Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYd4JpVSjJLtAU-FHgkYKtlz5qs.roa
File: EYd4JpVSjJLtAU-FHgkYKtlz5qs.roa (raw, json)
Hash identifier: 2cQhUbpXXn3iPw7gy3+11zikQM/wtunxCKeoY5lsHmI=
Subject key identifier: 11:87:78:26:95:52:8C:92:ED:01:4F:85:1E:09:18:2A:D9:73:E6:AB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCC067601525546003F1571423C94CB1A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYd4JpVSjJLtAU-FHgkYKtlz5qs.roa
Signing time: Tue 14 Nov 2023 04:10:57 +0000
ROA not before: Tue 14 Nov 2023 04:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:06:76:01:52:55:46:00:3f:15:71:42:3c:94:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 04:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1187782695528c92ed014f851e09182ad973e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:fd:7c:fd:2c:d3:94:cc:65:90:18:94:e4:
10:ab:06:89:ad:ef:52:d6:96:96:c8:b1:03:63:3f:
22:01:2c:f5:ba:da:77:24:39:42:45:d7:a7:e6:44:
76:5a:36:bd:73:64:3f:c5:55:1e:15:f7:55:79:6d:
fb:22:39:73:fe:96:63:f3:1a:03:9c:45:62:2e:34:
14:46:ec:81:5e:52:8d:9b:f1:a7:f6:fa:2e:4e:49:
c6:86:33:f6:b7:ba:23:33:27:19:ca:8b:db:66:d1:
ba:6a:7d:a4:b6:eb:63:ac:97:5e:92:2b:33:44:66:
5a:d2:45:67:6f:6d:93:b4:e2:cc:f9:1b:c9:aa:fc:
3e:59:18:a9:bd:31:f2:47:90:ca:bd:c8:85:ee:15:
bf:72:91:38:e2:03:34:b3:4a:bf:5a:6d:96:df:87:
88:16:53:72:c8:4d:9c:40:86:18:c6:37:85:0f:df:
e0:4c:18:09:09:7f:b3:45:a2:4e:01:1d:33:8b:d8:
be:6c:7a:46:0a:fa:8a:39:2a:05:71:3c:58:bc:d0:
64:b4:cc:c0:76:8b:3d:44:f1:86:0d:86:75:63:63:
d6:3c:24:03:e0:a2:1d:ad:85:1c:c1:e8:2c:6d:af:
a1:69:1c:0d:2a:52:33:ef:f5:f8:9d:be:de:1f:fd:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:78:26:95:52:8C:92:ED:01:4F:85:1E:09:18:2A:D9:73:E6:AB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYd4JpVSjJLtAU-FHgkYKtlz5qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:75:b9:45:9f:0d:2b:11:c4:e8:33:f7:50:73:0f:3c:08:9b:
55:a1:d5:49:c3:1e:4d:f1:02:f9:a4:9d:63:d9:e4:54:b8:25:
30:48:d4:2a:68:d9:9f:ff:36:6e:93:ea:7a:9e:03:88:46:f3:
c0:78:8d:57:09:76:fa:69:39:7b:fe:a9:11:c3:96:5b:9d:0d:
d8:a2:a6:83:c9:c6:4a:7d:69:8d:83:73:25:84:50:f8:a6:56:
2b:6d:47:45:1c:ed:07:96:2d:93:09:dc:75:32:b4:16:bb:ad:
cc:0e:4d:f8:94:e7:b2:68:86:96:e3:ff:37:24:11:70:cc:bb:
c4:26:70:50:33:3f:b8:2e:61:c9:8d:b1:71:2b:bc:b5:b2:e2:
1c:2b:58:c7:fa:28:6b:9e:1c:9b:8b:ec:d9:6e:2a:b0:a6:bf:
98:53:bf:ce:8d:48:e5:31:25:70:18:db:d1:47:32:0c:2a:64:
16:d0:9e:17:eb:0c:ba:4a:a1:77:e0:bd:28:64:19:e4:4c:33:
6a:05:33:e1:d2:00:c0:35:8e:0f:08:2d:f2:1e:0b:85:57:48:
77:97:17:14:b7:02:8f:9a:c2:f6:48:db:26:65:c4:a2:1b:54:
79:75:9b:a9:62:a8:1c:f8:78:17:4c:fb:5e:6b:4f:a9:08:57:
55:16:ba:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvMBnYBUlVGAD8VcUI8lMsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MDQxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTg3NzgyNjk1NTI4YzkyZWQwMTRmODUxZTA5MTgyYWQ5NzNlNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbr9fP0s05TMZZAYlOQQqwaJre9S
1paWyLEDYz8iASz1utp3JDlCRden5kR2Wja9c2Q/xVUeFfdVeW37Ijlz/pZj8xoD
nEViLjQURuyBXlKNm/Gn9vouTknGhjP2t7ojMycZyovbZtG6an2ktutjrJdekisz
RGZa0kVnb22TtOLM+RvJqvw+WRipvTHyR5DKvciF7hW/cpE44gM0s0q/Wm2W34eI
FlNyyE2cQIYYxjeFD9/gTBgJCX+zRaJOAR0zi9i+bHpGCvqKOSoFcTxYvNBktMzA
dos9RPGGDYZ1Y2PWPCQD4KIdrYUcwegsba+haRwNKlIz7/X4nb7eH/0ICQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBGHeCaVUoyS7QFPhR4JGCrZc+arMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRVlkNEpwVlNqSkx0QVUtRkhna1lLdGx6NXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ91uUWfDSsRxOgz91Bz
DzwIm1Wh1UnDHk3xAvmknWPZ5FS4JTBI1Cpo2Z//Nm6T6nqeA4hG88B4jVcJdvpp
OXv+qRHDlludDdiipoPJxkp9aY2DcyWEUPimVittR0Uc7QeWLZMJ3HUytBa7rcwO
TfiU57Johpbj/zckEXDMu8QmcFAzP7guYcmNsXErvLWy4hwrWMf6KGueHJuL7Nlu
KrCmv5hTv86NSOUxJXAY29FHMgwqZBbQnhfrDLpKoXfgvShkGeRMM2oFM+HSAMA1
jg8ILfIeC4VXSHeXFxS3Ao+awvZI2yZlxKIbVHl1m6liqBz4eBdM+15rT6kIV1UW
urY=
-----END CERTIFICATE-----
Generated at Wed Apr 23 10:01:49 2025 by rpki-client