Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E9ZWbXqe753zXgKu1uawr3Lij4M.roa
File: E9ZWbXqe753zXgKu1uawr3Lij4M.roa (raw, json)
Hash identifier: ppKFRGMTayzlAoBgdB24AspczkuqRba1AFJM4BxeEdI=
Subject key identifier: 13:D6:56:6D:7A:9E:EF:9D:F3:5E:02:AE:D6:E6:B0:AF:72:E2:8F:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC5D4246D57B1A0C27E2346B747607D3C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E9ZWbXqe753zXgKu1uawr3Lij4M.roa
Signing time: Sun 24 Sep 2023 06:15:28 +0000
ROA not before: Sun 24 Sep 2023 06:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c5:d4:24:6d:57:b1:a0:c2:7e:23:46:b7:47:60:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 06:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d6566d7a9eef9df35e02aed6e6b0af72e28f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:1b:93:8f:64:ce:5e:b0:60:e3:dc:5a:90:
d2:3b:94:21:63:9f:f7:0b:e2:02:29:02:5c:62:d1:
da:91:69:31:36:eb:fe:27:71:23:65:54:42:b0:02:
b1:33:bc:8a:86:43:be:09:1f:e9:d8:65:73:f0:9d:
23:b4:fe:f4:76:98:30:e5:e7:99:9e:7a:d0:6b:80:
7f:63:78:aa:f2:b1:03:52:09:91:12:36:92:f0:f8:
3d:4c:c5:62:7e:4a:ae:a9:f1:7f:88:83:06:1b:b0:
af:bc:50:68:96:fb:8d:48:15:ed:9d:3e:15:11:44:
25:b6:10:e8:a2:9e:8a:97:c7:67:b0:4e:59:89:ad:
cf:e7:35:3b:3a:3a:42:50:3e:e1:ff:a2:cb:6d:2a:
d9:6c:7a:86:68:16:c2:72:83:9d:91:85:fa:c9:a1:
7f:c2:d4:42:a7:78:a3:32:23:9e:d9:41:26:98:f8:
7a:9c:7f:3d:18:36:e8:01:ad:e1:77:63:1a:41:66:
01:b0:f4:70:bc:d7:50:9b:a6:5b:90:fc:39:20:0f:
5a:f6:d9:05:3b:26:13:05:0a:88:70:30:7d:ea:fa:
24:a6:a7:a3:60:6c:c7:a8:34:9d:d1:12:69:d9:56:
eb:d7:64:d6:aa:38:d3:54:f8:37:d6:df:33:5a:3d:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:56:6D:7A:9E:EF:9D:F3:5E:02:AE:D6:E6:B0:AF:72:E2:8F:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E9ZWbXqe753zXgKu1uawr3Lij4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:77:aa:d9:4f:83:81:3b:4c:4d:e9:f6:67:91:d7:81:6b:a3:
18:84:12:0c:df:77:02:0e:fb:0d:72:e2:e3:34:28:8c:32:4f:
93:e7:1b:18:3c:8b:10:f0:eb:c9:01:b0:19:29:4f:93:3a:54:
b9:cc:b2:79:2e:d4:eb:07:1e:1d:0f:f6:91:46:1f:ae:30:c4:
6d:01:5b:b6:85:a1:29:d6:0f:13:60:fb:6c:02:5e:c9:4a:42:
95:79:63:6c:7f:7d:5d:2c:1d:dd:01:ce:bb:d2:4b:37:ac:c5:
18:2a:2e:cc:39:81:93:32:bd:61:d5:1c:f5:1c:f0:5a:15:1c:
37:be:61:9a:1d:8a:fe:74:7e:a9:4e:45:54:fc:54:67:58:da:
a0:70:34:22:44:21:42:d8:05:b4:4c:94:45:ce:b3:0c:4a:f5:
ab:5e:69:9a:9e:60:88:b7:75:95:ac:90:11:3e:45:59:e7:3f:
74:3c:2a:4a:cf:1d:1e:63:f2:2f:c7:78:c9:eb:5f:66:b2:cf:
9a:d1:bd:8b:4f:7a:a2:69:95:b9:41:6b:81:b3:c2:af:0a:5c:
ce:ff:68:64:40:b7:7b:c5:1a:23:a5:31:e9:e4:46:0b:f6:02:
dc:a9:15:1e:34:00:96:b9:84:93:f9:6b:c1:2e:ec:e9:ac:63:
3f:2f:79:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrF1CRtV7Ggwn4jRrdHYH08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI0MDYxNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2Q2NTY2ZDdhOWVlZjlkZjM1ZTAyYWVkNmU2YjBhZjcyZTI4ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwMbk49kzl6wYOPcWpDSO5QhY5/3
C+ICKQJcYtHakWkxNuv+J3EjZVRCsAKxM7yKhkO+CR/p2GVz8J0jtP70dpgw5eeZ
nnrQa4B/Y3iq8rEDUgmREjaS8Pg9TMVifkquqfF/iIMGG7CvvFBolvuNSBXtnT4V
EUQlthDoop6Kl8dnsE5Zia3P5zU7OjpCUD7h/6LLbSrZbHqGaBbCcoOdkYX6yaF/
wtRCp3ijMiOe2UEmmPh6nH89GDboAa3hd2MaQWYBsPRwvNdQm6ZbkPw5IA9a9tkF
OyYTBQqIcDB96vokpqejYGzHqDSd0RJp2Vbr12TWqjjTVPg31t8zWj3svwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBPWVm16nu+d814CrtbmsK9y4o+DMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRTlaV2JYcWU3NTN6WGdLdTF1YXdyM0xpajRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALV3qtlPg4E7TE3p9meR
14FroxiEEgzfdwIO+w1y4uM0KIwyT5PnGxg8ixDw68kBsBkpT5M6VLnMsnku1OsH
Hh0P9pFGH64wxG0BW7aFoSnWDxNg+2wCXslKQpV5Y2x/fV0sHd0BzrvSSzesxRgq
Lsw5gZMyvWHVHPUc8FoVHDe+YZodiv50fqlORVT8VGdY2qBwNCJEIULYBbRMlEXO
swxK9ateaZqeYIi3dZWskBE+RVnnP3Q8KkrPHR5j8i/HeMnrX2ayz5rRvYtPeqJp
lblBa4Gzwq8KXM7/aGRAt3vFGiOlMenkRgv2AtypFR40AJa5hJP5a8Eu7OmsYz8v
eUU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:24:09 2025 by rpki-client