Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B49f6SxNa8SXw7G6qDviQeyfz-4.roa
File: B49f6SxNa8SXw7G6qDviQeyfz-4.roa (raw, json)
Hash identifier: G63Y2wX9vATRlHkyhhjtJMKxzP4tVEKYom9vJytWCG4=
Subject key identifier: 07:8F:5F:E9:2C:4D:6B:C4:97:C3:B1:BA:A8:3B:E2:41:EC:9F:CF:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB5E701F24391C1087C87C8F54EF33468
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B49f6SxNa8SXw7G6qDviQeyfz-4.roa
Signing time: Thu 09 Nov 2023 21:04:57 +0000
ROA not before: Thu 09 Nov 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:b5e6:8a23/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:e7:01:f2:43:91:c1:08:7c:87:c8:f5:4e:f3:34:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078f5fe92c4d6bc497c3b1baa83be241ec9fcfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:b8:16:d3:15:8b:35:d1:e0:de:ce:87:78:
b1:f7:39:ce:f7:cd:56:28:ae:09:b6:e2:21:9e:9b:
69:49:3a:f3:88:36:4f:06:ff:af:5b:42:e4:cd:29:
f3:10:d8:3c:cd:40:24:18:f9:eb:51:8a:89:6e:0a:
6c:95:a6:3a:08:55:52:6c:89:85:ae:a1:24:9c:e1:
0c:74:25:2e:17:f6:ad:aa:af:d7:81:b2:19:1a:37:
50:57:73:a8:58:1e:82:8b:cf:f1:76:d5:57:ee:ac:
bb:2c:c5:62:3a:e4:30:16:d3:3d:e6:d5:6a:47:ca:
c7:10:11:e6:ef:dd:9e:6b:36:e6:03:96:55:10:0f:
85:18:4c:28:0d:69:ad:5d:b7:8e:6c:d5:02:a0:61:
0a:85:88:4b:5a:74:83:bd:d0:2f:00:e1:e7:61:21:
d4:ca:f7:bc:15:39:be:d8:11:20:f0:7a:5b:d8:df:
a8:3a:e1:5a:10:dc:57:c1:33:5b:bd:de:2f:6c:ae:
27:46:22:41:d4:7e:b1:43:65:8a:b3:71:1f:78:97:
46:63:ab:0e:4f:10:3f:e6:4d:41:7d:d4:11:36:b4:
87:66:e1:4d:39:20:27:3c:fd:7e:16:0a:66:29:91:
0d:36:3d:49:50:a8:f9:ff:6f:69:68:df:89:4d:84:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:5F:E9:2C:4D:6B:C4:97:C3:B1:BA:A8:3B:E2:41:EC:9F:CF:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B49f6SxNa8SXw7G6qDviQeyfz-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:15:af:0c:2c:60:75:7b:4e:a5:a5:1f:a7:83:ba:16:f0:82:
67:4c:8d:50:37:47:ce:69:96:8c:d9:ca:65:ee:09:0b:4b:74:
44:f6:c6:89:1b:7e:d5:42:97:15:8a:47:ba:4b:c7:b2:5e:28:
65:1d:6f:20:f3:25:95:70:8e:09:7d:47:43:6f:d1:b5:45:4c:
23:1c:58:d5:a6:cb:67:b0:56:b3:b1:98:61:60:e0:e3:c7:b3:
82:c8:c5:4b:d8:3c:0b:5a:3b:d9:38:2e:e1:73:d2:12:86:28:
de:5a:a8:c0:36:da:9f:10:6a:60:55:26:ff:70:15:0e:b8:70:
65:8b:0e:10:ec:a3:80:2d:20:4a:c7:a9:9f:c0:53:4d:b6:e8:
27:d0:42:8f:55:62:91:39:4d:58:53:a8:ce:18:4a:c6:84:88:
18:77:da:4e:7b:58:b1:e5:34:27:57:d4:84:86:22:d8:76:b5:
e7:f8:ae:10:d7:2b:a2:ad:83:61:a2:b5:80:fc:87:60:0e:43:
c0:74:bb:43:5c:19:26:ab:55:65:f0:af:0a:9f:7f:2a:f0:ec:
02:c5:95:c5:44:d1:16:ca:76:cc:af:ae:41:2e:c4:21:1d:ca:
0c:c8:69:4c:28:70:31:54:ef:93:3a:aa:35:b6:ea:88:49:90:
b4:37:20:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu15wHyQ5HBCHyHyPVO8zRoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA5MjEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzhmNWZlOTJjNGQ2YmM0OTdjM2IxYmFhODNiZTI0MWVjOWZjZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWm4FtMVizXR4N7Oh3ix9znO981W
KK4JtuIhnptpSTrziDZPBv+vW0LkzSnzENg8zUAkGPnrUYqJbgpslaY6CFVSbImF
rqEknOEMdCUuF/atqq/XgbIZGjdQV3OoWB6Ci8/xdtVX7qy7LMViOuQwFtM95tVq
R8rHEBHm792eazbmA5ZVEA+FGEwoDWmtXbeObNUCoGEKhYhLWnSDvdAvAOHnYSHU
yve8FTm+2BEg8Hpb2N+oOuFaENxXwTNbvd4vbK4nRiJB1H6xQ2WKs3EfeJdGY6sO
TxA/5k1BfdQRNrSHZuFNOSAnPP1+FgpmKZENNj1JUKj5/29paN+JTYTPiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAePX+ksTWvEl8Oxuqg74kHsn8/uMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQjQ5ZjZTeE5hOFNYdzdHNnFEdmlRZXlmei00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJcVrwwsYHV7TqWlH6eD
uhbwgmdMjVA3R85plozZymXuCQtLdET2xokbftVClxWKR7pLx7JeKGUdbyDzJZVw
jgl9R0Nv0bVFTCMcWNWmy2ewVrOxmGFg4OPHs4LIxUvYPAtaO9k4LuFz0hKGKN5a
qMA22p8QamBVJv9wFQ64cGWLDhDso4AtIErHqZ/AU0226CfQQo9VYpE5TVhTqM4Y
SsaEiBh32k57WLHlNCdX1ISGIth2tef4rhDXK6Ktg2GitYD8h2AOQ8B0u0NcGSar
VWXwrwqffyrw7ALFlcVE0RbKdsyvrkEuxCEdygzIaUwocDFU75M6qjW26ohJkLQ3
IKc=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:46 2025 by rpki-client