Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoBoBUYwyzSNiksIqepBN6xn7T4.roa
File: CoBoBUYwyzSNiksIqepBN6xn7T4.roa (raw, json)
Hash identifier: hs5CIetR31556NrHQbwgRmixx6ybSShQLCl1jJ6sATs=
Subject key identifier: 0A:80:68:05:46:30:CB:34:8D:8A:4B:08:A9:EA:41:37:AC:67:ED:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B969E42CA3809CC2884D0DAD9F0C820C7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoBoBUYwyzSNiksIqepBN6xn7T4.roa
Signing time: Fri 03 Nov 2023 19:17:16 +0000
ROA not before: Fri 03 Nov 2023 19:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:9e:42:ca:38:09:cc:28:84:d0:da:d9:f0:c8:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 19:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8068054630cb348d8a4b08a9ea4137ac67ed3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:f7:9b:08:d2:49:ea:ec:f4:63:f7:1c:32:
1c:99:8c:e3:e5:ac:63:98:ba:bf:77:c8:0a:60:64:
36:e6:e5:5c:d2:dd:c7:f0:37:67:95:30:43:3a:fe:
03:fe:c7:d8:e9:5c:66:40:94:9c:f8:fb:46:2b:11:
8a:8f:97:c8:a3:9f:56:76:c5:24:32:e9:dc:54:77:
8b:cf:a6:e9:bf:2e:df:6e:bc:25:26:d7:81:d9:a9:
79:cd:a7:62:a4:57:8a:b9:07:e1:04:3f:52:69:5e:
a0:0b:ba:5b:07:35:60:5c:37:6d:c1:6a:fd:5b:93:
77:fa:9a:89:5c:2f:b9:b2:5b:ea:12:84:6b:49:dd:
5b:2c:97:43:a2:72:11:dd:7b:5a:a2:69:4e:14:c2:
04:71:95:82:4a:18:46:51:69:4f:36:44:4b:31:ff:
af:34:43:2a:ab:7d:fd:95:c0:c6:63:b5:96:3d:bd:
89:86:7a:33:18:97:f7:e4:b6:6a:01:38:ac:e8:db:
c6:86:0f:fb:58:71:8e:6c:da:72:a8:14:ed:5b:1e:
22:ca:d9:02:2b:b2:f1:9a:43:4b:dc:3f:f6:78:31:
1f:7d:e9:54:f9:f9:95:97:fe:30:7c:60:0b:0d:bc:
62:ca:a6:63:12:57:8c:ec:4c:7d:51:6d:41:ab:14:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:68:05:46:30:CB:34:8D:8A:4B:08:A9:EA:41:37:AC:67:ED:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoBoBUYwyzSNiksIqepBN6xn7T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:6e:17:ee:a2:4d:ad:d9:81:e5:23:02:0e:66:74:ab:2e:f8:
d1:e7:b3:ee:8d:f4:0d:6a:74:34:73:ca:d7:2a:c2:55:ab:19:
73:bf:ad:e2:8d:ab:f1:80:87:d8:23:92:27:57:31:f3:b0:0d:
72:40:40:31:d2:12:c1:bb:83:d6:20:54:b9:2c:d0:83:dc:85:
20:8e:08:71:6e:5f:59:99:13:04:d9:64:23:5e:00:a0:3f:78:
4d:1d:2d:89:bc:7a:db:eb:aa:1d:77:80:24:3e:0e:9d:93:b2:
fb:2e:10:e4:4d:c0:92:89:ed:e4:35:4a:dd:7f:cf:f8:85:01:
b5:29:3c:92:ab:58:c5:80:a2:00:4a:e1:40:65:ed:f6:7a:e8:
f7:7b:0a:d9:d2:0d:4d:6b:6b:67:3b:11:dc:8b:22:11:51:64:
c5:fe:e6:7f:db:27:21:9d:7e:90:47:b1:f5:43:b4:c7:39:76:
73:ac:1e:fa:c5:f8:c7:d9:5e:94:93:1c:8c:0d:e0:15:29:7f:
7b:50:39:f8:2a:32:54:30:f6:4c:45:a4:7a:ec:92:c0:9a:d4:
f2:f8:0a:13:22:32:ca:9d:43:13:7a:69:25:7a:ae:27:94:10:
75:51:9e:a9:45:ee:c8:db:a2:40:58:97:cc:2d:41:0b:25:6b:
e5:0b:50:6b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuWnkLKOAnMKITQ2tnwyCDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAzMTkxNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTgwNjgwNTQ2MzBjYjM0OGQ4YTRiMDhhOWVhNDEzN2FjNjdlZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9T3mwjSSers9GP3HDIcmYzj5axj
mLq/d8gKYGQ25uVc0t3H8DdnlTBDOv4D/sfY6VxmQJSc+PtGKxGKj5fIo59WdsUk
MuncVHeLz6bpvy7fbrwlJteB2al5zadipFeKuQfhBD9SaV6gC7pbBzVgXDdtwWr9
W5N3+pqJXC+5slvqEoRrSd1bLJdDonIR3XtaomlOFMIEcZWCShhGUWlPNkRLMf+v
NEMqq339lcDGY7WWPb2JhnozGJf35LZqATis6NvGhg/7WHGObNpyqBTtWx4iytkC
K7LxmkNL3D/2eDEffelU+fmVl/4wfGALDbxiyqZjEleM7Ex9UW1BqxSADQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAqAaAVGMMs0jYpLCKnqQTesZ+0+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ29Cb0JVWXd5elNOaWtzSXFlcEJONnhuN1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG5uF+6iTa3ZgeUjAg5m
dKsu+NHns+6N9A1qdDRzytcqwlWrGXO/reKNq/GAh9gjkidXMfOwDXJAQDHSEsG7
g9YgVLks0IPchSCOCHFuX1mZEwTZZCNeAKA/eE0dLYm8etvrqh13gCQ+Dp2Tsvsu
EORNwJKJ7eQ1St1/z/iFAbUpPJKrWMWAogBK4UBl7fZ66Pd7CtnSDU1ra2c7EdyL
IhFRZMX+5n/bJyGdfpBHsfVDtMc5dnOsHvrF+MfZXpSTHIwN4BUpf3tQOfgqMlQw
9kxFpHrsksCa1PL4ChMiMsqdQxN6aSV6rieUEHVRnqlF7sjbokBYl8wtQQsla+UL
UGs=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:06 2025 by rpki-client