Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YjrMJj9PKdOYm4FNz4O96y_Q9w.roa
File: 9YjrMJj9PKdOYm4FNz4O96y_Q9w.roa (raw, json)
Hash identifier: 2l3qiUIPJ+YBn1q+m5HdOYpwG5RUf5QOsFRap0SGE+0=
Subject key identifier: F5:88:EB:30:98:FD:3C:A7:4E:62:6E:05:37:3E:0E:F7:AC:BF:43:DC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5265A8AE9170B061436CC92E0C808235
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YjrMJj9PKdOYm4FNz4O96y_Q9w.roa
Signing time: Sat 21 Oct 2023 13:21:15 +0000
ROA not before: Sat 21 Oct 2023 13:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:65:a8:ae:91:70:b0:61:43:6c:c9:2e:0c:80:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 13:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f588eb3098fd3ca74e626e05373e0ef7acbf43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:4c:1a:66:67:fa:44:05:dd:d7:b6:66:9e:
81:bd:88:73:a4:5b:af:b3:be:fb:e0:07:1c:c8:b6:
16:68:74:fa:5d:ad:71:8a:aa:9f:f0:9c:af:ac:4d:
aa:92:99:c4:0c:28:ac:f5:53:23:b7:44:5e:11:e7:
d4:7e:23:05:4c:45:77:5c:f6:a0:56:d9:0f:05:5d:
18:c0:da:d5:38:bd:1d:94:c8:da:48:3d:76:ee:7f:
29:e3:89:de:b3:3e:5f:fb:b8:23:91:dd:88:e3:36:
1e:3a:5a:b3:7c:95:35:47:48:20:ed:07:be:3e:dc:
8d:9a:d9:c0:00:09:c1:f8:68:a5:92:f9:56:9c:75:
d3:53:29:18:8a:8d:4a:2c:b7:af:00:ab:53:0f:ab:
b7:5b:93:e8:9a:42:de:69:a6:76:1d:2f:a0:9c:ee:
3c:91:81:23:8d:f8:c8:1d:c0:bb:11:2d:2b:5e:1d:
40:6c:7d:a2:3a:ac:c2:27:88:c6:17:e4:59:2a:0f:
9f:69:9c:af:5a:e6:ea:8a:9b:5d:b9:99:e3:64:a7:
cb:9b:c9:8c:62:d6:4c:58:31:b8:5c:c8:ed:07:78:
e7:f1:f0:3b:1e:6f:ff:5d:18:df:23:c2:b6:dc:18:
96:5c:64:bb:87:ca:ef:c5:b9:fb:e2:d9:8b:cc:64:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:EB:30:98:FD:3C:A7:4E:62:6E:05:37:3E:0E:F7:AC:BF:43:DC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9YjrMJj9PKdOYm4FNz4O96y_Q9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:3d:5b:cd:31:9a:6d:f5:eb:2a:4b:4d:a5:73:0b:93:fa:3c:
0f:d3:f6:a2:88:a3:8f:06:c8:0f:da:85:86:83:06:c4:82:fe:
19:09:5d:fe:45:4c:cb:6a:c8:8a:33:fc:c1:f7:44:ae:ca:fa:
d9:15:33:52:f2:ae:c9:29:7b:0d:e0:02:b6:bc:b6:2a:a4:92:
0c:78:70:e4:ca:0c:9b:f8:1a:88:6b:25:4d:4f:ca:4a:5e:bc:
b9:01:b5:2c:83:f3:8b:85:c4:19:d8:b8:ff:32:a1:95:1c:80:
f8:51:1d:a5:35:4d:da:3f:28:ac:9e:dd:6b:3d:01:6f:8a:36:
6c:0d:e5:a9:db:01:52:0a:59:f0:fd:a3:b5:48:bb:43:79:a7:
31:fe:a8:fc:1b:5f:61:78:8c:5d:fe:61:f4:81:c4:02:44:0b:
ee:12:7a:0d:52:4b:8a:39:65:5b:66:e8:2f:a0:58:c9:af:87:
0e:26:d0:fc:4c:66:cf:f6:f5:be:47:d9:07:a8:d5:c3:f4:c5:
d8:af:3d:40:9e:e8:16:c0:de:43:a0:73:f1:96:b4:3f:05:01:
66:ac:b4:39:93:33:05:ad:b2:35:30:8b:8e:44:d8:67:ab:f0:
d4:d6:b8:c2:db:09:1e:65:46:27:e7:f5:eb:d5:f2:d3:a6:cf:
0b:79:d6:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtSZaiukXCwYUNsyS4MgII1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMTMyMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTg4ZWIzMDk4ZmQzY2E3NGU2MjZlMDUzNzNlMGVmN2FjYmY0M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskZMGmZn+kQF3de2Zp6BvYhzpFuv
s7774AccyLYWaHT6Xa1xiqqf8JyvrE2qkpnEDCis9VMjt0ReEefUfiMFTEV3XPag
VtkPBV0YwNrVOL0dlMjaSD127n8p44nesz5f+7gjkd2I4zYeOlqzfJU1R0gg7Qe+
PtyNmtnAAAnB+GilkvlWnHXTUykYio1KLLevAKtTD6u3W5PomkLeaaZ2HS+gnO48
kYEjjfjIHcC7ES0rXh1AbH2iOqzCJ4jGF+RZKg+faZyvWubqiptduZnjZKfLm8mM
YtZMWDG4XMjtB3jn8fA7Hm//XRjfI8K23BiWXGS7h8rvxbn74tmLzGRR8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWI6zCY/TynTmJuBTc+Dvesv0PcMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOVlqck1KajlQS2RPWW00Rk56NE85NnlfUTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHo9W80xmm316ypLTaVz
C5P6PA/T9qKIo48GyA/ahYaDBsSC/hkJXf5FTMtqyIoz/MH3RK7K+tkVM1Lyrskp
ew3gAra8tiqkkgx4cOTKDJv4GohrJU1PykpevLkBtSyD84uFxBnYuP8yoZUcgPhR
HaU1Tdo/KKye3Ws9AW+KNmwN5anbAVIKWfD9o7VIu0N5pzH+qPwbX2F4jF3+YfSB
xAJEC+4Seg1SS4o5ZVtm6C+gWMmvhw4m0PxMZs/29b5H2Qeo1cP0xdivPUCe6BbA
3kOgc/GWtD8FAWastDmTMwWtsjUwi45E2Ger8NTWuMLbCR5lRifn9evV8tOmzwt5
1iA=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:23 2025 by rpki-client