Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9_vHnMUiuDc4GvBwmoQcDacsuo0.roa
File: 9_vHnMUiuDc4GvBwmoQcDacsuo0.roa (raw, json)
Hash identifier: sxkwRaBImnEp1W7YoH0Gb3YuQ39hTsxhiKS4NqIueiw=
Subject key identifier: F7:FB:C7:9C:C5:22:B8:37:38:1A:F0:70:9A:84:1C:0D:A7:2C:BA:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB32263AAA262765328BDDAA28606A8D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9_vHnMUiuDc4GvBwmoQcDacsuo0.roa
Signing time: Thu 09 Nov 2023 08:10:57 +0000
ROA not before: Thu 09 Nov 2023 08:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:22:63:aa:a2:62:76:53:28:bd:da:a2:86:06:a8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 08:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7fbc79cc522b837381af0709a841c0da72cba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:1b:32:1c:97:2a:65:55:81:0d:51:22:61:
5b:bb:f6:51:5d:2f:a8:cd:e7:9e:83:d0:b0:57:44:
93:3f:d7:63:d7:ce:de:69:b9:a8:13:a8:88:4b:11:
5e:d3:02:75:5f:08:b9:08:e2:ba:ec:5a:0e:0f:ba:
56:77:e4:4d:bf:34:5c:90:4f:60:02:1d:41:39:03:
41:ec:0d:f0:35:55:9b:4d:dc:30:bf:06:68:3f:b8:
26:fe:1f:45:3e:07:d5:3d:84:fb:36:a7:87:b1:dd:
a8:ab:74:d4:90:11:cd:24:be:36:c7:11:51:89:c2:
e6:c8:00:71:49:18:22:57:46:48:aa:15:b5:51:aa:
6f:16:34:53:60:5c:f2:e1:73:72:fc:6c:20:10:dd:
b9:be:df:68:27:fb:52:90:50:bc:2d:00:28:5e:03:
be:8a:9a:4d:d2:c0:ee:b7:34:62:f9:93:74:1c:0a:
39:ea:2b:0a:a3:ed:83:ac:10:5c:18:a5:23:21:80:
c5:92:b8:df:5a:ff:44:9d:73:00:7f:19:35:6c:e8:
e4:03:a3:46:f9:20:3c:42:be:c7:1d:26:0f:92:42:
c3:07:c1:d0:04:82:f8:fb:16:66:84:c1:d6:78:05:
9f:9d:da:4f:6a:90:05:50:44:ac:ce:2b:4a:a9:87:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:C7:9C:C5:22:B8:37:38:1A:F0:70:9A:84:1C:0D:A7:2C:BA:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9_vHnMUiuDc4GvBwmoQcDacsuo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:55:6f:48:7e:f3:56:f1:20:7a:04:f8:d1:99:a7:87:b0:1f:
a7:35:4a:7b:8b:0c:59:e6:21:b4:de:c6:41:07:05:5e:cd:7a:
c0:7f:22:19:38:51:4f:24:f6:73:27:15:14:cc:c6:93:cf:e0:
66:c9:91:32:6e:72:b7:ec:b0:a3:28:c4:3a:63:40:a7:8b:8b:
67:6a:d2:36:b0:54:23:47:61:f9:3e:0e:24:52:b0:71:ac:89:
32:d1:03:46:00:ef:5a:dd:fa:ac:7b:9a:72:15:02:45:36:8f:
85:49:cd:99:ab:6f:b1:77:ac:c2:0d:e7:e3:0c:86:96:fc:79:
44:f6:21:c7:02:ab:0b:8b:22:a9:92:43:e5:41:9c:ea:ff:28:
8a:3d:43:28:77:9c:ae:5b:8f:5a:e7:3c:0b:d6:cf:c4:80:49:
de:3d:e6:6e:8e:22:fd:8b:f8:4a:1d:7f:61:fe:dd:ab:66:fc:
92:88:85:c8:f2:7e:c5:b1:4f:b4:e7:86:d1:b3:a9:02:e9:2d:
e9:51:cb:17:be:5a:3b:07:8a:a0:15:5d:88:f9:8f:b0:95:03:
03:03:da:9a:3d:ab:5e:d2:a6:3f:21:3e:dd:25:4a:3f:c8:58:
7b:0f:16:5a:19:33:d2:fc:c3:70:78:e2:75:40:cd:dd:38:46:
3a:1a:ac:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuzImOqomJ2Uyi92qKGBqjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA5MDgxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZiYzc5Y2M1MjJiODM3MzgxYWYwNzA5YTg0MWMwZGE3MmNiYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FgbMhyXKmVVgQ1RImFbu/ZRXS+o
zeeeg9CwV0STP9dj187eabmoE6iISxFe0wJ1Xwi5COK67FoOD7pWd+RNvzRckE9g
Ah1BOQNB7A3wNVWbTdwwvwZoP7gm/h9FPgfVPYT7NqeHsd2oq3TUkBHNJL42xxFR
icLmyABxSRgiV0ZIqhW1UapvFjRTYFzy4XNy/GwgEN25vt9oJ/tSkFC8LQAoXgO+
ippN0sDutzRi+ZN0HAo56isKo+2DrBBcGKUjIYDFkrjfWv9EnXMAfxk1bOjkA6NG
+SA8Qr7HHSYPkkLDB8HQBIL4+xZmhMHWeAWfndpPapAFUESszitKqYfTHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPf7x5zFIrg3OBrwcJqEHA2nLLqNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOV92SG5NVWl1RGM0R3ZCd21vUWNEYWNzdW8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAL1Vb0h+81bxIHoE+NGZ
p4ewH6c1SnuLDFnmIbTexkEHBV7NesB/Ihk4UU8k9nMnFRTMxpPP4GbJkTJucrfs
sKMoxDpjQKeLi2dq0jawVCNHYfk+DiRSsHGsiTLRA0YA71rd+qx7mnIVAkU2j4VJ
zZmrb7F3rMIN5+MMhpb8eUT2IccCqwuLIqmSQ+VBnOr/KIo9Qyh3nK5bj1rnPAvW
z8SASd495m6OIv2L+Eodf2H+3atm/JKIhcjyfsWxT7TnhtGzqQLpLelRyxe+WjsH
iqAVXYj5j7CVAwMD2po9q17Spj8hPt0lSj/IWHsPFloZM9L8w3B44nVAzd04Rjoa
rFA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:26 2025 by rpki-client