Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1SpmU3-XhHIlSsT6WJgoGO7ygo.roa
File: K1SpmU3-XhHIlSsT6WJgoGO7ygo.roa (raw, json)
Hash identifier: rkva4AeTSz+zHpJTGWX8gp5Ajp1d0Yr6wihIE2B18GQ=
Subject key identifier: 2B:54:A9:99:4D:FE:5E:11:C8:95:2B:13:E9:62:60:A0:63:BB:CA:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD0C4B70B7E7EB8424E479E714D6135C7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1SpmU3-XhHIlSsT6WJgoGO7ygo.roa
Signing time: Tue 26 Sep 2023 09:14:27 +0000
ROA not before: Tue 26 Sep 2023 09:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:c4:b7:0b:7e:7e:b8:42:4e:47:9e:71:4d:61:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 09:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b54a9994dfe5e11c8952b13e96260a063bbca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:32:2a:4c:19:d0:91:05:da:c2:3d:ef:68:
6a:89:cb:bb:f6:2e:40:08:6c:32:cc:3a:a9:2c:d4:
7c:8e:a3:5a:32:86:45:4e:f6:8e:d0:fe:00:24:e9:
86:9e:c0:34:2a:10:31:8d:f1:5b:e7:34:bf:32:7e:
64:a9:d8:2a:fd:ca:53:d4:3d:e5:75:c4:f4:11:ab:
3f:69:88:64:43:94:e9:25:74:72:89:5f:2b:53:70:
5d:e9:b8:bf:1d:e8:d6:a4:4b:64:c8:b7:72:84:07:
a7:55:2a:3c:ae:36:a5:7c:0b:ca:10:ce:26:f3:6c:
b3:b1:44:56:5b:8a:6b:68:40:cd:09:bb:b9:a3:72:
15:8c:a4:42:fe:41:23:df:0f:41:f4:c1:7c:51:f7:
07:29:7f:f4:da:89:2f:a4:8f:63:6f:96:ad:f1:e8:
04:87:8a:cd:17:e0:28:73:4a:63:f1:71:3b:51:d0:
a7:ba:45:03:92:db:cc:d3:16:e9:8d:7c:48:87:1a:
c5:a8:9e:e6:72:9b:37:82:22:e1:e6:bc:30:8f:ab:
4d:a3:1b:45:e1:f2:67:d9:4a:71:28:a7:60:e3:5c:
f4:03:36:c0:c5:3c:e8:c6:94:ba:9c:0c:0a:a0:2b:
05:f3:b7:99:73:e9:12:8a:35:8c:da:11:20:22:2b:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:54:A9:99:4D:FE:5E:11:C8:95:2B:13:E9:62:60:A0:63:BB:CA:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1SpmU3-XhHIlSsT6WJgoGO7ygo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:bd:c9:0a:9b:46:c2:ea:21:64:ba:e9:75:a4:d0:f3:be:80:
7a:1d:7e:0c:fa:f8:da:37:42:51:a6:26:a4:82:13:da:ea:ee:
a1:70:82:92:c6:52:80:da:4e:a0:ef:43:3d:9d:46:9a:0d:3a:
28:3b:fd:ee:2c:25:18:d0:c2:78:e1:40:69:2e:6f:74:ed:28:
d6:bd:56:3f:26:81:89:6e:e6:64:d3:82:7a:ee:58:9f:d5:20:
e6:30:44:d6:31:14:a7:18:fd:f2:fc:47:76:b8:51:05:0d:9b:
b5:05:2e:63:35:2d:3b:64:f7:9b:e8:fc:10:63:68:b4:47:01:
a5:6c:d8:1c:81:2d:86:d4:f0:48:7c:94:80:b7:39:c3:ee:1b:
7c:a9:ee:69:63:74:d9:a0:ea:89:4d:89:c5:f3:e6:10:7c:92:
cc:e9:c4:7e:dc:0d:81:bb:0a:54:be:f0:af:3c:07:12:b9:38:
4d:09:71:4a:94:d7:39:bf:9d:12:35:a2:6d:b1:49:ca:70:1a:
c8:62:f8:f7:e6:7e:47:03:f5:b9:8a:13:d2:b9:76:fb:6a:59:
3c:b9:e8:6a:9b:e5:d2:9c:b5:83:87:84:b8:f0:af:8c:31:31:
20:bb:3f:a6:47:80:48:81:f6:f5:fd:a6:22:15:1c:fe:7e:98:
c6:72:12:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrQxLcLfn64Qk5HnnFNYTXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI2MDkxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjU0YTk5OTRkZmU1ZTExYzg5NTJiMTNlOTYyNjBhMDYzYmJjYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DgyKkwZ0JEF2sI972hqicu79i5A
CGwyzDqpLNR8jqNaMoZFTvaO0P4AJOmGnsA0KhAxjfFb5zS/Mn5kqdgq/cpT1D3l
dcT0Eas/aYhkQ5TpJXRyiV8rU3Bd6bi/HejWpEtkyLdyhAenVSo8rjalfAvKEM4m
82yzsURWW4praEDNCbu5o3IVjKRC/kEj3w9B9MF8UfcHKX/02okvpI9jb5at8egE
h4rNF+Aoc0pj8XE7UdCnukUDktvM0xbpjXxIhxrFqJ7mcps3giLh5rwwj6tNoxtF
4fJn2UpxKKdg41z0AzbAxTzoxpS6nAwKoCsF87eZc+kSijWM2hEgIitoHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCtUqZlN/l4RyJUrE+liYKBju8oKMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSzFTcG1VMy1YaEhJbFNzVDZXSmdvR083eWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJe9yQqbRsLqIWS66XWk
0PO+gHodfgz6+No3QlGmJqSCE9rq7qFwgpLGUoDaTqDvQz2dRpoNOig7/e4sJRjQ
wnjhQGkub3TtKNa9Vj8mgYlu5mTTgnruWJ/VIOYwRNYxFKcY/fL8R3a4UQUNm7UF
LmM1LTtk95vo/BBjaLRHAaVs2ByBLYbU8Eh8lIC3OcPuG3yp7mljdNmg6olNicXz
5hB8kszpxH7cDYG7ClS+8K88BxK5OE0JcUqU1zm/nRI1om2xScpwGshi+PfmfkcD
9bmKE9K5dvtqWTy56Gqb5dKctYOHhLjwr4wxMSC7P6ZHgEiB9vX9piIVHP5+mMZy
Ekg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:08 2025 by rpki-client