Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IspyMQ11-aDUZRyuFgEV4QjRBaI.roa
File: IspyMQ11-aDUZRyuFgEV4QjRBaI.roa (raw, json)
Hash identifier: tjKRXPW1oM/2Zxc9Ail/b2ovJHWCObRHbkU50B12mPo=
Subject key identifier: 22:CA:72:31:0D:75:F9:A0:D4:65:1C:AE:16:01:15:E1:08:D1:05:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3D867FD8B67B0D2026AAF78B33B39DF7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IspyMQ11-aDUZRyuFgEV4QjRBaI.roa
Signing time: Tue 17 Oct 2023 12:05:06 +0000
ROA not before: Tue 17 Oct 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3d85:bd63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:86:7f:d8:b6:7b:0d:20:26:aa:f7:8b:33:b3:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ca72310d75f9a0d4651cae160115e108d105a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:1e:54:5e:3c:8a:a1:6f:ab:92:f4:84:2f:
0f:07:3d:30:5b:35:60:a3:a5:3c:78:a4:93:47:75:
b9:61:8b:d5:e5:bf:57:32:5f:ff:db:41:20:8c:dc:
de:b8:42:2a:5f:12:3f:ca:87:fc:d2:94:2e:b9:61:
4c:96:22:0a:11:be:8c:b2:95:20:18:5e:2c:74:0b:
7b:f9:3e:c8:71:d0:92:e0:86:4e:81:ff:bb:c2:cb:
72:ec:4b:39:1c:ff:ef:f9:9c:7c:f2:96:a1:fd:f1:
1a:fd:e8:e3:46:3d:1c:bf:03:b8:f2:f5:38:b4:c3:
c7:30:9a:06:4a:6b:c9:80:d9:0f:1c:fa:a9:8e:8c:
2d:a9:fd:68:35:3a:53:e9:f8:50:bc:aa:23:fc:e0:
78:61:95:9c:bd:c5:af:48:c0:49:16:0f:58:98:65:
65:b7:b7:58:03:15:0d:7d:96:78:2b:01:8f:6d:c0:
03:b1:2d:91:c5:80:9b:82:ba:16:b4:91:01:9a:a6:
d7:23:08:ab:29:ca:e0:92:11:8f:12:c4:4f:b0:83:
25:01:dc:09:40:a2:64:23:11:35:75:4d:af:3f:28:
c5:5f:48:66:54:b3:d2:f2:16:4e:db:b2:6e:e7:79:
72:bf:1d:4d:da:af:36:a7:ed:8f:4c:55:5b:78:07:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:72:31:0D:75:F9:A0:D4:65:1C:AE:16:01:15:E1:08:D1:05:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IspyMQ11-aDUZRyuFgEV4QjRBaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b8:65:5d:1a:ab:2b:3e:98:0d:e6:9e:29:e6:44:46:01:55:
2c:a2:8d:13:74:a4:3a:3d:68:82:0b:d6:51:74:b8:36:cd:a9:
81:dc:23:29:96:5f:20:32:ce:95:68:8a:2d:85:8f:44:63:8c:
8d:de:19:3b:1a:b8:3e:c9:c9:e9:b3:43:55:29:d6:61:d6:91:
37:f0:a0:3d:51:fa:bd:f5:d1:09:e9:d4:98:68:d4:d1:b8:b3:
06:c2:3a:32:d6:4d:67:ae:fb:ed:19:94:79:32:1c:ef:f7:23:
b8:56:7f:ae:17:64:a6:03:70:5d:cf:b8:c6:02:1b:63:85:96:
1d:45:52:27:a2:c3:e1:0f:12:9b:83:4f:23:38:71:84:76:82:
57:04:46:93:fb:49:84:ec:5b:f1:2b:9e:2f:d3:29:9a:f9:60:
51:49:fa:63:ab:66:b6:e8:28:3f:a7:02:e0:7a:87:3c:14:3d:
0f:98:b3:0c:45:73:5a:6c:61:da:b9:92:6a:45:0b:fb:bb:46:
8e:5f:be:32:94:25:30:7f:37:bb:ca:6a:31:ca:dd:39:62:d2:
b8:69:4e:98:bd:f3:5c:61:7f:3f:22:d4:3d:b3:92:b2:3a:04:
5e:70:78:e4:91:be:33:11:69:10:1b:6d:e5:8c:0e:c5:1d:f0:
4d:4d:7b:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs9hn/YtnsNICaq94szs533MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE3MTIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmNhNzIzMTBkNzVmOWEwZDQ2NTFjYWUxNjAxMTVlMTA4ZDEwNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfIeVF48iqFvq5L0hC8PBz0wWzVg
o6U8eKSTR3W5YYvV5b9XMl//20EgjNzeuEIqXxI/yof80pQuuWFMliIKEb6MspUg
GF4sdAt7+T7IcdCS4IZOgf+7wsty7Es5HP/v+Zx88pah/fEa/ejjRj0cvwO48vU4
tMPHMJoGSmvJgNkPHPqpjowtqf1oNTpT6fhQvKoj/OB4YZWcvcWvSMBJFg9YmGVl
t7dYAxUNfZZ4KwGPbcADsS2RxYCbgroWtJEBmqbXIwirKcrgkhGPEsRPsIMlAdwJ
QKJkIxE1dU2vPyjFX0hmVLPS8hZO27Ju53lyvx1N2q82p+2PTFVbeAdkGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCLKcjENdfmg1GUcrhYBFeEI0QWiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSXNweU1RMTEtYURVWlJ5dUZnRVY0UWpSQmFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFu4ZV0aqys+mA3mninm
REYBVSyijRN0pDo9aIIL1lF0uDbNqYHcIymWXyAyzpVoii2Fj0RjjI3eGTsauD7J
yemzQ1Up1mHWkTfwoD1R+r310Qnp1Jho1NG4swbCOjLWTWeu++0ZlHkyHO/3I7hW
f64XZKYDcF3PuMYCG2OFlh1FUieiw+EPEpuDTyM4cYR2glcERpP7SYTsW/Erni/T
KZr5YFFJ+mOrZrboKD+nAuB6hzwUPQ+YswxFc1psYdq5kmpFC/u7Ro5fvjKUJTB/
N7vKajHK3Tli0rhpTpi981xhfz8i1D2zkrI6BF5weOSRvjMRaRAbbeWMDsUd8E1N
e3A=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:22 2025 by rpki-client