Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4LwMeC1aVx5FlBU1dD0TXfzv6Y.roa
File: D4LwMeC1aVx5FlBU1dD0TXfzv6Y.roa (raw, json)
Hash identifier: M305fcVRilxWToWYfDZ2/di2ruH0VEBeFV89LX1Cb0I=
Subject key identifier: 0F:82:F0:31:E0:B5:69:5C:79:16:50:54:D5:D0:F4:4D:77:F3:BF:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFF552139CF2D7873F05E97DF056C4985
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4LwMeC1aVx5FlBU1dD0TXfzv6Y.roa
Signing time: Thu 05 Oct 2023 10:14:43 +0000
ROA not before: Thu 05 Oct 2023 10:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:55:21:39:cf:2d:78:73:f0:5e:97:df:05:6c:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 10:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f82f031e0b5695c79165054d5d0f44d77f3bfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:d7:5a:d0:ac:d4:0e:c7:4b:4b:6c:cd:3c:
51:67:c7:4e:11:90:50:ec:f6:47:ee:94:11:12:2d:
f0:29:09:c0:b0:01:6b:71:d5:e2:38:fa:66:93:6f:
e9:f7:c1:6c:87:26:f9:42:9b:12:3f:15:5c:47:62:
4c:00:42:91:e4:ec:83:09:d0:ce:e6:c7:51:b3:6d:
5b:0a:f7:e9:a3:7a:dc:15:c8:b9:cf:94:1e:30:2e:
d9:ab:b0:5c:7a:0d:a6:d2:51:43:30:ff:e9:7a:ba:
57:c6:f8:10:15:65:4c:6d:8f:7a:5b:52:84:82:5c:
fc:77:38:1e:db:4f:73:8e:84:79:b9:9f:3e:e4:74:
f4:c3:6d:77:4c:60:eb:d7:3c:43:26:50:3c:00:9a:
82:04:d8:96:f4:91:50:85:d1:51:37:e2:8b:88:94:
58:8a:ae:e6:12:d2:40:50:7a:37:fb:34:a3:e7:9c:
a6:6b:32:ed:f9:56:81:9d:51:19:14:93:13:8a:a8:
cb:bc:4c:f9:3d:a6:7c:7f:c1:57:84:9a:23:4e:0e:
d6:82:5b:62:77:88:7e:02:31:8f:77:ca:36:50:a7:
08:ce:d2:57:bd:9f:71:92:70:82:f6:ed:f0:8b:01:
06:e0:b3:1c:24:2c:32:3a:d6:a5:43:f3:4e:77:d0:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:F0:31:E0:B5:69:5C:79:16:50:54:D5:D0:F4:4D:77:F3:BF:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4LwMeC1aVx5FlBU1dD0TXfzv6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e0:b0:4b:6d:a1:7b:95:67:42:51:2d:62:46:43:aa:38:bb:
f3:08:d8:46:80:7d:2b:5d:92:78:ca:69:f6:ed:06:0e:91:41:
40:83:ad:35:ac:17:73:83:bf:fa:7a:9b:82:3b:66:32:3e:ae:
c0:4f:45:34:c3:bc:d1:dc:f7:5a:b4:d2:67:23:a6:a3:13:fc:
c2:74:c5:16:87:32:c0:52:f0:46:3f:1b:25:56:d5:da:a7:16:
9f:35:0f:b0:2c:60:1f:e1:67:50:ce:e6:1b:39:48:27:a7:3e:
28:4d:79:c4:0b:54:f3:e9:7f:8f:30:07:f3:e8:1a:22:1b:e0:
ac:9b:14:73:31:83:b7:2f:ba:9e:87:c7:a7:c9:49:5e:a2:ea:
fc:26:03:e2:f1:58:4c:65:24:18:c8:04:fc:9d:73:e6:0c:d3:
75:d3:be:5b:45:d4:9e:05:31:82:88:f5:7c:ab:b4:a3:d9:1b:
8d:25:fb:00:7c:c8:dc:2b:d3:3d:54:33:f6:2e:08:53:4e:ac:
75:5e:bc:fa:00:66:f5:4b:62:4a:1e:75:c0:52:f2:60:43:b5:
f3:9b:e8:59:c3:c4:91:ac:d7:2c:60:b3:86:59:b3:22:91:03:
96:ae:3f:da:af:c8:07:23:85:7e:6b:09:e3:46:e5:d1:03:af:
55:21:d0:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr/VSE5zy14c/Bel98FbEmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MTAxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjgyZjAzMWUwYjU2OTVjNzkxNjUwNTRkNWQwZjQ0ZDc3ZjNiZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7XWtCs1A7HS0tszTxRZ8dOEZBQ
7PZH7pQREi3wKQnAsAFrcdXiOPpmk2/p98Fshyb5QpsSPxVcR2JMAEKR5OyDCdDO
5sdRs21bCvfpo3rcFci5z5QeMC7Zq7Bceg2m0lFDMP/perpXxvgQFWVMbY96W1KE
glz8dzge209zjoR5uZ8+5HT0w213TGDr1zxDJlA8AJqCBNiW9JFQhdFRN+KLiJRY
iq7mEtJAUHo3+zSj55ymazLt+VaBnVEZFJMTiqjLvEz5PaZ8f8FXhJojTg7Wglti
d4h+AjGPd8o2UKcIztJXvZ9xknCC9u3wiwEG4LMcJCwyOtalQ/NOd9BtTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA+C8DHgtWlceRZQVNXQ9E1387+mMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRDRMd01lQzFhVng1RmxCVTFkRDBUWGZ6djZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI7gsEttoXuVZ0JRLWJG
Q6o4u/MI2EaAfStdknjKafbtBg6RQUCDrTWsF3ODv/p6m4I7ZjI+rsBPRTTDvNHc
91q00mcjpqMT/MJ0xRaHMsBS8EY/GyVW1dqnFp81D7AsYB/hZ1DO5hs5SCenPihN
ecQLVPPpf48wB/PoGiIb4KybFHMxg7cvup6Hx6fJSV6i6vwmA+LxWExlJBjIBPyd
c+YM03XTvltF1J4FMYKI9XyrtKPZG40l+wB8yNwr0z1UM/YuCFNOrHVevPoAZvVL
YkoedcBS8mBDtfOb6FnDxJGs1yxgs4ZZsyKRA5auP9qvyAcjhX5rCeNG5dEDr1Uh
0CU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:51:29 2025 by rpki-client