Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CFeJA2ublYGhaEamYZR99yR1KtA.roa
File: CFeJA2ublYGhaEamYZR99yR1KtA.roa (raw, json)
Hash identifier: GeMI6sRCdxhjkUQAk38rZzGxOn1CFNGX0kEmGVWBzKY=
Subject key identifier: 08:57:89:03:6B:9B:95:81:A1:68:46:A6:61:94:7D:F7:24:75:2A:D0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEED08E2B70B99A32AEDCF9D85CC5863A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CFeJA2ublYGhaEamYZR99yR1KtA.roa
Signing time: Mon 02 Oct 2023 05:15:59 +0000
ROA not before: Mon 02 Oct 2023 05:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:d0:8e:2b:70:b9:9a:32:ae:dc:f9:d8:5c:c5:86:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 05:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085789036b9b9581a16846a661947df724752ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:6e:99:d7:6d:18:9c:0a:26:e7:e2:d0:cd:
68:be:ca:e4:e6:22:a1:83:54:cb:c1:13:6e:e9:bf:
54:6b:ad:56:91:c1:9c:84:db:40:60:53:46:db:bc:
ef:46:ac:70:3f:2b:64:7b:03:7c:71:34:c9:02:8f:
30:e6:6b:c3:92:52:55:a4:6b:2d:3b:9d:e5:15:9e:
e9:a0:41:81:5f:97:7b:b4:09:a4:b1:1b:82:39:f6:
51:c6:a2:91:a9:f7:5b:6a:fb:b1:ba:43:18:8b:9e:
0e:1a:46:4a:38:c7:c0:13:d1:77:5f:11:f0:00:66:
04:f7:14:5f:27:07:ee:70:a7:2c:fb:f2:53:5f:bf:
4b:fd:5f:fb:e5:76:1f:5a:f6:a6:46:82:30:ab:b3:
c1:db:b3:59:c2:81:44:35:ba:0f:c0:85:d4:73:9d:
b4:37:23:9c:6e:c8:be:ff:f1:4d:8e:c2:04:a2:ac:
9a:de:75:b3:c1:31:9f:9e:e2:b3:63:5a:de:7c:1d:
e6:9d:72:85:57:22:cf:6a:9c:2e:c1:19:b4:22:f9:
88:7a:b4:33:18:09:f9:fb:1b:9e:a1:41:f2:23:b6:
f2:9f:20:e1:a0:9a:93:04:ff:5e:04:71:b4:42:dc:
75:13:31:8f:fe:bc:26:c3:d2:5b:db:ce:da:9d:47:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:89:03:6B:9B:95:81:A1:68:46:A6:61:94:7D:F7:24:75:2A:D0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CFeJA2ublYGhaEamYZR99yR1KtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:51:b6:c4:59:ae:45:7e:22:a1:bc:f1:43:fa:1b:08:34:94:
1f:fb:32:72:96:f9:a5:2f:08:a5:62:79:29:c0:fc:df:1e:94:
47:63:ec:31:1e:e2:a2:e7:d4:1f:b2:28:d0:4b:12:b3:39:03:
36:97:1f:d1:f0:e2:b3:a2:0a:85:09:ef:3f:16:ea:fc:cf:b6:
37:37:f6:41:ed:f0:73:70:c8:9e:f8:de:ab:a6:8c:9b:44:ba:
13:2a:3b:62:7f:de:3c:db:a7:e4:d9:dc:da:95:5c:fb:9f:7a:
21:a7:07:01:a4:d3:8c:2c:13:eb:64:0e:f6:71:78:7b:ed:ec:
bf:df:2e:41:d0:00:93:72:64:97:2b:eb:f6:ca:9f:79:59:dd:
5e:5d:b9:95:5b:a4:42:f7:1b:3e:83:c0:c0:31:f3:0f:16:ab:
d7:be:9e:88:18:d5:b9:b3:7b:c8:15:3b:dc:76:fb:90:cf:ea:
0f:31:5c:e3:88:19:45:21:ef:bb:49:fd:0d:28:55:34:17:18:
28:9f:50:9c:16:13:84:80:91:6a:7c:57:91:37:91:9c:d3:fe:
cf:7c:06:e9:8d:c1:3f:8f:33:8f:ff:14:b8:26:5b:35:54:1d:
3b:b1:63:13:c5:5b:43:4d:b8:d6:a9:d1:62:12:ef:86:60:06:
57:e7:d6:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYru0I4rcLmaMq7c+dhcxYY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMDUxNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODU3ODkwMzZiOWI5NTgxYTE2ODQ2YTY2MTk0N2RmNzI0NzUyYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikBumddtGJwKJufi0M1ovsrk5iKh
g1TLwRNu6b9Ua61WkcGchNtAYFNG27zvRqxwPytkewN8cTTJAo8w5mvDklJVpGst
O53lFZ7poEGBX5d7tAmksRuCOfZRxqKRqfdbavuxukMYi54OGkZKOMfAE9F3XxHw
AGYE9xRfJwfucKcs+/JTX79L/V/75XYfWvamRoIwq7PB27NZwoFENboPwIXUc520
NyOcbsi+//FNjsIEoqya3nWzwTGfnuKzY1refB3mnXKFVyLPapwuwRm0IvmIerQz
GAn5+xueoUHyI7bynyDhoJqTBP9eBHG0Qtx1EzGP/rwmw9Jb287anUd/IQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAhXiQNrm5WBoWhGpmGUffckdSrQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ0ZlSkEydWJsWUdoYUVhbVlaUjk5eVIxS3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG5RtsRZrkV+IqG88UP6
Gwg0lB/7MnKW+aUvCKVieSnA/N8elEdj7DEe4qLn1B+yKNBLErM5AzaXH9Hw4rOi
CoUJ7z8W6vzPtjc39kHt8HNwyJ743qumjJtEuhMqO2J/3jzbp+TZ3NqVXPufeiGn
BwGk04wsE+tkDvZxeHvt7L/fLkHQAJNyZJcr6/bKn3lZ3V5duZVbpEL3Gz6DwMAx
8w8Wq9e+nogY1bmze8gVO9x2+5DP6g8xXOOIGUUh77tJ/Q0oVTQXGCifUJwWE4SA
kWp8V5E3kZzT/s98BumNwT+PM4//FLgmWzVUHTuxYxPFW0NNuNap0WIS74ZgBlfn
1r0=
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:17:22 2025 by rpki-client