Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lq-QfylPxkdxYbgGa6iIykReKP4.roa
File: Lq-QfylPxkdxYbgGa6iIykReKP4.roa (raw, json)
Hash identifier: 1ok6+YWD8/GmUfIYUcL7orq02lgSfBolLAsNwcaDrEY=
Subject key identifier: 2E:AF:90:7F:29:4F:C6:47:71:61:B8:06:6B:A8:88:CA:44:5E:28:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8E76DB920E38DBBC0912D2E6493368F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lq-QfylPxkdxYbgGa6iIykReKP4.roa
Signing time: Thu 02 Nov 2023 05:17:15 +0000
ROA not before: Thu 02 Nov 2023 05:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:76:db:92:0e:38:db:bc:09:12:d2:e6:49:33:68:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 05:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eaf907f294fc6477161b8066ba888ca445e28fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:fe:79:f5:d1:fd:11:ae:0f:8b:10:3f:65:
15:eb:56:15:98:b3:60:c0:de:e7:cf:7e:63:82:c2:
e0:d0:ec:22:93:ce:ab:78:f5:7e:32:1b:ef:7d:50:
55:0a:45:70:f6:2e:ea:94:f9:36:bc:f8:03:f4:0b:
d9:d8:ba:8d:d7:94:d9:5e:ce:8f:7d:e3:ca:a7:45:
d2:5c:2c:90:7c:0d:c6:71:b4:e4:26:ac:2d:4f:f3:
be:78:f1:6b:59:b7:33:2c:91:1d:d2:b7:cf:b2:32:
2f:40:8b:d3:0f:af:b3:a7:59:4d:93:aa:0f:29:d5:
4e:9f:12:3d:69:79:94:d3:2f:a9:6c:10:3e:00:a0:
2d:1c:37:51:c9:ef:a6:17:e3:e6:e7:16:55:ea:99:
9c:89:64:1e:0c:1e:40:7b:20:46:57:fc:ad:a5:a6:
d3:b8:a3:d8:00:93:81:71:a9:b5:f7:41:b8:dc:99:
51:c9:fd:12:e8:82:e8:72:3c:05:06:66:f7:a9:db:
16:9d:4c:d6:c7:0d:60:f0:4f:2a:15:e6:ff:b9:a1:
a2:94:e5:ea:7e:2e:18:ca:a7:45:51:31:4b:7e:a3:
cf:30:81:27:55:b1:23:f4:a7:50:72:ac:44:4f:42:
82:15:b1:20:76:fa:5f:d2:a8:02:d2:ba:65:18:62:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:90:7F:29:4F:C6:47:71:61:B8:06:6B:A8:88:CA:44:5E:28:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lq-QfylPxkdxYbgGa6iIykReKP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:de:26:bc:dd:5a:2f:0a:61:6a:cf:b6:a3:c4:e4:9f:9f:19:
71:a1:78:5c:e5:72:01:38:e3:c9:92:15:45:df:4a:40:ea:90:
04:50:55:15:75:a9:48:2f:6a:3c:02:d2:79:8f:2c:4e:97:a5:
e2:03:5b:5b:5a:83:71:f8:ee:86:7e:6e:77:3b:78:9b:cb:87:
ed:a3:f9:e3:41:39:9a:1b:05:08:d9:83:59:6f:45:d0:2a:91:
f2:85:2a:8e:7f:19:82:0e:87:4e:63:b2:1d:ec:18:41:45:69:
6c:f3:b7:5a:b0:48:6d:04:65:23:be:e5:ff:75:2f:96:7f:58:
70:60:c0:72:c1:52:00:d0:a6:8f:29:84:46:ec:fa:06:74:33:
66:5b:c5:8c:43:84:5b:16:9f:30:84:46:f7:75:71:0f:61:5d:
57:df:89:16:74:8d:2b:54:8d:e1:a5:2b:1c:35:a0:07:9f:5f:
48:65:e0:39:50:b3:fa:d4:e5:1a:7a:ac:df:c0:52:85:19:0a:
ac:eb:4e:9b:2c:07:76:f7:59:03:87:40:80:72:0c:3e:13:0f:
5d:12:cf:5b:d9:a7:6c:78:33:a7:73:da:6e:6f:51:9f:62:06:
1f:52:73:89:57:46:a2:40:6b:d6:f2:9b:7c:ca:2a:b3:e7:14:
24:c0:0c:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuOdtuSDjjbvAkS0uZJM2jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAyMDUxNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWFmOTA3ZjI5NGZjNjQ3NzE2MWI4MDY2YmE4ODhjYTQ0NWUyOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLj+efXR/RGuD4sQP2UV61YVmLNg
wN7nz35jgsLg0Owik86rePV+MhvvfVBVCkVw9i7qlPk2vPgD9AvZ2LqN15TZXs6P
fePKp0XSXCyQfA3GcbTkJqwtT/O+ePFrWbczLJEd0rfPsjIvQIvTD6+zp1lNk6oP
KdVOnxI9aXmU0y+pbBA+AKAtHDdRye+mF+Pm5xZV6pmciWQeDB5AeyBGV/ytpabT
uKPYAJOBcam190G43JlRyf0S6ILocjwFBmb3qdsWnUzWxw1g8E8qFeb/uaGilOXq
fi4YyqdFUTFLfqPPMIEnVbEj9KdQcqxET0KCFbEgdvpf0qgC0rplGGI89wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC6vkH8pT8ZHcWG4BmuoiMpEXij+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTHEtUWZ5bFB4a2R4WWJnR2E2aUl5a1JlS1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAL/eJrzdWi8KYWrPtqPE
5J+fGXGheFzlcgE448mSFUXfSkDqkARQVRV1qUgvajwC0nmPLE6XpeIDW1tag3H4
7oZ+bnc7eJvLh+2j+eNBOZobBQjZg1lvRdAqkfKFKo5/GYIOh05jsh3sGEFFaWzz
t1qwSG0EZSO+5f91L5Z/WHBgwHLBUgDQpo8phEbs+gZ0M2ZbxYxDhFsWnzCERvd1
cQ9hXVffiRZ0jStUjeGlKxw1oAefX0hl4DlQs/rU5Rp6rN/AUoUZCqzrTpssB3b3
WQOHQIByDD4TD10Sz1vZp2x4M6dz2m5vUZ9iBh9Sc4lXRqJAa9bym3zKKrPnFCTA
DPI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:54 2025 by rpki-client