Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H4gSQfVy92Shl3TTXQV_aEObTB0.roa
File: H4gSQfVy92Shl3TTXQV_aEObTB0.roa (raw, json)
Hash identifier: FLRDZvAwaz0HbdaLwZYWhEMWci+8y+2l4q3vOFUDpZc=
Subject key identifier: 1F:88:12:41:F5:72:F7:64:A1:97:74:D3:5D:05:7F:68:43:9B:4C:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B05C42B4739E69871BF90DF13C60842D3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H4gSQfVy92Shl3TTXQV_aEObTB0.roa
Signing time: Fri 06 Oct 2023 16:13:44 +0000
ROA not before: Fri 06 Oct 2023 16:13:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:c4:2b:47:39:e6:98:71:bf:90:df:13:c6:08:42:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 16:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f881241f572f764a19774d35d057f68439b4c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:8e:a9:06:35:85:23:30:60:07:27:2d:a7:
29:a5:c1:52:f8:a5:35:bb:15:96:27:4f:42:52:c2:
c8:d4:a0:fb:3e:8c:07:0b:1b:d8:bf:df:a2:4a:8c:
22:59:1f:bd:ee:2f:39:b7:a5:68:d7:3d:ea:79:c1:
e6:ad:31:c2:58:86:4d:e9:73:a1:07:5b:73:60:28:
5e:7a:6e:c2:89:c5:07:ad:1b:df:82:0a:e1:4a:ec:
db:5a:fb:c0:5a:ab:34:c3:60:78:b0:0a:36:ed:65:
22:ec:32:9e:c1:ec:dc:0b:aa:49:62:a3:8b:df:21:
6a:8e:28:a5:2f:75:d2:b9:0f:79:52:9f:6f:e3:bf:
b5:ba:df:b8:dc:26:08:9d:cc:c7:79:da:fb:54:24:
3e:f1:0a:e1:ec:3c:47:08:1f:2a:03:f1:53:7f:95:
4a:2c:fd:6c:ad:bf:54:85:89:6a:41:0e:a1:56:6a:
fa:46:1c:ac:28:52:53:34:95:47:8c:20:4f:f6:27:
bc:65:5f:22:08:a6:9c:58:de:29:04:36:a8:c9:cd:
3d:28:37:4a:a2:76:95:d4:07:30:73:c6:ce:a3:a2:
00:35:80:5d:94:58:4c:8f:4e:c9:d2:41:2e:34:22:
25:62:14:47:84:a0:c3:de:79:1f:1f:39:9a:fe:a0:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:12:41:F5:72:F7:64:A1:97:74:D3:5D:05:7F:68:43:9B:4C:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H4gSQfVy92Shl3TTXQV_aEObTB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:ca:6f:44:bf:7b:8c:65:7f:85:31:f9:13:6c:c1:bd:0c:9c:
89:d9:4d:5f:63:45:76:b8:2c:41:72:cc:38:13:88:8d:96:40:
ce:0e:90:03:c6:fd:61:e4:71:b3:cf:ef:94:77:89:6c:98:38:
7a:2f:18:f8:ee:39:ee:9f:20:2f:b3:55:15:93:60:02:67:89:
af:83:b1:65:1a:f0:ad:1c:25:be:82:2e:55:a7:ee:2f:3e:05:
31:88:6b:c9:8d:36:1f:95:dd:60:52:1c:61:64:fd:49:9c:44:
13:09:97:6e:ba:98:1b:c6:60:9f:68:5b:b2:73:58:4c:76:e6:
82:fa:5b:af:6f:18:0c:b5:4f:f4:9c:9f:de:f5:ed:a4:55:fd:
85:68:c5:3a:78:02:f1:4b:c1:60:94:7a:f1:be:e9:0e:5b:c0:
61:b7:35:cf:9a:2d:e8:62:3a:4a:42:67:fb:19:57:c8:86:47:
50:5e:d8:6d:37:29:42:f3:18:1e:da:fd:9d:45:b2:20:8a:8f:
6b:fa:9c:ba:e7:59:18:7a:0a:e5:9e:1e:b4:14:6c:01:d9:6c:
47:98:19:9e:aa:5c:a8:ca:13:31:51:53:6c:9d:5a:6c:cb:95:
e8:c7:23:d6:fb:6d:f2:1d:4a:19:dd:67:63:3e:e0:6d:d3:05:
20:c7:c8:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsFxCtHOeaYcb+Q3xPGCELTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA2MTYxMzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjg4MTI0MWY1NzJmNzY0YTE5Nzc0ZDM1ZDA1N2Y2ODQzOWI0YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFeOqQY1hSMwYAcnLacppcFS+KU1
uxWWJ09CUsLI1KD7PowHCxvYv9+iSowiWR+97i85t6Vo1z3qecHmrTHCWIZN6XOh
B1tzYCheem7CicUHrRvfggrhSuzbWvvAWqs0w2B4sAo27WUi7DKewezcC6pJYqOL
3yFqjiilL3XSuQ95Up9v47+1ut+43CYInczHedr7VCQ+8Qrh7DxHCB8qA/FTf5VK
LP1srb9UhYlqQQ6hVmr6RhysKFJTNJVHjCBP9ie8ZV8iCKacWN4pBDaoyc09KDdK
onaV1Acwc8bOo6IANYBdlFhMj07J0kEuNCIlYhRHhKDD3nkfHzma/qDfMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB+IEkH1cvdkoZd0010Ff2hDm0wdMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSDRnU1FmVnk5MlNobDNUVFhRVl9hRU9iVEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJLKb0S/e4xlf4Ux+RNs
wb0MnInZTV9jRXa4LEFyzDgTiI2WQM4OkAPG/WHkcbPP75R3iWyYOHovGPjuOe6f
IC+zVRWTYAJnia+DsWUa8K0cJb6CLlWn7i8+BTGIa8mNNh+V3WBSHGFk/UmcRBMJ
l266mBvGYJ9oW7JzWEx25oL6W69vGAy1T/Scn9717aRV/YVoxTp4AvFLwWCUevG+
6Q5bwGG3Nc+aLehiOkpCZ/sZV8iGR1Be2G03KULzGB7a/Z1FsiCKj2v6nLrnWRh6
CuWeHrQUbAHZbEeYGZ6qXKjKEzFRU2ydWmzLlejHI9b7bfIdShndZ2M+4G3TBSDH
yL0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:09 2025 by rpki-client