Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B_DVTcKYKIk_McnB6FSad3aSYuI.roa
File: B_DVTcKYKIk_McnB6FSad3aSYuI.roa (raw, json)
Hash identifier: Wl+O4qcE1xAMm9Gv4P8TGf1tJ8+3XwGIKB53FLc1LME=
Subject key identifier: 07:F0:D5:4D:C2:98:28:89:3F:31:C9:C1:E8:54:9A:77:76:92:62:E2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C773C8DE6D89038C986D9D41D6095D10C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B_DVTcKYKIk_McnB6FSad3aSYuI.roa
Signing time: Sun 17 Dec 2023 10:05:06 +0000
ROA not before: Sun 17 Dec 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:773b:b1ec/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:3c:8d:e6:d8:90:38:c9:86:d9:d4:1d:60:95:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f0d54dc29828893f31c9c1e8549a77769262e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:49:6b:67:40:a4:b3:18:c1:46:30:09:a8:
20:d9:3f:d1:4d:b2:42:90:34:0f:b5:cd:88:78:e2:
7c:03:d3:5e:ef:86:0f:56:42:51:6e:da:d7:35:13:
06:3f:cb:7f:38:76:4a:b9:09:34:a4:9e:8d:49:8a:
49:dc:1b:42:83:5a:ca:f9:f3:f5:36:95:53:60:80:
94:71:dd:ea:07:af:c0:4b:42:41:17:51:d7:da:dc:
0a:36:9c:b1:1d:fa:b1:b5:3a:18:4d:1b:ee:4e:7f:
bd:a2:ff:66:f0:e1:11:c3:a1:f4:df:41:d5:7f:5d:
b4:52:41:1d:fe:31:ce:44:3b:f2:e6:71:4f:d6:38:
29:73:6c:68:66:31:d5:67:2e:a8:a2:4c:71:b6:ab:
f9:a5:e5:79:53:48:a4:64:8f:90:ef:c4:b3:c8:b8:
dc:69:30:46:a9:f2:7e:89:43:66:8d:30:ed:80:75:
61:c1:dd:9f:aa:f5:87:29:4e:17:5f:d6:ad:74:9d:
92:3d:9f:47:d5:55:e0:87:cc:91:cf:70:0a:08:bc:
a5:cd:0f:7b:8d:e2:5b:8f:2a:1c:58:5d:09:6e:a8:
cc:60:2e:ff:19:37:fc:e9:c5:8f:95:bb:d5:67:19:
9b:8d:10:ea:a0:6e:ee:26:eb:37:21:4e:4d:f1:b2:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:D5:4D:C2:98:28:89:3F:31:C9:C1:E8:54:9A:77:76:92:62:E2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B_DVTcKYKIk_McnB6FSad3aSYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:d7:97:e7:92:97:11:da:b5:98:bb:c6:86:e2:e3:5b:2c:a0:
47:c1:83:4b:ad:8d:34:36:b8:e0:6c:40:a6:fe:4b:ff:e1:92:
0c:3e:3f:42:a8:36:3b:99:53:0b:73:72:1f:eb:81:a2:79:0b:
e8:e3:68:e1:25:cf:18:05:26:81:d2:09:06:89:8d:6c:35:38:
b2:a7:11:48:fa:26:9e:1e:27:f3:a0:33:1f:4b:96:2f:a6:b1:
34:c1:e0:00:eb:0f:01:94:38:b0:73:b4:f5:39:76:f6:2b:77:
6b:5c:2a:03:34:f1:80:34:8c:30:93:28:5a:85:19:69:70:3c:
1a:62:16:81:1a:c7:b4:c6:d2:32:10:91:d0:f9:63:9b:5c:45:
c7:6d:05:6a:ea:5c:da:3d:7f:bf:41:b4:19:40:82:5a:7a:4f:
64:0b:1e:7f:f1:69:71:45:4d:4b:ff:8f:20:bc:b8:aa:cd:83:
88:5c:b0:82:2c:cb:3a:1e:3e:0f:46:7b:f3:80:6f:21:5b:0b:
f7:8a:7d:b2:df:6e:2c:39:43:c4:35:eb:a4:c9:37:84:0f:2a:
3f:24:c2:b4:b2:9d:8e:73:8e:f9:be:7d:56:4a:1c:0d:e0:3a:
e3:04:19:48:c2:2c:85:3b:b2:6b:74:85:35:94:b9:8d:8f:33:
ad:cf:1e:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx3PI3m2JA4yYbZ1B1gldEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MTAwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2YwZDU0ZGMyOTgyODg5M2YzMWM5YzFlODU0OWE3Nzc2OTI2MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t5Ja2dApLMYwUYwCagg2T/RTbJC
kDQPtc2IeOJ8A9Ne74YPVkJRbtrXNRMGP8t/OHZKuQk0pJ6NSYpJ3BtCg1rK+fP1
NpVTYICUcd3qB6/AS0JBF1HX2twKNpyxHfqxtToYTRvuTn+9ov9m8OERw6H030HV
f120UkEd/jHORDvy5nFP1jgpc2xoZjHVZy6ookxxtqv5peV5U0ikZI+Q78SzyLjc
aTBGqfJ+iUNmjTDtgHVhwd2fqvWHKU4XX9atdJ2SPZ9H1VXgh8yRz3AKCLylzQ97
jeJbjyocWF0JbqjMYC7/GTf86cWPlbvVZxmbjRDqoG7uJus3IU5N8bJ/eQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAfw1U3CmCiJPzHJwehUmnd2kmLiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQl9EVlRjS1lLSWtfTWNuQjZGU2FkM2FTWXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHDXl+eSlxHatZi7xobi
41ssoEfBg0utjTQ2uOBsQKb+S//hkgw+P0KoNjuZUwtzch/rgaJ5C+jjaOElzxgF
JoHSCQaJjWw1OLKnEUj6Jp4eJ/OgMx9Lli+msTTB4ADrDwGUOLBztPU5dvYrd2tc
KgM08YA0jDCTKFqFGWlwPBpiFoEax7TG0jIQkdD5Y5tcRcdtBWrqXNo9f79BtBlA
glp6T2QLHn/xaXFFTUv/jyC8uKrNg4hcsIIsyzoePg9Ge/OAbyFbC/eKfbLfbiw5
Q8Q166TJN4QPKj8kwrSynY5zjvm+fVZKHA3gOuMEGUjCLIU7smt0hTWUuY2PM63P
HvA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:34:40 2025 by rpki-client