Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DkaH0QeFvXy2hBqUJxqkTVGVr-o.roa
File: DkaH0QeFvXy2hBqUJxqkTVGVr-o.roa (raw, json)
Hash identifier: hqS/BSCtUGt3063U5k8te8w6ELl739/dYPhbJVRrrZ8=
Subject key identifier: 0E:46:87:D1:07:85:BD:7C:B6:84:1A:94:27:1A:A4:4D:51:95:AF:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB13401F4995163C2A4B2B234BEB8EA12
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DkaH0QeFvXy2hBqUJxqkTVGVr-o.roa
Signing time: Wed 08 Nov 2023 23:10:57 +0000
ROA not before: Wed 08 Nov 2023 23:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:34:01:f4:99:51:63:c2:a4:b2:b2:34:be:b8:ea:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 23:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4687d10785bd7cb6841a94271aa44d5195afea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:96:d8:a9:fe:91:70:24:1d:1a:04:90:e8:
b8:e7:36:ea:25:55:d0:4e:a3:cb:88:39:67:44:ec:
c6:bd:a5:4e:1c:14:8d:42:a8:e6:03:b8:5e:e4:3e:
5b:5d:86:ac:ab:61:6d:ac:a8:44:25:41:82:07:33:
b7:79:66:60:70:ec:f2:5f:2a:28:2d:ae:d4:89:fa:
f1:13:d6:c4:e2:1b:1c:73:4f:97:64:5b:c9:30:15:
bb:5e:4b:c2:4c:67:9f:9b:f6:47:07:e4:1f:96:80:
74:5b:29:ba:0a:88:a6:9e:87:a9:84:89:39:4b:14:
8d:04:44:5b:14:c8:52:c7:e0:4e:63:2a:4f:4b:e5:
2f:77:a0:b7:0d:3d:4e:e6:01:5d:9d:cf:30:f7:3e:
a4:84:e6:9b:84:2e:d2:87:87:00:5f:01:03:51:76:
52:51:08:df:85:21:89:bf:63:34:a6:53:82:97:22:
af:14:28:33:d1:a9:22:2d:6f:4a:99:01:8d:9d:4f:
d8:6b:35:93:5d:57:03:29:54:da:a4:87:06:a7:b7:
ea:f2:98:6b:16:12:ae:47:ab:ed:08:18:3b:7f:a0:
d2:2e:af:d0:c7:42:19:96:92:8c:b7:12:46:a9:c9:
8b:01:fb:99:d1:b9:5f:1d:0b:86:5d:ab:f1:3a:39:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:87:D1:07:85:BD:7C:B6:84:1A:94:27:1A:A4:4D:51:95:AF:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DkaH0QeFvXy2hBqUJxqkTVGVr-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:9d:fa:51:fb:03:49:b8:59:63:b1:d5:57:6a:53:96:4b:20:
43:63:02:15:a6:2d:85:ce:81:e2:34:ea:f2:6b:9a:7e:53:2b:
3c:c4:63:c7:1f:f6:75:82:b7:de:82:33:55:73:1a:ac:02:94:
08:ef:60:63:51:5b:f8:7b:e3:36:6b:d9:b4:61:1b:2b:64:39:
b9:ab:48:05:ae:c1:79:d6:28:e8:d1:87:99:9e:1f:08:d8:ad:
0f:5c:74:a8:bc:66:4f:de:50:55:e4:4e:9f:8a:00:20:f3:20:
dd:62:17:9c:5d:0a:8f:49:45:15:f5:cf:71:e7:ee:66:7c:5d:
ed:c7:54:ac:ad:c2:89:5b:a8:da:d7:a9:fc:f2:1f:2c:4d:d3:
6c:04:91:7f:ff:a3:22:e5:4f:62:00:f0:ed:6e:40:95:81:db:
24:a0:3c:7f:ac:06:24:89:14:cb:34:2e:65:a3:54:d8:e6:4b:
ba:c1:41:c6:90:30:10:00:9e:69:6c:3c:b3:45:b9:b3:fc:58:
70:81:3a:aa:34:9f:2b:14:6f:b3:ff:11:0d:74:ac:15:7c:49:
6a:93:b1:76:0c:6e:4d:f8:79:cf:e6:c8:5c:0c:50:9c:a5:37:
0d:2c:20:17:45:fc:2e:8c:50:4e:a4:f4:4b:cd:11:c2:36:49:
47:55:5d:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuxNAH0mVFjwqSysjS+uOoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MjMxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQ2ODdkMTA3ODViZDdjYjY4NDFhOTQyNzFhYTQ0ZDUxOTVhZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbiW2Kn+kXAkHRoEkOi45zbqJVXQ
TqPLiDlnROzGvaVOHBSNQqjmA7he5D5bXYasq2FtrKhEJUGCBzO3eWZgcOzyXyoo
La7UifrxE9bE4hscc0+XZFvJMBW7XkvCTGefm/ZHB+QfloB0Wym6CoimnoephIk5
SxSNBERbFMhSx+BOYypPS+Uvd6C3DT1O5gFdnc8w9z6khOabhC7Sh4cAXwEDUXZS
UQjfhSGJv2M0plOClyKvFCgz0akiLW9KmQGNnU/YazWTXVcDKVTapIcGp7fq8phr
FhKuR6vtCBg7f6DSLq/Qx0IZlpKMtxJGqcmLAfuZ0blfHQuGXavxOjnfZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA5Gh9EHhb18toQalCcapE1Rla/qMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRGthSDBRZUZ2WHkyaEJxVUp4cWtUVkdWci1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEid+lH7A0m4WWOx1Vdq
U5ZLIENjAhWmLYXOgeI06vJrmn5TKzzEY8cf9nWCt96CM1VzGqwClAjvYGNRW/h7
4zZr2bRhGytkObmrSAWuwXnWKOjRh5meHwjYrQ9cdKi8Zk/eUFXkTp+KACDzIN1i
F5xdCo9JRRX1z3Hn7mZ8Xe3HVKytwolbqNrXqfzyHyxN02wEkX//oyLlT2IA8O1u
QJWB2ySgPH+sBiSJFMs0LmWjVNjmS7rBQcaQMBAAnmlsPLNFubP8WHCBOqo0nysU
b7P/EQ10rBV8SWqTsXYMbk34ec/myFwMUJylNw0sIBdF/C6MUE6k9EvNEcI2SUdV
XfU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:51 2025 by rpki-client