Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LcHiqOOo9rVF15sptwFjAYRX7Jo.roa
File: LcHiqOOo9rVF15sptwFjAYRX7Jo.roa (raw, json)
Hash identifier: uy16YZB5e2ZKmjGzt5b6aulVUGOPCOF1xUNxlxa02gI=
Subject key identifier: 2D:C1:E2:A8:E3:A8:F6:B5:45:D7:9B:29:B7:01:63:01:84:57:EC:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD8770935CB5E708D933CFAB26E6B567C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LcHiqOOo9rVF15sptwFjAYRX7Jo.roa
Signing time: Thu 16 Nov 2023 14:09:21 +0000
ROA not before: Thu 16 Nov 2023 14:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:77:09:35:cb:5e:70:8d:93:3c:fa:b2:6e:6b:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 14:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dc1e2a8e3a8f6b545d79b29b70163018457ec9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:6f:5b:09:c0:c7:1d:d8:e9:07:e2:2e:fa:
46:fe:7d:ce:82:f3:88:57:aa:05:b0:db:2f:5a:a7:
cf:c1:21:5e:5f:40:75:bb:74:fd:40:28:e6:9e:c5:
7b:91:ef:b3:4a:cc:eb:08:9a:17:ab:6b:cf:52:ab:
f1:c8:3f:e0:c3:1b:28:cc:7f:e5:ac:39:b1:da:53:
6a:15:5d:f4:f8:e7:39:b2:5b:5a:c8:a5:15:d6:92:
55:7c:41:60:93:86:9b:a0:86:f4:88:be:2d:e2:d5:
f3:8b:e6:36:d4:36:5b:6a:df:af:8e:8b:8c:f8:75:
4d:ab:cf:64:2a:ce:c3:ee:e3:cb:78:54:27:6c:75:
41:ef:f4:bd:6e:48:dd:82:f7:c1:8c:a3:45:73:89:
2d:36:5f:52:f3:50:2a:9b:10:1c:ba:14:2c:9d:46:
75:6b:30:c6:3a:89:94:16:9a:b6:69:33:19:71:b8:
90:01:a1:90:6e:bc:33:6f:95:54:b0:f1:f5:b5:3c:
02:81:54:30:9c:b1:e6:9a:54:74:af:06:ff:f5:3f:
bb:53:31:6d:5f:66:86:f4:84:e3:d7:74:8b:72:a8:
33:e6:f8:30:bc:17:ee:79:be:68:9a:09:1a:c7:7d:
50:e1:fd:76:e3:6c:a9:4e:5d:a7:4b:f1:b5:2c:8c:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:E2:A8:E3:A8:F6:B5:45:D7:9B:29:B7:01:63:01:84:57:EC:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LcHiqOOo9rVF15sptwFjAYRX7Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:82:7b:46:3d:cd:5e:a8:a0:88:6f:ad:92:27:90:dd:44:9e:
7a:ad:11:04:51:57:1c:76:ff:4d:5b:3c:a2:ec:d3:27:c5:37:
81:66:34:b6:dc:9d:4b:d7:27:14:50:52:04:e3:4a:0e:fa:74:
6a:12:e6:37:9a:89:33:71:37:e1:ba:00:d6:ad:de:69:5f:54:
a5:51:61:59:11:11:e8:d6:1e:f0:73:ee:7e:5b:83:62:b4:ff:
1e:2b:a6:05:03:8a:09:10:01:9c:e1:63:61:d1:08:ea:aa:c8:
4a:8a:7b:3d:13:86:45:c7:35:83:b2:bd:70:07:e0:bd:29:19:
67:06:b4:04:79:cc:c5:18:0d:51:cf:f0:6f:4b:38:ac:f2:e9:
a0:a8:34:9e:ce:f4:b3:b5:92:4c:ce:e1:5a:c8:ff:f1:48:f3:
af:6b:db:7b:28:99:a6:cb:1f:b3:43:6b:fb:6c:75:bf:d4:05:
2c:40:b4:7d:2e:01:75:f6:e3:06:f9:0d:48:b5:ab:ff:35:bd:
0d:ce:f0:b8:91:6b:c7:c8:37:25:ba:1f:85:14:74:f9:0c:9f:
ca:c9:ba:62:3d:0f:6d:5c:f9:06:4d:8f:79:68:8a:36:d0:85:
cf:96:ce:2e:d3:d1:f2:36:d9:00:b8:fa:ea:7f:44:ad:71:1f:
9d:d7:0b:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvYdwk1y15wjZM8+rJua1Z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE2MTQwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGMxZTJhOGUzYThmNmI1NDVkNzliMjliNzAxNjMwMTg0NTdlYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudtvWwnAxx3Y6QfiLvpG/n3OgvOI
V6oFsNsvWqfPwSFeX0B1u3T9QCjmnsV7ke+zSszrCJoXq2vPUqvxyD/gwxsozH/l
rDmx2lNqFV30+Oc5sltayKUV1pJVfEFgk4aboIb0iL4t4tXzi+Y21DZbat+vjouM
+HVNq89kKs7D7uPLeFQnbHVB7/S9bkjdgvfBjKNFc4ktNl9S81AqmxAcuhQsnUZ1
azDGOomUFpq2aTMZcbiQAaGQbrwzb5VUsPH1tTwCgVQwnLHmmlR0rwb/9T+7UzFt
X2aG9ITj13SLcqgz5vgwvBfueb5omgkax31Q4f1242ypTl2nS/G1LIz2lQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC3B4qjjqPa1RdebKbcBYwGEV+yaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTGNIaXFPT285clZGMTVzcHR3RmpBWVJYN0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ+Ce0Y9zV6ooIhvrZIn
kN1EnnqtEQRRVxx2/01bPKLs0yfFN4FmNLbcnUvXJxRQUgTjSg76dGoS5jeaiTNx
N+G6ANat3mlfVKVRYVkREejWHvBz7n5bg2K0/x4rpgUDigkQAZzhY2HRCOqqyEqK
ez0ThkXHNYOyvXAH4L0pGWcGtAR5zMUYDVHP8G9LOKzy6aCoNJ7O9LO1kkzO4VrI
//FI869r23somabLH7NDa/tsdb/UBSxAtH0uAXX24wb5DUi1q/81vQ3O8LiRa8fI
NyW6H4UUdPkMn8rJumI9D21c+QZNj3loijbQhc+Wzi7T0fI22QC4+up/RK1xH53X
C1s=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:30:09 2025 by rpki-client