Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BH3JinuAfhgs6jqpxgnCeezlZ9U.roa
File: BH3JinuAfhgs6jqpxgnCeezlZ9U.roa (raw, json)
Hash identifier: TViCWDdd7XVIXvkBtStKreIuiSmM4slMPHPB/UU6MSo=
Subject key identifier: 04:7D:C9:8A:7B:80:7E:18:2C:EA:3A:A9:C6:09:C2:79:EC:E5:67:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCCE4EF38A7DFFD7BED95843243DC70AE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BH3JinuAfhgs6jqpxgnCeezlZ9U.roa
Signing time: Tue 14 Nov 2023 08:13:57 +0000
ROA not before: Tue 14 Nov 2023 08:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:e4:ef:38:a7:df:fd:7b:ed:95:84:32:43:dc:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 08:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=047dc98a7b807e182cea3aa9c609c279ece567d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:9b:3b:94:58:dd:23:ee:52:ba:07:5a:e7:
53:d1:c3:1f:c3:3b:70:6e:e1:90:6c:88:50:51:52:
9d:fd:f2:cf:3b:83:cf:6c:79:ac:1f:02:cd:0b:12:
8c:08:cb:bf:66:17:2e:47:03:a5:f6:e9:a4:d4:6e:
e2:3d:08:bc:d2:f4:da:0f:e6:ef:d8:30:cb:43:cb:
55:05:b5:34:1a:11:dd:1c:21:53:d9:34:3b:be:54:
b8:d7:69:b0:78:06:e2:8b:2e:e7:c6:eb:54:75:16:
a9:81:24:d3:d2:a8:bd:41:e7:74:44:45:d2:a4:cf:
9c:69:27:cf:22:1b:f3:e0:45:84:b0:fd:c0:13:05:
03:0e:c8:59:ab:dc:88:38:dd:94:48:ba:61:83:2d:
b8:8e:20:15:19:50:75:4d:57:8b:43:e0:48:a0:6d:
26:4c:10:4b:8d:79:50:62:65:bc:ac:be:c9:a0:d1:
31:32:b4:59:dc:ba:e1:10:9d:7e:b3:a9:cd:45:03:
2d:7f:b1:6a:92:f7:21:c7:71:46:ed:bc:64:ef:fa:
2a:61:54:de:d2:5c:16:85:1d:e5:45:46:65:e9:6b:
04:13:e0:38:18:63:cb:c5:f5:00:a5:3a:39:d9:10:
62:20:2e:0a:96:cc:e8:78:19:c3:97:07:76:5b:bb:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:C9:8A:7B:80:7E:18:2C:EA:3A:A9:C6:09:C2:79:EC:E5:67:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BH3JinuAfhgs6jqpxgnCeezlZ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:9b:44:a2:e6:1e:b5:c7:f5:0b:ce:e6:2a:e9:79:69:af:e5:
aa:e7:54:f8:f5:5a:f2:7a:2b:ed:84:c3:ca:4c:20:9d:4d:1e:
87:1d:d1:32:2f:b3:54:12:ac:04:86:04:1e:2f:b5:79:e9:df:
0b:46:d8:66:f5:9b:36:c9:1f:1f:48:47:ba:5b:05:82:a5:ff:
01:ee:78:19:48:1e:9e:47:76:7a:12:e6:c2:e6:46:6d:14:93:
77:5b:f8:4b:0d:63:4a:75:4d:2f:c1:e2:28:15:31:8b:ab:8f:
6d:aa:5d:b5:8f:0b:57:12:e6:87:bb:7c:9e:aa:f5:c3:06:aa:
d9:86:48:c3:73:97:75:1e:89:02:46:8e:76:4b:2a:9c:a8:1a:
47:f0:fb:7c:e1:8f:e7:b2:c6:eb:d8:a5:81:c5:fa:1d:36:c4:
5a:65:ac:56:f2:c5:22:5a:19:24:f9:ba:33:fb:28:d9:f0:6c:
17:97:12:69:a2:11:76:22:b6:2d:10:cc:2d:1c:3a:2f:ae:9b:
04:93:68:82:ce:13:2a:59:f9:1f:04:1f:13:37:a6:0e:01:b7:
df:d5:b6:c9:db:79:53:cb:50:2b:dc:b0:19:e7:c4:5e:52:10:
47:f4:7c:13:27:8e:20:d2:9b:20:2a:9f:f6:a3:74:1e:82:78:
6e:3a:38:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvM5O84p9/9e+2VhDJD3HCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MDgxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDdkYzk4YTdiODA3ZTE4MmNlYTNhYTljNjA5YzI3OWVjZTU2N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmabO5RY3SPuUroHWudT0cMfwztw
buGQbIhQUVKd/fLPO4PPbHmsHwLNCxKMCMu/ZhcuRwOl9umk1G7iPQi80vTaD+bv
2DDLQ8tVBbU0GhHdHCFT2TQ7vlS412mweAbiiy7nxutUdRapgSTT0qi9Qed0REXS
pM+caSfPIhvz4EWEsP3AEwUDDshZq9yION2USLphgy24jiAVGVB1TVeLQ+BIoG0m
TBBLjXlQYmW8rL7JoNExMrRZ3LrhEJ1+s6nNRQMtf7Fqkvchx3FG7bxk7/oqYVTe
0lwWhR3lRUZl6WsEE+A4GGPLxfUApTo52RBiIC4KlszoeBnDlwd2W7vIEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAR9yYp7gH4YLOo6qcYJwnns5WfVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQkgzSmludUFmaGdzNmpxcHhnbkNlZXpsWjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACGbRKLmHrXH9QvO5irp
eWmv5arnVPj1WvJ6K+2Ew8pMIJ1NHocd0TIvs1QSrASGBB4vtXnp3wtG2Gb1mzbJ
Hx9IR7pbBYKl/wHueBlIHp5HdnoS5sLmRm0Uk3db+EsNY0p1TS/B4igVMYurj22q
XbWPC1cS5oe7fJ6q9cMGqtmGSMNzl3UeiQJGjnZLKpyoGkfw+3zhj+eyxuvYpYHF
+h02xFplrFbyxSJaGST5ujP7KNnwbBeXEmmiEXYiti0QzC0cOi+umwSTaILOEypZ
+R8EHxM3pg4Bt9/VtsnbeVPLUCvcsBnnxF5SEEf0fBMnjiDSmyAqn/ajdB6CeG46
OPE=
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:20:23 2025 by rpki-client