3AO/TInvFKc4/xzDoKSpdCsnBnGgW5DNNbZPpH
8oE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:06 2025 by rpki-client