Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MOw4Syf0Ufo6eYkBbXDAFxZJ4-s.roa
File: MOw4Syf0Ufo6eYkBbXDAFxZJ4-s.roa (raw, json)
Hash identifier: lR3jG064zhzyLpA3JvBRQal8scaSlOmWhcvWnAGExHI=
Subject key identifier: 30:EC:38:4B:27:F4:51:FA:3A:79:89:01:6D:70:C0:17:16:49:E3:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1FAFC4493C6E925E6F821D1D38E86DD6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MOw4Syf0Ufo6eYkBbXDAFxZJ4-s.roa
Signing time: Thu 30 Nov 2023 10:04:21 +0000
ROA not before: Thu 30 Nov 2023 10:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1faf:6dc1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:af:c4:49:3c:6e:92:5e:6f:82:1d:1d:38:e8:6d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 10:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30ec384b27f451fa3a7989016d70c0171649e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:46:bb:14:e4:33:97:1e:dc:46:69:a4:0f:
15:db:cb:ab:53:78:88:b6:11:27:68:d7:7d:5f:6d:
f3:4d:e1:d0:15:cc:ab:04:9f:7c:42:be:da:c8:fd:
8f:85:86:11:bf:a0:06:64:b2:02:9a:72:12:2a:3e:
d8:c1:3a:bf:56:f1:9c:f2:c5:0f:f9:e1:b5:f0:d5:
36:48:ad:17:aa:a8:e2:b1:99:8f:f2:44:8e:f7:ea:
e1:91:2a:6e:b7:a9:35:df:31:17:10:43:c2:c3:b5:
e9:b4:1b:ff:53:2e:60:d1:55:73:75:02:1c:ca:4e:
12:bf:b0:c7:bb:f4:da:db:d0:03:69:5e:da:1d:b9:
e4:04:13:15:3f:80:fc:b9:b8:6e:26:af:c5:39:3c:
9e:91:d8:95:cc:ee:77:72:71:e4:63:8f:09:86:29:
f5:9b:07:f6:2a:50:07:16:37:99:ee:d2:1f:37:c6:
bd:02:25:59:50:33:e6:a7:d6:42:5d:f1:b1:1c:0a:
e5:f1:5b:aa:bc:6c:65:ee:b9:66:6d:d0:62:d4:7f:
a4:ea:8a:7b:63:a0:ae:aa:17:ae:53:06:ff:3b:47:
0c:68:82:23:74:42:e4:73:b4:7c:d4:64:7d:19:b7:
97:ce:2b:c3:96:44:1f:07:e1:40:df:57:7e:4c:53:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:38:4B:27:F4:51:FA:3A:79:89:01:6D:70:C0:17:16:49:E3:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MOw4Syf0Ufo6eYkBbXDAFxZJ4-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:15:c2:bb:91:df:86:22:92:8b:b4:b1:5c:57:64:16:b3:9d:
55:b3:c8:7c:1f:73:1c:85:c8:6e:83:45:64:4a:01:31:b1:76:
20:0b:e6:9f:47:2b:7c:57:3a:35:04:09:47:4f:8a:9b:6b:cb:
9b:b1:a6:bb:d0:68:1a:4e:a7:b0:f7:59:ee:18:cd:4d:8f:d1:
5e:b8:ec:c9:78:2e:46:d0:7f:f7:65:09:32:1d:ab:00:ad:af:
a9:84:9f:1d:8d:dc:89:25:8a:5c:c4:9e:94:cf:3e:5e:e0:ff:
5b:27:dc:75:c6:25:2f:5b:c7:0a:25:64:68:ef:91:d7:7c:75:
44:36:77:34:d9:45:d5:b1:15:36:0e:ed:db:9f:26:82:cf:aa:
ea:ca:b6:c2:eb:14:be:2d:59:44:db:9a:81:fc:8a:20:c3:52:
38:42:12:ea:55:ac:6b:70:07:47:60:e3:80:99:25:55:66:2c:
71:e3:e2:19:80:24:bb:0e:d8:04:a0:77:5e:4d:98:25:87:66:
7a:18:1e:3d:14:86:82:3d:ef:8a:b4:82:90:23:d4:1f:ec:9d:
d3:e7:75:b8:40:be:50:70:d1:ca:5c:c1:81:90:8d:a3:63:8f:
3c:30:2f:c6:e7:c8:64:f4:e9:95:3e:b3:6f:f4:d4:2e:e4:7a:
ff:3d:80:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwfr8RJPG6SXm+CHR046G3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTMwMTAwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVjMzg0YjI3ZjQ1MWZhM2E3OTg5MDE2ZDcwYzAxNzE2NDllM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SpGuxTkM5ce3EZppA8V28urU3iI
thEnaNd9X23zTeHQFcyrBJ98Qr7ayP2PhYYRv6AGZLICmnISKj7YwTq/VvGc8sUP
+eG18NU2SK0XqqjisZmP8kSO9+rhkSput6k13zEXEEPCw7XptBv/Uy5g0VVzdQIc
yk4Sv7DHu/Ta29ADaV7aHbnkBBMVP4D8ubhuJq/FOTyekdiVzO53cnHkY48Jhin1
mwf2KlAHFjeZ7tIfN8a9AiVZUDPmp9ZCXfGxHArl8VuqvGxl7rlmbdBi1H+k6op7
Y6CuqheuUwb/O0cMaIIjdELkc7R81GR9GbeXzivDlkQfB+FA31d+TFONAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDDsOEsn9FH6OnmJAW1wwBcWSePrMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTU93NFN5ZjBVZm82ZVlrQmJYREFGeFpKNC1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADoVwruR34Yikou0sVxX
ZBaznVWzyHwfcxyFyG6DRWRKATGxdiAL5p9HK3xXOjUECUdPiptry5uxprvQaBpO
p7D3We4YzU2P0V647Ml4LkbQf/dlCTIdqwCtr6mEnx2N3IklilzEnpTPPl7g/1sn
3HXGJS9bxwolZGjvkdd8dUQ2dzTZRdWxFTYO7dufJoLPqurKtsLrFL4tWUTbmoH8
iiDDUjhCEupVrGtwB0dg44CZJVVmLHHj4hmAJLsO2ASgd15NmCWHZnoYHj0UhoI9
74q0gpAj1B/sndPndbhAvlBw0cpcwYGQjaNjjzwwL8bnyGT06ZU+s2/01C7kev89
gD8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:08:52 2025 by rpki-client