Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxvLxRTpc8H7K8v_Ve0Y_tjTSjI.roa
File: KxvLxRTpc8H7K8v_Ve0Y_tjTSjI.roa (raw, json)
Hash identifier: T4AUhV/7bq696KfjnaHEBXxJmBucCywdl7p8YLDdNUI=
Subject key identifier: 2B:1B:CB:C5:14:E9:73:C1:FB:2B:CB:FF:55:ED:18:FE:D8:D3:4A:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEECE930BCBD6181A4AF5F584A1D8F890
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxvLxRTpc8H7K8v_Ve0Y_tjTSjI.roa
Signing time: Mon 20 Nov 2023 22:16:37 +0000
ROA not before: Mon 20 Nov 2023 22:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:ce:93:0b:cb:d6:18:1a:4a:f5:f5:84:a1:d8:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 22:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b1bcbc514e973c1fb2bcbff55ed18fed8d34a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:17:90:21:1e:4e:fb:9b:bc:03:3a:3d:7c:
a8:ef:b4:4f:03:47:49:19:09:62:36:f1:4c:b6:27:
f4:09:02:a4:b9:d6:04:b3:3c:5a:4f:81:3a:3a:12:
22:22:0d:c9:9c:64:df:96:b5:67:10:23:51:5a:a5:
7e:1f:84:90:8e:b2:a0:97:04:4b:1a:cf:cc:c9:eb:
03:4b:83:2b:72:4f:22:c0:8a:78:3b:28:67:3e:7b:
7c:bc:48:87:75:e3:93:57:10:48:58:ee:3c:50:79:
ca:e0:ef:98:7d:31:81:2d:b5:e6:1e:7b:c2:a5:0f:
10:1b:cb:f4:48:b5:c9:9b:53:24:8e:11:eb:bc:73:
48:f1:38:01:43:b9:e6:21:71:1f:83:1b:59:02:00:
17:c9:3d:25:16:5f:40:d2:08:80:8d:96:51:10:3a:
6f:b0:34:71:d6:b4:c7:e4:d9:c0:0f:d5:32:61:63:
5c:c7:e9:5b:66:c8:6a:94:81:80:9e:e4:d5:00:55:
42:42:98:c3:24:78:5b:79:dc:16:16:a9:d3:35:74:
b9:9b:36:eb:31:09:e3:f6:2a:b0:a4:29:fd:75:97:
fe:73:ce:84:8c:d9:b0:88:1f:57:87:1a:5d:37:90:
20:00:df:88:fa:4a:60:f5:b5:aa:91:ce:b0:ba:ea:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:CB:C5:14:E9:73:C1:FB:2B:CB:FF:55:ED:18:FE:D8:D3:4A:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxvLxRTpc8H7K8v_Ve0Y_tjTSjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:6d:66:2e:8f:f9:2b:dc:b3:a6:0f:61:3d:ef:d8:bc:ea:20:
07:57:86:02:1e:77:37:e6:47:c4:29:4e:df:1c:66:97:c9:78:
54:19:93:db:f3:42:67:68:74:23:3d:4f:3d:71:df:ca:c4:51:
cf:99:4d:01:4b:de:bc:72:40:d2:ca:8d:87:06:17:2c:bb:0e:
96:5a:2d:f0:2a:cb:6f:5e:7b:74:63:41:66:cd:0e:0c:7c:e2:
55:e3:2b:5d:bd:27:1e:a3:83:aa:f6:cf:af:18:d6:eb:5a:ef:
a4:c6:11:e5:4d:cf:9d:e0:28:13:04:f0:08:8f:55:23:ea:2f:
ed:7e:3f:1d:7a:1b:ff:55:62:1f:f4:4e:5c:35:13:a5:cf:29:
5c:2f:5c:f9:98:71:df:01:a4:78:ca:65:2a:ff:86:85:47:79:
32:be:2b:f9:e8:8e:e7:dc:90:15:68:95:28:4a:79:a3:32:34:
8c:ff:33:0f:72:a6:09:7f:ec:a1:78:ee:d4:16:c9:49:18:e0:
3a:c8:20:57:ab:38:96:30:81:dd:6c:8b:91:a6:ee:00:bf:7b:
9d:5f:64:b4:0f:e0:24:35:41:41:c1:ed:30:f7:1f:3d:81:55:
ee:7a:12:64:f0:3b:e8:65:52:70:11:38:f7:b3:2e:9a:78:bd:
be:7c:93:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvuzpMLy9YYGkr19YSh2PiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIwMjIxNjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjFiY2JjNTE0ZTk3M2MxZmIyYmNiZmY1NWVkMThmZWQ4ZDM0YTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSAXkCEeTvubvAM6PXyo77RPA0dJ
GQliNvFMtif0CQKkudYEszxaT4E6OhIiIg3JnGTflrVnECNRWqV+H4SQjrKglwRL
Gs/MyesDS4Mrck8iwIp4OyhnPnt8vEiHdeOTVxBIWO48UHnK4O+YfTGBLbXmHnvC
pQ8QG8v0SLXJm1MkjhHrvHNI8TgBQ7nmIXEfgxtZAgAXyT0lFl9A0giAjZZREDpv
sDRx1rTH5NnAD9UyYWNcx+lbZshqlIGAnuTVAFVCQpjDJHhbedwWFqnTNXS5mzbr
MQnj9iqwpCn9dZf+c86EjNmwiB9XhxpdN5AgAN+I+kpg9bWqkc6wuuqvdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCsby8UU6XPB+yvL/1XtGP7Y00oyMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvS3h2THhSVHBjOEg3Szh2X1ZlMFlfdGpUU2pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGJtZi6P+Svcs6YPYT3v
2LzqIAdXhgIedzfmR8QpTt8cZpfJeFQZk9vzQmdodCM9Tz1x38rEUc+ZTQFL3rxy
QNLKjYcGFyy7DpZaLfAqy29ee3RjQWbNDgx84lXjK129Jx6jg6r2z68Y1uta76TG
EeVNz53gKBME8AiPVSPqL+1+Px16G/9VYh/0Tlw1E6XPKVwvXPmYcd8BpHjKZSr/
hoVHeTK+K/nojufckBVolShKeaMyNIz/Mw9ypgl/7KF47tQWyUkY4DrIIFerOJYw
gd1si5Gm7gC/e51fZLQP4CQ1QUHB7TD3Hz2BVe56EmTwO+hlUnAROPezLpp4vb58
k28=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:48:46 2025 by rpki-client