Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbhEfEevsu0WrNctD6XS5IWhFVE.roa
File: CbhEfEevsu0WrNctD6XS5IWhFVE.roa (raw, json)
Hash identifier: x4IUL3CNOBiOrWB+PKkwfBYS6+YiG7EbhZi7zjbMPlw=
Subject key identifier: 09:B8:44:7C:47:AF:B2:ED:16:AC:D7:2D:0F:A5:D2:E4:85:A1:15:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B450C9F8746C81EFCA0BBA70CB88D2747
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbhEfEevsu0WrNctD6XS5IWhFVE.roa
Signing time: Wed 18 Oct 2023 23:08:57 +0000
ROA not before: Wed 18 Oct 2023 23:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4508:539b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:0c:9f:87:46:c8:1e:fc:a0:bb:a7:0c:b8:8d:27:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 23:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b8447c47afb2ed16acd72d0fa5d2e485a11551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:5b:7b:66:4e:e4:49:5f:4d:2f:40:b1:f7:
be:b1:b6:35:6c:fd:31:90:61:26:65:7a:a3:fe:3c:
2c:25:6a:64:ed:86:fe:50:49:a4:5a:12:67:02:5a:
53:d0:73:5d:60:7a:74:3e:06:92:f8:fe:29:0d:e8:
bb:82:03:62:4c:5a:43:2e:6f:a0:b7:94:ad:b9:be:
23:52:d3:ae:0c:f2:bb:7a:26:2c:df:b3:58:b8:05:
41:1d:cd:e4:d1:a5:47:9f:74:17:a3:57:ec:a3:37:
e0:60:01:43:51:19:ac:72:0e:41:4d:80:2a:27:82:
d5:d7:77:0d:46:cf:dc:c0:99:b8:16:46:f5:2c:26:
fb:24:8d:6a:4a:85:09:4d:38:2f:5c:6b:5a:07:a0:
72:18:a1:55:f0:56:7e:4f:2f:72:07:55:70:13:0d:
b0:b1:ad:32:d2:35:5b:82:79:93:04:34:ea:85:a4:
b5:1f:47:07:43:fb:86:54:23:88:53:92:5e:25:b8:
b7:17:a8:6f:fc:b4:d2:9a:94:a1:0c:78:b8:40:10:
2e:40:4d:92:e4:e0:c2:92:43:44:f5:38:08:3f:4d:
4c:d9:fe:46:30:00:b8:95:00:cd:b7:be:09:59:b0:
e8:e8:75:c8:f1:3c:65:3b:56:66:0d:7f:b8:5d:7f:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:44:7C:47:AF:B2:ED:16:AC:D7:2D:0F:A5:D2:E4:85:A1:15:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbhEfEevsu0WrNctD6XS5IWhFVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:50:98:5d:43:02:a9:8a:c4:80:b1:71:98:4d:15:19:39:ac:
3a:04:f8:a0:bf:2d:4c:b7:d6:90:06:8d:b4:bc:0f:f7:37:a2:
67:cc:9e:40:66:34:70:fe:50:68:53:13:d0:f8:0b:31:b5:82:
6b:e6:64:7f:9d:e5:c9:39:c5:a2:cf:bf:8f:68:ee:c0:c0:f0:
e6:3b:df:7a:37:96:4d:51:96:ff:fc:cb:78:3a:eb:84:a3:9a:
66:50:56:77:95:36:83:ff:fc:17:be:c7:50:0d:17:1a:25:e5:
0e:2f:0c:23:cd:d1:2e:d1:c0:b9:1e:a5:50:dd:7f:a4:5e:fb:
c6:b6:c9:df:c2:17:10:e6:e4:96:73:72:9f:33:19:75:97:2f:
d6:19:1c:b9:e9:28:b0:af:45:32:21:6d:bd:82:7e:40:06:0a:
8a:25:c8:b7:0e:95:7b:f4:82:8c:64:53:0c:d4:25:82:81:38:
0d:4f:af:1f:1e:1b:27:d5:44:16:01:e0:d3:75:cd:09:d1:f7:
aa:fa:19:a8:ab:ad:be:f5:23:c5:ab:30:21:da:47:22:f0:25:
cc:e6:1e:78:12:da:1a:c1:30:78:bd:41:c4:0a:71:a7:db:41:
b9:71:d6:78:c3:e4:57:c6:f7:27:b7:04:c2:dd:0c:99:11:1b:
e1:e7:b3:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtFDJ+HRsge/KC7pwy4jSdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE4MjMwODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI4NDQ3YzQ3YWZiMmVkMTZhY2Q3MmQwZmE1ZDJlNDg1YTExNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJbe2ZO5ElfTS9Asfe+sbY1bP0x
kGEmZXqj/jwsJWpk7Yb+UEmkWhJnAlpT0HNdYHp0PgaS+P4pDei7ggNiTFpDLm+g
t5Stub4jUtOuDPK7eiYs37NYuAVBHc3k0aVHn3QXo1fsozfgYAFDURmscg5BTYAq
J4LV13cNRs/cwJm4Fkb1LCb7JI1qSoUJTTgvXGtaB6ByGKFV8FZ+Ty9yB1VwEw2w
sa0y0jVbgnmTBDTqhaS1H0cHQ/uGVCOIU5JeJbi3F6hv/LTSmpShDHi4QBAuQE2S
5ODCkkNE9TgIP01M2f5GMAC4lQDNt74JWbDo6HXI8TxlO1ZmDX+4XX+AaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAm4RHxHr7LtFqzXLQ+l0uSFoRVRMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ2JoRWZFZXZzdTBXck5jdEQ2WFM1SVdoRlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMdQmF1DAqmKxICxcZhN
FRk5rDoE+KC/LUy31pAGjbS8D/c3omfMnkBmNHD+UGhTE9D4CzG1gmvmZH+d5ck5
xaLPv49o7sDA8OY733o3lk1Rlv/8y3g664SjmmZQVneVNoP//Be+x1ANFxol5Q4v
DCPN0S7RwLkepVDdf6Re+8a2yd/CFxDm5JZzcp8zGXWXL9YZHLnpKLCvRTIhbb2C
fkAGCoolyLcOlXv0goxkUwzUJYKBOA1Prx8eGyfVRBYB4NN1zQnR96r6Gairrb71
I8WrMCHaRyLwJczmHngS2hrBMHi9QcQKcafbQblx1njD5FfG9ye3BMLdDJkRG+Hn
s6E=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:17 2025 by rpki-client