Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DEetaQvKOP1beD5UfQZzNsTD1gY.roa
File: DEetaQvKOP1beD5UfQZzNsTD1gY.roa (raw, json)
Hash identifier: WEhfivQb71qG9PXksjrDl53r+9IEhp0p9zAUxVeX1v0=
Subject key identifier: 0C:47:AD:69:0B:CA:38:FD:5B:78:3E:54:7D:06:73:36:C4:C3:D6:06
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA07D1D5A87AFB4F5F8A1228FAA27BE24
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DEetaQvKOP1beD5UfQZzNsTD1gY.roa
Signing time: Sun 05 Nov 2023 17:17:15 +0000
ROA not before: Sun 05 Nov 2023 17:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:7d:1d:5a:87:af:b4:f5:f8:a1:22:8f:aa:27:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 17:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c47ad690bca38fd5b783e547d067336c4c3d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:0f:55:95:93:77:b6:4a:f8:76:c8:d3:12:
67:01:46:01:e9:c5:ba:21:7e:09:24:08:ab:61:59:
e0:a5:8f:ef:c2:5a:bc:ba:29:7e:86:87:9b:3a:9f:
36:b3:f9:66:77:f7:57:c4:6a:c7:7a:be:c4:ba:ac:
76:33:e6:3b:77:0c:86:91:58:ee:c0:be:64:c5:1c:
40:26:fd:90:46:5d:16:e6:82:0b:9c:b7:54:4b:1b:
26:36:6a:b9:1b:d1:94:20:dd:ef:c2:ac:9b:90:7c:
4b:18:53:54:8d:32:02:bd:f6:97:0f:d9:1b:87:60:
ff:50:db:50:62:61:55:3e:b5:45:19:32:85:fa:62:
60:74:ca:67:96:17:64:c9:37:83:f3:d7:a0:01:9d:
25:ac:43:f0:27:c0:99:6f:f3:73:bd:d7:20:b6:72:
45:ce:b1:ca:7b:00:c8:e4:3d:93:77:c0:71:d0:1c:
35:b2:77:f2:46:7d:c8:1f:ff:19:95:33:33:0e:c6:
6b:45:53:b8:ff:1e:2e:45:4c:59:53:70:9c:09:6c:
55:3f:9c:ba:4c:8b:01:fd:82:63:96:f2:70:3c:8d:
2b:ba:c0:ed:f4:1f:50:74:40:56:b9:e7:6b:3c:f4:
ec:6c:b9:c5:cb:91:f5:be:25:7f:e7:3a:eb:aa:ac:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:AD:69:0B:CA:38:FD:5B:78:3E:54:7D:06:73:36:C4:C3:D6:06
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DEetaQvKOP1beD5UfQZzNsTD1gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:7a:2b:53:63:01:ea:de:6f:32:41:fa:83:e2:49:c7:98:ec:
e0:28:31:e8:cd:8e:b1:50:e0:5c:34:c1:9a:79:00:c7:1a:06:
3d:e2:b2:b1:dc:f8:7a:d3:05:03:e9:97:9f:55:e8:3e:6a:6a:
38:d2:d5:2c:58:ae:74:aa:10:b2:9f:ed:99:6b:b8:1f:8d:bd:
a4:7e:7c:a6:f1:31:19:17:7c:ca:fa:2e:08:a9:f7:de:01:ce:
22:27:ed:eb:f2:ae:bb:5f:ce:11:5c:73:c8:c0:b8:18:4a:c3:
d3:19:af:74:f5:01:c1:b1:e1:6f:a5:3e:8d:4d:e8:c6:5d:1f:
8f:23:9f:c9:c4:43:0a:b8:2e:ae:1a:c3:c2:a9:21:33:6a:d6:
c6:3b:f6:22:40:ca:6e:c6:66:04:ba:45:00:0a:cd:ad:30:b0:
e5:51:b8:bd:33:15:b2:96:22:4e:0c:eb:bf:de:3d:0a:5f:d8:
4c:c4:4d:8b:70:c2:fb:32:95:e1:51:e0:ce:e5:af:25:12:09:
12:45:99:39:09:42:23:12:c9:a1:6b:93:2c:a3:88:d5:c0:01:
c2:1c:23:78:a0:7a:47:a5:4f:14:7a:b4:5d:df:11:7f:c8:8d:
f3:dc:22:90:99:86:a0:4a:af:48:4e:06:39:bc:39:17:5f:e2:
77:22:a6:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYugfR1ah6+09fihIo+qJ74kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA1MTcxNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzQ3YWQ2OTBiY2EzOGZkNWI3ODNlNTQ3ZDA2NzMzNmM0YzNkNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvsPVZWTd7ZK+HbI0xJnAUYB6cW6
IX4JJAirYVngpY/vwlq8uil+hoebOp82s/lmd/dXxGrHer7Euqx2M+Y7dwyGkVju
wL5kxRxAJv2QRl0W5oILnLdUSxsmNmq5G9GUIN3vwqybkHxLGFNUjTICvfaXD9kb
h2D/UNtQYmFVPrVFGTKF+mJgdMpnlhdkyTeD89egAZ0lrEPwJ8CZb/NzvdcgtnJF
zrHKewDI5D2Td8Bx0Bw1snfyRn3IH/8ZlTMzDsZrRVO4/x4uRUxZU3CcCWxVP5y6
TIsB/YJjlvJwPI0rusDt9B9QdEBWuedrPPTsbLnFy5H1viV/5zrrqqxb1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAxHrWkLyjj9W3g+VH0GczbEw9YGMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvREVldGFRdktPUDFiZUQ1VWZRWnpOc1REMWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACB6K1NjAerebzJB+oPi
SceY7OAoMejNjrFQ4Fw0wZp5AMcaBj3isrHc+HrTBQPpl59V6D5qajjS1SxYrnSq
ELKf7ZlruB+NvaR+fKbxMRkXfMr6Lgip994BziIn7evyrrtfzhFcc8jAuBhKw9MZ
r3T1AcGx4W+lPo1N6MZdH48jn8nEQwq4Lq4aw8KpITNq1sY79iJAym7GZgS6RQAK
za0wsOVRuL0zFbKWIk4M67/ePQpf2EzETYtwwvsyleFR4M7lryUSCRJFmTkJQiMS
yaFrkyyjiNXAAcIcI3igekelTxR6tF3fEX/IjfPcIpCZhqBKr0hOBjm8ORdf4nci
ppk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:37:59 2025 by rpki-client