Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IlIHqPNiY5jaqnJrjapQBQ_Lk9Y.roa
File: IlIHqPNiY5jaqnJrjapQBQ_Lk9Y.roa (raw, json)
Hash identifier: fJlYLHuONeelno+aj+0dGN4bUeEyew1/jaPk2/nbScc=
Subject key identifier: 22:52:07:A8:F3:62:63:98:DA:AA:72:6B:8D:AA:50:05:0F:CB:93:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C59E0FCF3F799559D89641EC1FC60A70A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IlIHqPNiY5jaqnJrjapQBQ_Lk9Y.roa
Signing time: Mon 11 Dec 2023 17:16:06 +0000
ROA not before: Mon 11 Dec 2023 17:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:e0:fc:f3:f7:99:55:9d:89:64:1e:c1:fc:60:a7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 17:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=225207a8f3626398daaa726b8daa50050fcb93d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:6a:27:83:75:6c:ab:14:a0:55:ad:af:fd:
f1:03:59:21:13:aa:cd:b8:7a:9f:1f:96:c0:88:4d:
4f:37:02:34:e6:b2:20:17:ca:4e:de:d8:4e:41:6e:
1e:23:52:12:4f:eb:2b:db:86:3c:3e:7a:ce:56:43:
cf:6f:8e:02:8c:85:c0:74:c3:79:5d:cf:8e:3f:40:
08:52:6e:68:09:26:75:b8:d7:a4:a0:d3:83:1a:3e:
b8:55:84:26:25:c7:41:af:94:dd:2b:0c:45:d5:6c:
15:01:39:b6:da:78:f7:a7:ba:62:1d:21:ad:1e:54:
7b:89:90:71:a0:9e:5b:e1:7a:89:db:3e:2d:3a:22:
31:98:81:06:0f:93:80:8f:41:c9:93:94:95:dd:e3:
57:a1:a4:8b:8a:32:a0:c2:cf:0a:01:71:cc:ad:93:
25:c7:37:82:fd:e3:aa:e8:62:58:c6:77:35:b7:a3:
a4:80:2b:76:09:c0:3c:84:40:d7:6a:e6:4e:64:ae:
3e:a6:26:e0:0d:57:57:87:8e:be:3e:0a:8d:90:b4:
ef:52:a9:d4:01:e4:01:b1:2e:66:fb:03:f0:4e:c7:
c9:58:32:25:26:99:df:2c:41:a9:bc:45:69:a6:86:
ab:30:b3:6c:76:c1:cd:f4:3f:18:ad:73:a8:80:7d:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:52:07:A8:F3:62:63:98:DA:AA:72:6B:8D:AA:50:05:0F:CB:93:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IlIHqPNiY5jaqnJrjapQBQ_Lk9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:f6:b4:36:06:21:6b:53:63:67:f9:a1:92:c6:6a:12:09:ee:
b5:4e:58:57:40:29:fc:d8:3d:e7:ec:f4:60:dc:21:9d:a5:0e:
3c:7f:31:77:36:e6:7f:c2:dc:32:11:3b:1b:7b:2b:af:59:cb:
9b:d8:38:81:e1:dd:f0:74:e9:c5:70:e8:96:f9:f7:b2:9c:20:
c3:e4:8b:6c:77:fb:a4:b0:2d:09:04:9e:97:ed:80:0a:63:74:
a1:1c:22:64:98:42:1e:49:e5:87:dc:6a:24:ce:56:f3:55:4f:
b8:e4:f1:40:6c:8c:b0:26:76:fe:3d:57:4e:09:ab:a9:42:72:
1a:8c:fd:37:1f:df:80:34:3e:83:2d:09:f7:f8:fc:e4:be:06:
47:ac:27:a1:79:5d:c3:46:99:83:65:dd:9b:fa:81:90:ad:54:
bf:4b:c8:da:be:67:98:57:61:17:14:55:88:cf:3b:25:e4:3e:
f9:50:e9:d6:79:eb:37:a6:b9:d9:eb:d3:d5:6a:73:42:8a:f2:
8c:42:32:e1:bd:7a:48:df:90:64:c8:82:d6:89:47:3d:c0:a3:
88:24:7d:62:fc:ce:60:f1:d9:2f:5b:ba:10:83:72:7e:ef:1a:
14:cb:41:1d:52:26:75:e6:77:07:6b:a7:d5:d4:91:30:47:d4:
54:ee:5d:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxZ4Pzz95lVnYlkHsH8YKcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMTcxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjUyMDdhOGYzNjI2Mzk4ZGFhYTcyNmI4ZGFhNTAwNTBmY2I5M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrhqJ4N1bKsUoFWtr/3xA1khE6rN
uHqfH5bAiE1PNwI05rIgF8pO3thOQW4eI1IST+sr24Y8PnrOVkPPb44CjIXAdMN5
Xc+OP0AIUm5oCSZ1uNekoNODGj64VYQmJcdBr5TdKwxF1WwVATm22nj3p7piHSGt
HlR7iZBxoJ5b4XqJ2z4tOiIxmIEGD5OAj0HJk5SV3eNXoaSLijKgws8KAXHMrZMl
xzeC/eOq6GJYxnc1t6OkgCt2CcA8hEDXauZOZK4+pibgDVdXh46+PgqNkLTvUqnU
AeQBsS5m+wPwTsfJWDIlJpnfLEGpvEVppoarMLNsdsHN9D8YrXOogH062QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCJSB6jzYmOY2qpya42qUAUPy5PWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSWxJSHFQTmlZNWphcW5KcmphcFFCUV9MazlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEL2tDYGIWtTY2f5oZLG
ahIJ7rVOWFdAKfzYPefs9GDcIZ2lDjx/MXc25n/C3DIROxt7K69Zy5vYOIHh3fB0
6cVw6Jb597KcIMPki2x3+6SwLQkEnpftgApjdKEcImSYQh5J5YfcaiTOVvNVT7jk
8UBsjLAmdv49V04Jq6lCchqM/Tcf34A0PoMtCff4/OS+BkesJ6F5XcNGmYNl3Zv6
gZCtVL9LyNq+Z5hXYRcUVYjPOyXkPvlQ6dZ56zemudnr09Vqc0KK8oxCMuG9ekjf
kGTIgtaJRz3Ao4gkfWL8zmDx2S9buhCDcn7vGhTLQR1SJnXmdwdrp9XUkTBH1FTu
XU4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:30 2025 by rpki-client