Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGWGw8zG6gqVkxca9Wd8CYBN4HM.roa
File: DGWGw8zG6gqVkxca9Wd8CYBN4HM.roa (raw, json)
Hash identifier: bjrIpJxqPQKG95D+6aBY7Sxqz4VOP6E0uC/JUF4J4ZE=
Subject key identifier: 0C:65:86:C3:CC:C6:EA:0A:95:93:17:1A:F5:67:7C:09:80:4D:E0:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4A017CBE7E57201631A77C471730CE57
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGWGw8zG6gqVkxca9Wd8CYBN4HM.roa
Signing time: Fri 08 Dec 2023 15:17:40 +0000
ROA not before: Fri 08 Dec 2023 15:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:01:7c:be:7e:57:20:16:31:a7:7c:47:17:30:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 15:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c6586c3ccc6ea0a9593171af5677c09804de073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:68:65:47:77:f7:21:7b:4c:c3:a2:19:d5:
33:83:89:8b:5e:50:b0:72:6e:3c:7a:6b:88:5b:e2:
5d:0a:d8:3a:c7:de:0d:44:0c:b0:1f:30:20:a1:82:
c3:70:8a:06:ad:b3:ff:3e:fa:27:40:68:11:e9:fa:
79:e8:0c:9f:33:7a:4e:92:10:53:8f:08:c6:d4:3f:
d4:4a:4b:5e:72:86:c6:d7:b1:37:16:5a:1b:ea:8b:
d4:85:26:2d:47:46:a9:e5:f9:fb:e8:e7:a0:74:9f:
bd:25:5c:8a:de:58:f4:2d:74:b6:8c:ed:ce:b1:02:
e6:cc:56:e1:81:a0:c3:26:d6:00:1a:80:29:b2:8e:
be:cd:08:62:f1:57:b5:7c:cd:6c:ac:4f:b5:82:d4:
57:ea:17:4d:98:b6:7e:f1:5f:aa:b8:b4:a0:48:e7:
ea:be:38:11:dd:cd:6b:dd:c1:dd:82:e8:02:58:1c:
c5:53:04:1b:23:29:59:a5:22:a0:a0:b7:cc:d5:82:
af:7f:81:53:67:24:c1:6e:4b:81:ef:9e:6a:79:f3:
05:1b:26:92:8f:ef:9e:83:57:b0:3f:6f:96:df:3d:
80:4b:d2:e3:03:b9:0f:9c:d0:48:a4:bf:f4:4d:5d:
fd:8a:ad:0f:99:4b:80:61:68:ef:a2:3a:c1:99:45:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:86:C3:CC:C6:EA:0A:95:93:17:1A:F5:67:7C:09:80:4D:E0:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGWGw8zG6gqVkxca9Wd8CYBN4HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:47:3b:95:88:9f:59:14:c8:4a:b7:0e:f8:27:00:3d:f2:b8:
14:47:26:c8:65:67:66:5d:dd:09:99:16:9f:30:ae:cc:82:da:
b1:4f:dc:59:59:70:4e:ba:7b:8c:82:28:64:6e:ef:ee:74:89:
f8:b5:10:16:56:56:27:5e:bb:29:7b:52:0f:dc:8c:fb:68:3a:
ee:19:cf:86:8d:47:61:35:bc:bf:85:70:3a:f0:57:47:d3:4c:
79:01:98:1e:ee:cc:1c:57:7d:7e:61:9d:b1:3d:c9:fd:16:0a:
b4:4e:46:2e:65:28:8c:5f:1f:49:fe:39:8a:ec:7d:70:39:a4:
63:49:c0:56:c1:0d:e3:d6:93:e4:f0:ba:33:ef:5a:56:ea:80:
44:86:c5:c0:76:53:2a:6b:fb:5a:e6:4b:12:22:81:6f:94:96:
41:a6:69:70:ac:fa:db:b2:76:9c:66:3b:30:b0:46:92:1a:c2:
67:38:7d:91:8d:b8:97:4e:36:01:c5:e6:74:b9:5b:1f:ee:f1:
07:3b:68:1d:8e:f2:1a:c5:60:e8:8a:34:e4:44:1a:c3:6c:55:
3d:c9:e9:86:e2:1c:b8:55:8f:e7:8c:f2:9f:19:e6:f8:1b:15:
4d:e5:93:8b:0a:04:84:ec:34:cd:6a:8a:be:72:71:ee:f6:06:
24:71:a2:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxKAXy+flcgFjGnfEcXMM5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MTUxNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzY1ODZjM2NjYzZlYTBhOTU5MzE3MWFmNTY3N2MwOTgwNGRlMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsxoZUd39yF7TMOiGdUzg4mLXlCw
cm48emuIW+JdCtg6x94NRAywHzAgoYLDcIoGrbP/PvonQGgR6fp56AyfM3pOkhBT
jwjG1D/USktecobG17E3Flob6ovUhSYtR0ap5fn76OegdJ+9JVyK3lj0LXS2jO3O
sQLmzFbhgaDDJtYAGoApso6+zQhi8Ve1fM1srE+1gtRX6hdNmLZ+8V+quLSgSOfq
vjgR3c1r3cHdgugCWBzFUwQbIylZpSKgoLfM1YKvf4FTZyTBbkuB755qefMFGyaS
j++eg1ewP2+W3z2AS9LjA7kPnNBIpL/0TV39iq0PmUuAYWjvojrBmUXDQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAxlhsPMxuoKlZMXGvVnfAmATeBzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvREdXR3c4ekc2Z3FWa3hjYTlXZDhDWUJONEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAChHO5WIn1kUyEq3Dvgn
AD3yuBRHJshlZ2Zd3QmZFp8wrsyC2rFP3FlZcE66e4yCKGRu7+50ifi1EBZWVide
uyl7Ug/cjPtoOu4Zz4aNR2E1vL+FcDrwV0fTTHkBmB7uzBxXfX5hnbE9yf0WCrRO
Ri5lKIxfH0n+OYrsfXA5pGNJwFbBDePWk+TwujPvWlbqgESGxcB2Uypr+1rmSxIi
gW+UlkGmaXCs+tuydpxmOzCwRpIawmc4fZGNuJdONgHF5nS5Wx/u8Qc7aB2O8hrF
YOiKNOREGsNsVT3J6YbiHLhVj+eM8p8Z5vgbFU3lk4sKBITsNM1qir5yce72BiRx
olE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 17:08:14 2025 by rpki-client