Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ir2qHm3UrvzbVSxMK6M64hYiTp4.roa
File: Ir2qHm3UrvzbVSxMK6M64hYiTp4.roa (raw, json)
Hash identifier: BynySzgL4HcLnlUR6wx9LYyJ9Uz2jCceEgCHLsXUZ6A=
Subject key identifier: 22:BD:AA:1E:6D:D4:AE:FC:DB:55:2C:4C:2B:A3:3A:E2:16:22:4E:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAEA6EE78290E0FFFA338C42983D8FB89
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ir2qHm3UrvzbVSxMK6M64hYiTp4.roa
Signing time: Tue 19 Sep 2023 18:14:50 +0000
ROA not before: Tue 19 Sep 2023 18:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:a6:ee:78:29:0e:0f:ff:a3:38:c4:29:83:d8:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 18:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22bdaa1e6dd4aefcdb552c4c2ba33ae216224e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:ef:53:49:f8:12:0c:51:55:69:fe:9a:c3:
13:63:aa:48:0f:63:e1:23:ef:33:f5:54:71:fb:93:
55:43:0c:f3:57:cc:9c:7c:1d:a8:fc:db:d3:c0:14:
d6:96:7c:a7:9b:4a:c1:ce:11:ce:17:f5:cd:67:fd:
e0:5b:bb:b4:eb:22:bc:4b:47:21:8c:85:56:71:68:
bc:7b:e5:68:1b:7b:f1:63:ee:81:32:99:cc:8e:de:
ca:66:ed:c6:6a:b7:f1:2c:fb:4b:ee:3d:72:0b:8b:
6f:50:b9:d9:83:73:47:4a:3d:a9:2a:8f:41:95:9a:
0d:64:5d:6d:c6:cc:07:de:e9:6a:cf:7f:d9:6d:22:
c8:bc:9e:fa:04:c2:3c:0e:a5:ff:6e:97:35:63:7c:
34:da:e6:8c:00:7b:3f:23:ec:33:42:29:d8:5f:12:
62:7c:19:66:92:26:f4:54:2a:90:91:73:33:ae:a3:
9e:e4:a6:d8:0c:c8:af:60:5e:c3:a8:af:27:be:a2:
e0:81:a3:10:53:16:fd:59:e8:82:5e:89:47:43:71:
07:72:c7:57:b5:63:3e:ae:f0:17:33:f5:99:cd:6f:
47:bf:8b:0b:f9:2a:7c:e1:79:78:b8:1f:d8:bb:eb:
1d:62:48:bb:e6:4f:31:41:af:c2:bd:38:e4:a3:cc:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:AA:1E:6D:D4:AE:FC:DB:55:2C:4C:2B:A3:3A:E2:16:22:4E:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ir2qHm3UrvzbVSxMK6M64hYiTp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:26:cb:a3:87:2f:3d:36:ca:a4:97:ae:a9:af:4c:e4:c4:58:
5f:03:d7:44:17:bb:2b:46:4b:1b:26:30:1d:e3:b0:32:90:b3:
3d:5c:22:85:7f:d4:14:a9:9b:84:e7:b2:6c:60:40:ba:92:c7:
9d:a1:5f:88:51:64:5f:02:1f:08:9d:10:5d:fb:9d:20:85:81:
67:60:ff:af:71:09:5c:48:16:ed:e0:51:a0:8a:58:75:c7:fa:
42:2a:ef:ce:d2:31:17:47:f8:7c:5c:1f:52:7c:e3:e1:bf:94:
e5:4e:3c:cc:3c:2b:74:8b:85:dd:0e:1b:ee:73:d4:79:9a:ec:
3f:38:a3:b8:03:9b:41:50:4d:71:26:55:8e:01:83:7a:97:7f:
7c:c0:0d:6d:c5:b9:9d:17:4f:cf:00:30:80:93:78:58:3a:59:
56:9b:e5:b7:2a:a4:35:d9:88:87:4e:06:c4:85:3c:00:f9:3c:
ed:38:72:d7:a2:5f:76:9f:89:5d:b3:9b:c0:13:ab:fc:da:d8:
d7:be:be:45:3a:8a:d8:ae:3c:ff:1c:a4:00:61:65:79:f2:9a:
db:c2:fd:94:90:e7:74:17:3a:f6:66:e8:9a:b6:9b:d3:41:1e:
c1:9b:72:d5:ee:85:1a:11:9b:50:e2:03:8f:99:3b:ab:43:30:
ee:b3:18:c6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqupu54KQ4P/6M4xCmD2PuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTE5MTgxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmJkYWExZTZkZDRhZWZjZGI1NTJjNGMyYmEzM2FlMjE2MjI0ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3DvU0n4EgxRVWn+msMTY6pID2Ph
I+8z9VRx+5NVQwzzV8ycfB2o/NvTwBTWlnynm0rBzhHOF/XNZ/3gW7u06yK8S0ch
jIVWcWi8e+VoG3vxY+6BMpnMjt7KZu3GarfxLPtL7j1yC4tvULnZg3NHSj2pKo9B
lZoNZF1txswH3ulqz3/ZbSLIvJ76BMI8DqX/bpc1Y3w02uaMAHs/I+wzQinYXxJi
fBlmkib0VCqQkXMzrqOe5KbYDMivYF7DqK8nvqLggaMQUxb9WeiCXolHQ3EHcsdX
tWM+rvAXM/WZzW9Hv4sL+Sp84Xl4uB/Yu+sdYki75k8xQa/CvTjko8zdxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCK9qh5t1K7821UsTCujOuIWIk6eMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSXIycUhtM1VydnpiVlN4TUs2TTY0aFlpVHA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJgmy6OHLz02yqSXrqmv
TOTEWF8D10QXuytGSxsmMB3jsDKQsz1cIoV/1BSpm4TnsmxgQLqSx52hX4hRZF8C
HwidEF37nSCFgWdg/69xCVxIFu3gUaCKWHXH+kIq787SMRdH+HxcH1J84+G/lOVO
PMw8K3SLhd0OG+5z1Hma7D84o7gDm0FQTXEmVY4Bg3qXf3zADW3FuZ0XT88AMICT
eFg6WVab5bcqpDXZiIdOBsSFPAD5PO04cteiX3afiV2zm8ATq/za2Ne+vkU6itiu
PP8cpABhZXnymtvC/ZSQ53QXOvZm6Jq2m9NBHsGbctXuhRoRm1DiA4+ZO6tDMO6z
GMY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:52 2025 by rpki-client