Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9fVEITzrMmnn0iQaqu4OoH3yenA.roa
File: 9fVEITzrMmnn0iQaqu4OoH3yenA.roa (raw, json)
Hash identifier: gR9q87hphe3AlSJdHYC1Lku6iG5ZU+hCiXcY1aDWzTE=
Subject key identifier: F5:F5:44:21:3C:EB:32:69:E7:D2:24:1A:AA:EE:0E:A0:7D:F2:7A:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF3BBEE339D99876E9B8ABD00B92BE6EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9fVEITzrMmnn0iQaqu4OoH3yenA.roa
Signing time: Tue 21 Nov 2023 21:14:21 +0000
ROA not before: Tue 21 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:bb:ee:33:9d:99:87:6e:9b:8a:bd:00:b9:2b:e6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5f544213ceb3269e7d2241aaaee0ea07df27a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:d5:9a:93:b6:e9:67:27:a9:5d:31:88:3a:
89:5e:a1:1e:b0:24:c0:49:64:2f:9b:7e:08:ce:cd:
05:e0:f8:9d:ee:16:03:79:f8:ba:6f:b1:4e:96:db:
de:4d:56:61:1e:f5:12:6c:fe:72:f2:47:36:b7:52:
12:75:77:a2:a6:51:f2:d9:fe:34:cd:ae:35:65:f9:
a0:3a:fc:18:36:ad:6d:09:76:a0:e8:07:90:34:2e:
52:53:e8:9c:40:4e:18:53:7e:44:a8:09:03:56:dc:
4b:24:ee:ba:af:e3:09:97:2b:b9:62:db:7e:48:ef:
d5:45:d3:5b:03:0c:68:db:fc:cd:1e:79:7d:8d:71:
ee:a1:e1:ab:a0:6f:e5:e1:ec:04:3e:0c:5c:c4:39:
7f:db:4e:31:53:f0:0d:ea:b0:2d:cf:c6:27:5b:1a:
02:62:a2:19:fe:2e:28:93:7e:4c:26:b3:88:b7:c9:
ac:50:5c:c2:6c:ab:28:8b:0b:7e:2f:b8:6e:7e:5c:
02:1a:12:bc:18:42:ac:a4:06:39:b4:e2:0c:63:94:
3e:5e:64:a8:db:10:50:ef:c3:42:fe:2c:75:52:17:
9e:bb:79:3e:64:b5:ca:19:51:06:e5:3b:be:b7:3b:
fd:03:b0:f5:03:0c:cf:09:6e:59:29:bf:00:bb:0e:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:44:21:3C:EB:32:69:E7:D2:24:1A:AA:EE:0E:A0:7D:F2:7A:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9fVEITzrMmnn0iQaqu4OoH3yenA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:8b:ca:30:aa:48:dd:25:c2:e3:0d:32:59:db:1f:fc:8d:07:
f1:da:ba:d4:00:5d:0d:51:f4:1c:3c:77:46:9b:be:d8:e1:9f:
d5:8a:b4:f1:bd:6b:a1:34:52:0c:94:d2:30:7a:23:10:a7:8a:
9c:50:f2:8b:c9:98:e4:ab:6a:ea:8a:25:21:11:50:15:c8:f9:
05:97:e7:f1:bf:7c:c7:47:88:ae:e6:bc:19:a7:c3:bc:1c:2d:
9a:31:50:8d:2d:5a:32:3a:e4:ac:6b:65:4b:04:ed:ed:64:ba:
4c:98:b6:ab:63:60:d3:4c:da:f6:cf:10:b0:2b:ef:77:38:70:
56:be:c8:9d:e5:35:03:04:b9:44:fe:e9:67:94:68:c8:93:ac:
e4:d7:12:ca:68:59:b3:93:00:c2:20:0a:25:96:f2:f4:e7:f4:
48:d0:5c:85:a9:b3:3f:4b:78:47:4b:49:e0:64:68:31:f2:bf:
10:29:cd:90:0a:c6:ec:35:9b:ec:f5:1b:ac:fc:94:a2:d4:69:
7f:98:ae:f5:85:50:8c:a1:99:87:1c:7f:1b:7b:7b:da:97:51:
33:5b:cb:e2:39:04:c4:64:d0:6d:da:e2:64:ca:d9:b8:44:9a:
24:c7:9f:b2:82:1c:4f:9e:d6:24:b9:7d:61:58:1b:85:85:d9:
ec:8f:fa:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvzu+4znZmHbpuKvQC5K+brMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIxMjExNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWY1NDQyMTNjZWIzMjY5ZTdkMjI0MWFhYWVlMGVhMDdkZjI3YTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdnVmpO26WcnqV0xiDqJXqEesCTA
SWQvm34Izs0F4Pid7hYDefi6b7FOltveTVZhHvUSbP5y8kc2t1ISdXeiplHy2f40
za41ZfmgOvwYNq1tCXag6AeQNC5SU+icQE4YU35EqAkDVtxLJO66r+MJlyu5Ytt+
SO/VRdNbAwxo2/zNHnl9jXHuoeGroG/l4ewEPgxcxDl/204xU/AN6rAtz8YnWxoC
YqIZ/i4ok35MJrOIt8msUFzCbKsoiwt+L7huflwCGhK8GEKspAY5tOIMY5Q+XmSo
2xBQ78NC/ix1Uheeu3k+ZLXKGVEG5Tu+tzv9A7D1AwzPCW5ZKb8Auw55qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPX1RCE86zJp59IkGqruDqB98npwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOWZWRUlUenJNbW5uMGlRYXF1NE9vSDN5ZW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC6LyjCqSN0lwuMNMlnb
H/yNB/HautQAXQ1R9Bw8d0abvtjhn9WKtPG9a6E0UgyU0jB6IxCnipxQ8ovJmOSr
auqKJSERUBXI+QWX5/G/fMdHiK7mvBmnw7wcLZoxUI0tWjI65KxrZUsE7e1kukyY
tqtjYNNM2vbPELAr73c4cFa+yJ3lNQMEuUT+6WeUaMiTrOTXEspoWbOTAMIgCiWW
8vTn9EjQXIWpsz9LeEdLSeBkaDHyvxApzZAKxuw1m+z1G6z8lKLUaX+YrvWFUIyh
mYccfxt7e9qXUTNby+I5BMRk0G3a4mTK2bhEmiTHn7KCHE+e1iS5fWFYG4WF2eyP
+ig=
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:43:17 2025 by rpki-client