Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ii79-OATobTYoX544m6SHu5o-ts.roa
File: Ii79-OATobTYoX544m6SHu5o-ts.roa (raw, json)
Hash identifier: +xn6yrE859r/LnvUyB7U7dZ6J/X1GzaqongjwGfaoh0=
Subject key identifier: 22:2E:FD:F8:E0:13:A1:B4:D8:A1:7E:78:E2:6E:92:1E:EE:68:FA:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6A63FA9F2653B4DEE9F7248898B99798
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ii79-OATobTYoX544m6SHu5o-ts.roa
Signing time: Thu 14 Dec 2023 22:13:06 +0000
ROA not before: Thu 14 Dec 2023 22:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6a:63:fa:9f:26:53:b4:de:e9:f7:24:88:98:b9:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 22:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222efdf8e013a1b4d8a17e78e26e921eee68fadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:fe:20:7b:bf:23:09:ae:b4:ff:d8:50:0b:
6d:aa:34:2e:3c:92:35:96:30:ec:ae:c0:16:87:b2:
1f:3e:f3:b6:7e:0e:81:fc:2f:1b:7a:d4:f8:7b:4d:
d4:25:35:52:d8:c7:7a:60:0b:37:6a:df:38:86:f1:
97:a4:0f:a2:b9:fb:50:5d:64:6b:fc:17:05:41:0d:
52:5a:c9:23:f4:53:93:e1:85:72:bf:d5:f2:41:50:
c3:70:56:8a:77:55:56:4d:ae:73:f2:1e:42:44:84:
d9:be:58:22:9c:53:e8:17:a9:f2:1d:64:ed:4e:67:
e7:04:36:e5:1f:f1:bc:d2:50:86:59:4d:b1:e4:e6:
c5:e2:fb:da:6f:6e:cb:ec:3b:a1:00:ba:4d:ab:62:
de:bd:37:77:1f:75:e0:8e:bd:21:56:c9:26:16:06:
99:8d:02:0f:95:fb:c7:49:db:8f:42:1e:c4:a0:b1:
0a:a2:26:20:ae:e3:53:d7:c9:45:6b:34:09:ee:89:
b1:f6:83:a4:c6:a7:0c:ea:db:ea:4c:91:26:77:17:
5e:6e:51:5c:ca:51:30:f3:01:ac:77:3c:14:6c:af:
6c:41:c4:31:a1:08:8c:c4:a3:0a:13:9b:ce:fe:47:
4e:68:08:ef:26:2c:3a:3f:ce:64:de:86:3a:a0:46:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:FD:F8:E0:13:A1:B4:D8:A1:7E:78:E2:6E:92:1E:EE:68:FA:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ii79-OATobTYoX544m6SHu5o-ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:04:4f:de:d0:17:86:42:69:3c:9d:46:e6:b9:a8:d4:f9:85:
56:ba:c6:85:97:8d:3a:7e:aa:6d:86:cf:ce:f9:a7:68:39:d2:
3b:ae:ff:77:06:fd:19:d6:48:2c:87:d8:2c:f5:74:b8:b5:36:
23:14:59:dc:4b:33:0f:a4:e1:e1:8f:c7:41:d6:bc:c8:c8:e1:
04:4a:2b:9e:f6:59:b3:6a:2a:42:2a:93:d7:bc:8a:61:f4:94:
68:2a:30:b7:a5:b5:a8:b9:ae:10:da:6d:4e:f9:82:97:c3:5e:
c2:cf:24:52:3c:07:6d:f9:55:bb:8d:33:8e:a0:d9:f0:0b:d4:
82:b3:6c:72:52:57:df:a1:8d:cc:8b:0f:51:3e:44:f1:01:22:
8d:6b:bb:7e:21:ac:5e:2f:a5:c9:b5:3b:8d:c1:0d:bc:13:70:
7c:cd:2d:27:36:db:99:3b:bc:0d:de:14:7a:f9:11:43:61:fe:
65:5f:93:6f:93:bf:6b:db:ab:d0:94:28:32:f3:35:7f:77:5b:
d9:92:5b:9b:95:16:54:93:fb:b8:af:74:e3:24:44:dc:19:fa:
e5:87:20:86:a1:27:95:91:ae:1b:ab:e8:d1:f2:33:e1:01:df:
54:38:04:01:69:bd:4c:00:9c:b0:f8:6a:77:63:0d:de:f2:ae:
03:4e:1f:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxqY/qfJlO03un3JIiYuZeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MjIxMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJlZmRmOGUwMTNhMWI0ZDhhMTdlNzhlMjZlOTIxZWVlNjhmYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggb+IHu/IwmutP/YUAttqjQuPJI1
ljDsrsAWh7IfPvO2fg6B/C8betT4e03UJTVS2Md6YAs3at84hvGXpA+iuftQXWRr
/BcFQQ1SWskj9FOT4YVyv9XyQVDDcFaKd1VWTa5z8h5CRITZvlginFPoF6nyHWTt
TmfnBDblH/G80lCGWU2x5ObF4vvab27L7DuhALpNq2LevTd3H3Xgjr0hVskmFgaZ
jQIPlfvHSduPQh7EoLEKoiYgruNT18lFazQJ7omx9oOkxqcM6tvqTJEmdxdeblFc
ylEw8wGsdzwUbK9sQcQxoQiMxKMKE5vO/kdOaAjvJiw6P85k3oY6oEZMOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCIu/fjgE6G02KF+eOJukh7uaPrbMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSWk3OS1PQVRvYlRZb1g1NDRtNlNIdTVvLXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKgET97QF4ZCaTydRua5
qNT5hVa6xoWXjTp+qm2Gz875p2g50juu/3cG/RnWSCyH2Cz1dLi1NiMUWdxLMw+k
4eGPx0HWvMjI4QRKK572WbNqKkIqk9e8imH0lGgqMLeltai5rhDabU75gpfDXsLP
JFI8B235VbuNM46g2fAL1IKzbHJSV9+hjcyLD1E+RPEBIo1ru34hrF4vpcm1O43B
DbwTcHzNLSc225k7vA3eFHr5EUNh/mVfk2+Tv2vbq9CUKDLzNX93W9mSW5uVFlST
+7ivdOMkRNwZ+uWHIIahJ5WRrhur6NHyM+EB31Q4BAFpvUwAnLD4andjDd7yrgNO
H94=
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:54:45 2025 by rpki-client