Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOxzKezlfdsl6GY5RsgJWp3L7m4.roa
File: EOxzKezlfdsl6GY5RsgJWp3L7m4.roa (raw, json)
Hash identifier: uUrNdpAAll0BQeQYlDYsuwBXJxSAObN04sh5G1Hgi0w=
Subject key identifier: 10:EC:73:29:EC:E5:7D:DB:25:E8:66:39:46:C8:09:5A:9D:CB:EE:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C56A4F642E49B09B1E0C903659D680D5A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOxzKezlfdsl6GY5RsgJWp3L7m4.roa
Signing time: Mon 11 Dec 2023 02:11:40 +0000
ROA not before: Mon 11 Dec 2023 02:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:56:a4:f6:42:e4:9b:09:b1:e0:c9:03:65:9d:68:0d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 02:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ec7329ece57ddb25e8663946c8095a9dcbee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:28:75:a2:57:61:4e:26:15:8c:d3:5d:7c:
13:fa:e4:f8:4a:88:2b:85:4c:3e:74:34:52:19:de:
b5:b5:d8:ce:9b:64:41:1c:02:9e:99:83:49:1d:3d:
b0:18:2d:5d:10:ef:49:82:34:db:9c:82:0c:53:8e:
90:f4:15:32:5d:0c:bd:60:de:39:91:5d:1b:0d:d0:
94:a2:39:7b:8c:9a:0f:8d:3b:41:57:63:99:e7:a6:
f0:02:a2:e5:0a:d4:8f:a8:bb:96:52:9f:f0:19:4d:
23:52:1b:ee:83:d8:f1:48:dc:dd:b0:e5:85:1a:c0:
32:41:dc:05:17:70:88:e4:bb:31:a6:c9:25:aa:3a:
58:f5:12:86:f7:13:9c:cb:8c:9f:4e:6b:49:52:95:
d5:0b:05:dc:89:69:c8:0d:ce:7a:5b:20:25:9a:d4:
82:d8:83:7e:64:6e:ea:a7:fc:ab:00:d9:08:a0:e8:
8c:45:57:fc:2e:bc:1d:a3:62:08:e6:85:b7:e9:02:
1a:95:03:c5:f2:54:5c:26:a3:de:6a:9d:86:ce:34:
75:5a:cd:b0:b5:1a:03:c9:c8:5c:f8:49:cf:74:ee:
f4:48:e9:70:b5:ed:a7:5c:6c:1c:35:24:cd:f1:f1:
9f:3a:b5:cd:91:1b:75:9e:7e:ce:0a:c9:6d:0b:38:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:73:29:EC:E5:7D:DB:25:E8:66:39:46:C8:09:5A:9D:CB:EE:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOxzKezlfdsl6GY5RsgJWp3L7m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d5:6d:67:c5:65:ba:f4:4b:94:1b:bd:61:de:02:a1:e7:18:
9c:4f:8b:a1:fa:12:0c:d0:6d:df:a9:bb:65:a9:64:29:2b:e0:
98:9e:63:f5:01:8a:35:46:9d:75:7e:17:1e:39:6e:9d:9c:47:
46:56:de:23:78:98:ad:12:43:80:f4:61:94:e2:68:3b:64:14:
4e:0a:92:e4:75:7e:07:43:8d:78:08:84:03:42:c6:a7:c1:71:
72:b1:b7:8f:02:ee:1c:5a:a4:fd:6b:72:d5:56:fb:1f:6b:88:
05:b9:3f:16:24:4d:73:b0:47:85:d3:5e:3f:80:bb:7c:53:82:
90:b6:bf:08:d5:a4:f5:1a:e5:29:38:f9:a7:2d:a6:20:2f:df:
92:3e:3b:a2:63:0a:a6:66:6c:0e:6a:02:05:13:c8:27:20:33:
1e:c3:e3:91:28:e0:f2:9b:83:fd:d7:8d:f2:a7:3d:65:1d:78:
08:2b:f4:ae:d9:78:23:3d:72:8a:d7:f9:42:a4:a4:df:f0:a2:
ab:a7:9b:02:46:d1:22:d3:d5:d1:d4:4c:9c:02:38:3d:28:90:
67:c2:c3:5b:d2:48:81:88:d3:b2:76:98:50:8a:f3:63:e8:e8:
38:41:e7:dc:c7:50:c7:26:ca:4c:51:1c:89:f7:4c:b2:33:7e:
9e:c8:40:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxWpPZC5JsJseDJA2WdaA1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMDIxMTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGVjNzMyOWVjZTU3ZGRiMjVlODY2Mzk0NmM4MDk1YTlkY2JlZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfModaJXYU4mFYzTXXwT+uT4Sogr
hUw+dDRSGd61tdjOm2RBHAKemYNJHT2wGC1dEO9JgjTbnIIMU46Q9BUyXQy9YN45
kV0bDdCUojl7jJoPjTtBV2OZ56bwAqLlCtSPqLuWUp/wGU0jUhvug9jxSNzdsOWF
GsAyQdwFF3CI5LsxpsklqjpY9RKG9xOcy4yfTmtJUpXVCwXciWnIDc56WyAlmtSC
2IN+ZG7qp/yrANkIoOiMRVf8Lrwdo2II5oW36QIalQPF8lRcJqPeap2GzjR1Ws2w
tRoDychc+EnPdO70SOlwte2nXGwcNSTN8fGfOrXNkRt1nn7OCsltCzi+xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBDscyns5X3bJehmOUbICVqdy+5uMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRU94ektlemxmZHNsNkdZNVJzZ0pXcDNMN200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKPVbWfFZbr0S5QbvWHe
AqHnGJxPi6H6EgzQbd+pu2WpZCkr4JieY/UBijVGnXV+Fx45bp2cR0ZW3iN4mK0S
Q4D0YZTiaDtkFE4KkuR1fgdDjXgIhANCxqfBcXKxt48C7hxapP1rctVW+x9riAW5
PxYkTXOwR4XTXj+Au3xTgpC2vwjVpPUa5Sk4+actpiAv35I+O6JjCqZmbA5qAgUT
yCcgMx7D45Eo4PKbg/3XjfKnPWUdeAgr9K7ZeCM9corX+UKkpN/woqunmwJG0SLT
1dHUTJwCOD0okGfCw1vSSIGI07J2mFCK82Po6DhB59zHUMcmykxRHIn3TLIzfp7I
QIk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:08:13 2025 by rpki-client