Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgeMga0B9x8WO4AeJXb5-XA-vGw.roa
File: KgeMga0B9x8WO4AeJXb5-XA-vGw.roa (raw, json)
Hash identifier: 049vl7OhOneUl5FYpJbleK/Kn7KWgkLYl0LbQJxREnk=
Subject key identifier: 2A:07:8C:81:AD:01:F7:1F:16:3B:80:1E:25:76:F9:F9:70:3E:BC:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C823822F5A5CFDD9684F3535894199A9B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgeMga0B9x8WO4AeJXb5-XA-vGw.roa
Signing time: Tue 19 Dec 2023 13:16:06 +0000
ROA not before: Tue 19 Dec 2023 13:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:38:22:f5:a5:cf:dd:96:84:f3:53:58:94:19:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 13:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a078c81ad01f71f163b801e2576f9f9703ebc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:88:21:da:cb:ec:5a:08:0b:0c:e2:b4:73:
91:e9:5d:a3:88:96:dd:b0:06:2a:1d:00:84:de:91:
81:7d:a3:bb:96:15:8b:26:1e:79:3f:ba:32:ee:ff:
63:26:e6:8b:9d:55:81:32:c0:f8:dc:13:47:66:91:
71:75:fb:e6:2b:aa:60:d2:a3:37:f4:ff:6f:c8:b5:
80:3c:60:5e:ff:80:b2:83:88:6d:45:62:18:cc:97:
49:32:bf:eb:d1:48:f4:59:ca:f2:16:11:e0:63:a1:
4b:15:c0:2a:c3:b8:4f:9d:9c:e1:09:84:4e:54:a7:
cc:f6:ad:8f:d4:2b:e3:bc:26:b2:fe:9a:6c:37:fe:
97:39:46:3c:3c:22:07:59:8c:2b:3a:31:86:1b:c7:
92:0a:f0:f6:6f:47:de:b8:c3:99:9b:21:77:ec:76:
6b:94:9d:4f:13:03:5c:c4:76:7a:a5:3c:37:ee:1e:
2c:18:dd:0e:41:9e:6b:40:2f:32:a5:1f:e8:64:1a:
9d:09:37:b4:c0:7a:87:c6:a5:42:1b:4c:e0:96:9b:
f0:79:f6:11:87:90:6b:8e:a9:00:ac:fc:09:df:cb:
cc:92:e8:50:00:b9:9f:2b:1b:97:c1:72:af:52:6e:
60:b5:c4:d5:56:1b:57:d8:04:ac:af:96:ac:31:82:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:8C:81:AD:01:F7:1F:16:3B:80:1E:25:76:F9:F9:70:3E:BC:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgeMga0B9x8WO4AeJXb5-XA-vGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:50:31:9e:ed:ee:7b:2f:f1:73:bd:c2:2d:cb:7f:f5:ec:f9:
c5:8d:82:af:a6:13:3e:8e:7d:52:81:f5:25:c3:88:c7:82:a9:
3d:8a:95:88:c8:82:c7:f0:79:fc:6d:58:db:c7:5b:fa:1f:43:
63:2c:14:59:df:c9:25:1d:fe:cc:dd:38:27:da:69:6d:1b:d1:
7b:41:57:bc:4d:00:27:c7:21:56:4c:5d:e5:a7:95:86:63:62:
82:ca:e7:3e:a1:da:cd:38:23:b1:d4:91:7d:9c:3c:43:34:34:
8d:80:25:80:00:19:a6:48:34:e9:cb:66:67:8a:e2:e5:14:92:
26:62:5e:51:a5:8b:ce:f7:eb:e3:1e:ff:bd:1b:67:dd:f1:ea:
59:9a:34:17:5d:27:1a:07:82:36:58:69:88:77:07:55:1f:ff:
51:43:10:34:6a:3a:38:7a:9b:72:72:e1:ca:f9:60:8d:7a:15:
d2:3b:a3:60:2d:4f:f4:fc:be:91:7c:2e:df:f1:24:06:77:5d:
ba:ab:3a:ee:c4:08:d9:0b:62:a5:34:6a:63:a2:62:2e:5f:67:
66:c7:30:12:5c:e9:1c:c1:4d:08:56:ed:b3:bf:37:45:4c:e6:
9a:13:e9:dc:e1:18:cd:e1:6b:b2:1d:c2:6b:c4:21:9d:28:d2:
b6:a1:1d:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyCOCL1pc/dloTzU1iUGZqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE5MTMxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTA3OGM4MWFkMDFmNzFmMTYzYjgwMWUyNTc2ZjlmOTcwM2ViYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvOIIdrL7FoICwzitHOR6V2jiJbd
sAYqHQCE3pGBfaO7lhWLJh55P7oy7v9jJuaLnVWBMsD43BNHZpFxdfvmK6pg0qM3
9P9vyLWAPGBe/4Cyg4htRWIYzJdJMr/r0Uj0WcryFhHgY6FLFcAqw7hPnZzhCYRO
VKfM9q2P1CvjvCay/ppsN/6XOUY8PCIHWYwrOjGGG8eSCvD2b0feuMOZmyF37HZr
lJ1PEwNcxHZ6pTw37h4sGN0OQZ5rQC8ypR/oZBqdCTe0wHqHxqVCG0zglpvwefYR
h5BrjqkArPwJ38vMkuhQALmfKxuXwXKvUm5gtcTVVhtX2ASsr5asMYLk5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCoHjIGtAfcfFjuAHiV2+flwPrxsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvS2dlTWdhMEI5eDhXTzRBZUpYYjUtWEEtdkd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ5QMZ7t7nsv8XO9wi3L
f/Xs+cWNgq+mEz6OfVKB9SXDiMeCqT2KlYjIgsfwefxtWNvHW/ofQ2MsFFnfySUd
/szdOCfaaW0b0XtBV7xNACfHIVZMXeWnlYZjYoLK5z6h2s04I7HUkX2cPEM0NI2A
JYAAGaZINOnLZmeK4uUUkiZiXlGli8736+Me/70bZ93x6lmaNBddJxoHgjZYaYh3
B1Uf/1FDEDRqOjh6m3Jy4cr5YI16FdI7o2AtT/T8vpF8Lt/xJAZ3XbqrOu7ECNkL
YqU0amOiYi5fZ2bHMBJc6RzBTQhW7bO/N0VM5poT6dzhGM3ha7IdwmvEIZ0o0rah
HZs=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:07 2025 by rpki-client