Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AVrazjDiTbtrtzUs_lYZ7_SANX8.roa
File: AVrazjDiTbtrtzUs_lYZ7_SANX8.roa (raw, json)
Hash identifier: CtVKLjKh+3RLy0K5f431YanpARC2l3YA07ATYcslPss=
Subject key identifier: 01:5A:DA:CE:30:E2:4D:BB:6B:B7:35:2C:FE:56:19:EF:F4:80:35:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9CD0DE3A4168AB9CD97BE17527CDF269
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AVrazjDiTbtrtzUs_lYZ7_SANX8.roa
Signing time: Sun 05 Nov 2023 00:10:15 +0000
ROA not before: Sun 05 Nov 2023 00:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:d0:de:3a:41:68:ab:9c:d9:7b:e1:75:27:cd:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 00:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015adace30e24dbb6bb7352cfe5619eff480357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:4c:18:bc:a2:8d:b8:84:06:92:a3:c3:1d:
e7:77:1e:4f:f9:52:10:bb:9c:cf:9c:f9:cf:6f:5f:
19:6e:6d:81:86:84:e0:91:bb:7b:38:d0:ae:d0:55:
c6:11:a6:27:58:a0:ee:0e:c8:f2:6f:90:10:6c:90:
6a:ed:3b:0e:23:64:30:17:e1:62:c5:25:1f:83:0b:
aa:ce:96:c3:43:c8:fc:a1:a0:d7:e9:a3:db:76:d0:
57:33:b5:2b:d1:f7:03:a1:01:c2:41:25:69:83:07:
9d:db:fb:87:72:3c:fe:5b:1a:fd:85:f3:5d:67:d6:
cf:7f:6f:c2:5d:35:06:b5:38:1e:54:6b:0e:f9:f3:
67:c5:e7:02:7e:84:9c:32:96:da:32:43:9a:6b:21:
ce:b7:18:f0:de:ec:5d:fd:01:c3:ea:0b:54:68:2f:
7e:90:a7:09:87:45:c0:6c:f5:c1:ef:ae:08:0e:2a:
ec:66:ff:3b:d4:74:8a:50:e8:52:40:e5:b5:56:9c:
d4:74:8a:33:56:b8:2a:35:11:c0:95:60:7a:01:86:
76:bb:4b:01:bd:ca:53:7a:61:a3:4b:50:a0:28:4d:
49:f5:31:85:46:13:aa:dd:54:77:81:d8:8b:03:b3:
e0:5b:fb:2d:f8:b5:e6:3a:52:c6:29:c6:a7:0d:19:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:DA:CE:30:E2:4D:BB:6B:B7:35:2C:FE:56:19:EF:F4:80:35:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AVrazjDiTbtrtzUs_lYZ7_SANX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:9f:02:c1:5e:96:17:a9:e7:21:6b:21:36:d0:db:63:d5:fe:
6b:9e:79:c7:74:21:8e:6c:07:db:8b:f6:de:34:1b:07:3a:00:
c2:30:d3:53:26:64:96:1e:49:cb:e9:4b:7e:1f:7a:08:b8:de:
dd:8f:ca:53:10:f0:02:72:f7:f0:a0:4e:a7:86:c8:46:87:e8:
cc:70:cb:52:b2:cb:21:cd:ea:ef:6d:7e:df:1a:df:52:00:81:
f2:a9:c3:50:3c:8c:90:f1:42:fb:67:f7:0d:97:fb:7a:cf:23:
8e:ca:71:7e:14:5b:ef:92:ac:cd:f5:63:33:88:38:10:97:58:
8e:52:65:22:89:7b:81:ac:c7:82:2e:60:11:df:6d:6f:9b:8b:
01:69:83:d6:b0:e9:55:cd:d1:99:d5:f8:41:2d:07:2d:d0:cf:
d1:a3:ef:d6:4b:af:63:6b:ca:2f:95:d7:04:14:74:56:b1:7b:
2d:93:5b:c3:d6:ec:18:53:8f:d1:aa:b1:df:c3:e7:74:ea:f1:
2c:3b:6e:84:3a:ca:b0:ca:c3:8a:77:6a:a6:c6:25:35:37:51:
ad:01:5b:c9:4e:e4:fb:88:78:10:13:7f:2d:f0:3b:d6:ae:57:
10:07:89:f1:d0:20:b6:5b:e2:1f:47:17:4e:40:9d:0a:19:fd:
a3:ac:bc:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuc0N46QWirnNl74XUnzfJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA1MDAxMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTVhZGFjZTMwZTI0ZGJiNmJiNzM1MmNmZTU2MTllZmY0ODAzNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyFMGLyijbiEBpKjwx3ndx5P+VIQ
u5zPnPnPb18Zbm2BhoTgkbt7ONCu0FXGEaYnWKDuDsjyb5AQbJBq7TsOI2QwF+Fi
xSUfgwuqzpbDQ8j8oaDX6aPbdtBXM7Ur0fcDoQHCQSVpgwed2/uHcjz+Wxr9hfNd
Z9bPf2/CXTUGtTgeVGsO+fNnxecCfoScMpbaMkOaayHOtxjw3uxd/QHD6gtUaC9+
kKcJh0XAbPXB764IDirsZv871HSKUOhSQOW1VpzUdIozVrgqNRHAlWB6AYZ2u0sB
vcpTemGjS1CgKE1J9TGFRhOq3VR3gdiLA7PgW/st+LXmOlLGKcanDRmqdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAFa2s4w4k27a7c1LP5WGe/0gDV/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQVZyYXpqRGlUYnRydHpVc19sWVo3X1NBTlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKafAsFelhep5yFrITbQ
22PV/mueecd0IY5sB9uL9t40Gwc6AMIw01MmZJYeScvpS34fegi43t2PylMQ8AJy
9/CgTqeGyEaH6Mxwy1KyyyHN6u9tft8a31IAgfKpw1A8jJDxQvtn9w2X+3rPI47K
cX4UW++SrM31YzOIOBCXWI5SZSKJe4Gsx4IuYBHfbW+biwFpg9aw6VXN0ZnV+EEt
By3Qz9Gj79ZLr2Nryi+V1wQUdFaxey2TW8PW7BhTj9Gqsd/D53Tq8Sw7boQ6yrDK
w4p3aqbGJTU3Ua0BW8lO5PuIeBATfy3wO9auVxAHifHQILZb4h9HF05AnQoZ/aOs
vIU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:46:27 2025 by rpki-client