Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MYYUn4rdcWHC4bsYjwPmz_Lrbqo.roa
File: MYYUn4rdcWHC4bsYjwPmz_Lrbqo.roa (raw, json)
Hash identifier: lO1XLZ6YZMvqhCyGVKPUGKu8ATAx3dAwTBJd5+GNpd0=
Subject key identifier: 31:86:14:9F:8A:DD:71:61:C2:E1:BB:18:8F:03:E6:CF:F2:EB:6E:AA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C15336F97090BA9D6C3579380EB0EE33E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MYYUn4rdcWHC4bsYjwPmz_Lrbqo.roa
Signing time: Tue 28 Nov 2023 09:12:21 +0000
ROA not before: Tue 28 Nov 2023 09:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:33:6f:97:09:0b:a9:d6:c3:57:93:80:eb:0e:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 09:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3186149f8add7161c2e1bb188f03e6cff2eb6eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:c1:45:14:5c:fb:e2:17:f9:be:cd:d4:9a:
9b:8f:11:d9:43:80:6c:b5:d3:81:1d:c6:9f:af:71:
24:50:d7:7a:ba:58:12:9e:b1:d4:44:77:a5:7f:3a:
59:c2:19:e4:57:13:3a:ab:4e:25:db:c4:0b:ea:96:
96:a2:d4:2e:46:08:90:7b:83:6a:a5:c2:3f:ec:86:
6e:6c:c4:cb:09:57:99:2c:12:f3:19:41:4a:a0:c3:
33:22:dd:fb:3a:ea:94:15:57:d8:26:45:52:ce:f4:
06:24:d6:5f:62:dc:06:17:80:f9:9e:ed:bf:d4:74:
59:22:49:45:cb:79:48:24:1b:11:94:f2:b3:bc:aa:
40:13:9a:ef:92:9f:6e:7f:1f:b5:06:8c:dc:5d:b4:
41:6c:2e:6c:7e:fa:83:7b:82:30:4d:74:8b:c6:45:
aa:97:ab:18:92:aa:55:ad:a3:de:f1:2e:f2:af:89:
4d:54:15:cd:2d:8f:1b:ad:8f:f7:bb:d8:24:ec:4e:
ac:fd:86:eb:5a:1d:31:76:d2:37:a6:45:8a:87:7c:
c1:8d:9e:83:31:2d:a5:8b:93:0c:63:dd:7f:4c:2d:
a8:b0:62:06:88:d8:b7:54:f7:08:4f:84:76:fa:2a:
66:95:be:95:21:99:26:1e:09:21:4e:bc:94:c7:33:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:14:9F:8A:DD:71:61:C2:E1:BB:18:8F:03:E6:CF:F2:EB:6E:AA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MYYUn4rdcWHC4bsYjwPmz_Lrbqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:a9:ae:86:04:a1:9b:dd:0f:25:75:85:bf:ad:d6:de:36:b9:
d2:6d:c4:90:57:ea:bd:6e:0c:1d:10:07:33:ab:31:03:77:2a:
63:2e:64:18:ec:d7:b7:60:4f:59:26:c1:9a:41:10:eb:83:9f:
91:4b:16:df:45:fa:cc:05:74:88:fb:c0:a6:de:76:18:60:13:
c0:08:4f:b0:71:28:a5:04:c9:47:ac:b6:62:b9:25:86:e1:7e:
90:9f:c5:f4:c9:74:77:ce:dc:d1:4b:78:3a:ba:43:68:f6:0c:
22:be:c5:42:94:59:30:e4:cb:70:92:48:cb:48:0c:62:e5:5e:
c5:37:0d:28:f7:b4:e1:59:83:a2:7e:19:b0:4c:85:40:cc:d6:
ed:ff:1f:9a:9b:09:25:07:4e:fc:55:2b:e3:ee:20:40:95:a3:
ed:7d:10:6b:0c:b6:39:5f:b0:4b:64:55:b0:c4:22:97:5c:aa:
ec:f4:21:d2:16:23:d4:ea:f2:e0:7d:5d:81:47:cd:7c:d7:8f:
26:ca:07:f7:79:22:8f:78:fd:ba:93:6a:be:e2:6c:71:ef:8e:
56:1d:04:3e:72:ba:df:b1:36:4f:b4:e0:64:4d:53:4a:25:42:
66:ff:03:dd:72:58:a6:5c:d2:a1:cb:ff:c0:e0:af:6a:db:f9:
fe:d5:ce:55
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwVM2+XCQup1sNXk4DrDuM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MDkxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg2MTQ5ZjhhZGQ3MTYxYzJlMWJiMTg4ZjAzZTZjZmYyZWI2ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbXBRRRc++IX+b7N1JqbjxHZQ4Bs
tdOBHcafr3EkUNd6ulgSnrHURHelfzpZwhnkVxM6q04l28QL6paWotQuRgiQe4Nq
pcI/7IZubMTLCVeZLBLzGUFKoMMzIt37OuqUFVfYJkVSzvQGJNZfYtwGF4D5nu2/
1HRZIklFy3lIJBsRlPKzvKpAE5rvkp9ufx+1BozcXbRBbC5sfvqDe4IwTXSLxkWq
l6sYkqpVraPe8S7yr4lNVBXNLY8brY/3u9gk7E6s/YbrWh0xdtI3pkWKh3zBjZ6D
MS2li5MMY91/TC2osGIGiNi3VPcIT4R2+ipmlb6VIZkmHgkhTryUxzM3wwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDGGFJ+K3XFhwuG7GI8D5s/y626qMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTVlZVW40cmRjV0hDNGJzWWp3UG16X0xyYnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHOproYEoZvdDyV1hb+t
1t42udJtxJBX6r1uDB0QBzOrMQN3KmMuZBjs17dgT1kmwZpBEOuDn5FLFt9F+swF
dIj7wKbedhhgE8AIT7BxKKUEyUestmK5JYbhfpCfxfTJdHfO3NFLeDq6Q2j2DCK+
xUKUWTDky3CSSMtIDGLlXsU3DSj3tOFZg6J+GbBMhUDM1u3/H5qbCSUHTvxVK+Pu
IECVo+19EGsMtjlfsEtkVbDEIpdcquz0IdIWI9Tq8uB9XYFHzXzXjybKB/d5Io94
/bqTar7ibHHvjlYdBD5yut+xNk+04GRNU0olQmb/A91yWKZc0qHL/8Dgr2rb+f7V
zlU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:55 2025 by rpki-client