Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ckw4J0hux0XxHLX2Nvp3yN2u1Bo.roa
File: Ckw4J0hux0XxHLX2Nvp3yN2u1Bo.roa (raw, json)
Hash identifier: OTFsr6cpZvlptTeCuzwMSeGfTIXjGmntq2FdSYCJ6hY=
Subject key identifier: 0A:4C:38:27:48:6E:C7:45:F1:1C:B5:F6:36:FA:77:C8:DD:AE:D4:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C510A55B0E14F5A71C3A52356AE10AFF5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ckw4J0hux0XxHLX2Nvp3yN2u1Bo.roa
Signing time: Sun 10 Dec 2023 00:04:40 +0000
ROA not before: Sun 10 Dec 2023 00:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:510a:1447/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:51:0a:55:b0:e1:4f:5a:71:c3:a5:23:56:ae:10:af:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 00:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a4c3827486ec745f11cb5f636fa77c8ddaed41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:b8:f3:da:fb:6e:44:04:93:56:26:ee:3f:
f7:c9:cd:c1:e5:7c:d2:98:ef:f7:cc:46:cf:a8:72:
94:52:53:e8:73:e7:60:62:96:4e:3c:4e:fa:0f:9f:
9d:e3:37:dc:d5:3e:0e:f7:7d:06:0c:f3:46:ca:31:
db:c6:9b:4e:e1:58:fd:f8:74:8b:10:d5:c9:5c:76:
55:08:da:bb:f2:c8:07:be:1c:a9:8b:6f:9d:66:36:
a8:09:06:62:d9:f9:d3:70:53:14:1f:03:9d:d3:6f:
a4:4f:f2:b8:90:3f:46:df:ea:a6:54:8d:c4:e1:a2:
64:97:36:ad:5c:07:65:c7:cf:fa:d7:25:63:91:a6:
13:23:21:21:37:c8:7e:52:fd:0f:ec:13:db:61:8d:
8d:b7:6d:62:0a:2f:47:c5:14:f4:82:e4:b9:27:49:
a5:1d:53:96:f4:e1:50:04:c0:b6:b4:23:c7:db:0a:
9c:35:f1:d7:61:a9:ac:3c:e2:53:21:37:01:da:5d:
65:4c:e3:a9:b3:64:64:c6:a2:c1:29:ce:1d:d4:4c:
f0:29:6f:b0:3a:e5:4e:00:4a:bc:11:f0:8a:8e:bf:
80:0b:31:f0:e9:f2:04:03:2d:42:b1:e0:81:d2:51:
cf:7d:a2:19:d2:db:c4:b5:f2:d9:1b:6b:c0:b5:84:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:38:27:48:6E:C7:45:F1:1C:B5:F6:36:FA:77:C8:DD:AE:D4:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ckw4J0hux0XxHLX2Nvp3yN2u1Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e2:0c:b6:96:ee:1d:6f:3a:2f:c9:a7:45:82:20:33:98:90:
fb:87:6b:81:02:ac:96:11:64:b1:59:ca:0c:69:f3:00:da:0c:
4e:7d:4f:76:00:90:9e:24:3e:84:37:b0:a8:9c:49:e7:57:5e:
71:07:0f:98:4f:94:ec:71:ac:46:9b:b7:3a:32:20:f8:36:b6:
57:1c:6e:df:19:0b:13:4a:70:d2:97:73:9d:ec:03:69:21:fe:
c8:2c:32:4a:cf:af:02:49:b7:d1:0c:47:0b:fb:78:cf:59:c6:
22:a0:d7:7b:c0:0f:c0:e9:a7:98:ac:84:c1:b3:56:56:9a:47:
b8:40:6b:1c:d4:3b:08:6c:21:a6:03:ab:e2:a4:95:44:81:58:
73:20:c0:76:9f:f3:5a:07:de:37:87:3b:28:a9:a4:a0:cb:83:
77:c7:c5:e3:ac:8d:78:cd:87:15:34:9a:a9:c1:68:aa:53:2b:
09:40:0d:c5:1a:0f:c4:cc:95:f0:23:26:ae:37:f4:8a:53:fe:
25:57:6b:2e:97:c4:8d:df:05:15:fb:77:a1:1e:9c:8c:00:70:
34:88:a8:78:65:12:e5:2c:48:50:6e:63:9c:c6:c0:b2:83:94:
04:05:d8:c6:e9:74:34:32:f0:40:6f:90:b9:7d:16:06:a3:7d:
a8:af:9b:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxRClWw4U9accOlI1auEK/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEwMDAwNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRjMzgyNzQ4NmVjNzQ1ZjExY2I1ZjYzNmZhNzdjOGRkYWVkNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0S489r7bkQEk1Ym7j/3yc3B5XzS
mO/3zEbPqHKUUlPoc+dgYpZOPE76D5+d4zfc1T4O930GDPNGyjHbxptO4Vj9+HSL
ENXJXHZVCNq78sgHvhypi2+dZjaoCQZi2fnTcFMUHwOd02+kT/K4kD9G3+qmVI3E
4aJklzatXAdlx8/61yVjkaYTIyEhN8h+Uv0P7BPbYY2Nt21iCi9HxRT0guS5J0ml
HVOW9OFQBMC2tCPH2wqcNfHXYamsPOJTITcB2l1lTOOps2RkxqLBKc4d1EzwKW+w
OuVOAEq8EfCKjr+ACzHw6fIEAy1CseCB0lHPfaIZ0tvEtfLZG2vAtYQqhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFApMOCdIbsdF8Ry19jb6d8jdrtQaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ2t3NEowaHV4MFh4SExYMk52cDN5TjJ1MUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABviDLaW7h1vOi/Jp0WC
IDOYkPuHa4ECrJYRZLFZygxp8wDaDE59T3YAkJ4kPoQ3sKicSedXXnEHD5hPlOxx
rEabtzoyIPg2tlccbt8ZCxNKcNKXc53sA2kh/sgsMkrPrwJJt9EMRwv7eM9ZxiKg
13vAD8Dpp5ishMGzVlaaR7hAaxzUOwhsIaYDq+KklUSBWHMgwHaf81oH3jeHOyip
pKDLg3fHxeOsjXjNhxU0mqnBaKpTKwlADcUaD8TMlfAjJq439IpT/iVXay6XxI3f
BRX7d6EenIwAcDSIqHhlEuUsSFBuY5zGwLKDlAQF2MbpdDQy8EBvkLl9Fgajfaiv
mxc=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:30:10 2025 by rpki-client