Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O2Gkqj4ebb9sqHupwuiFNNIAixI.roa
File: O2Gkqj4ebb9sqHupwuiFNNIAixI.roa (raw, json)
Hash identifier: XQiMEsas0lOLcFkSuctcFZc3cMmHagOiI9072CUQz8Q=
Subject key identifier: 3B:61:A4:AA:3E:1E:6D:BF:6C:A8:7B:A9:C2:E8:85:34:D2:00:8B:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B194C0BAAC9807D5D6DA132FBFB18CCC7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O2Gkqj4ebb9sqHupwuiFNNIAixI.roa
Signing time: Tue 10 Oct 2023 11:14:55 +0000
ROA not before: Tue 10 Oct 2023 11:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:4c:0b:aa:c9:80:7d:5d:6d:a1:32:fb:fb:18:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 11:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b61a4aa3e1e6dbf6ca87ba9c2e88534d2008b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:6d:15:aa:cb:42:7d:9a:14:cd:45:46:4b:
ce:46:76:ae:47:9c:e3:92:1d:d6:6d:d6:31:4c:4c:
71:05:6b:41:a4:66:5c:71:5e:af:87:9f:1b:0b:68:
e4:b1:9e:5b:d1:88:8b:e4:e8:ab:40:59:46:12:25:
2c:86:e8:46:05:df:38:8a:de:23:38:a3:14:4f:a8:
20:ce:bf:3b:f7:c6:dc:2d:fa:9e:83:d2:93:44:a9:
71:6a:6a:af:1d:65:d1:c9:1b:45:bf:38:aa:da:c3:
90:d8:8d:49:1f:53:c1:1b:16:a4:de:8a:d5:d1:c2:
8c:4c:c8:eb:bd:39:26:e2:96:ab:75:6e:53:61:6a:
3b:7c:5d:a0:f8:7b:13:08:70:b9:43:21:29:a1:23:
ea:00:b4:1c:f1:46:28:bd:8a:23:74:01:52:94:5b:
f0:85:f5:08:66:58:e6:25:f3:f7:02:32:21:c4:3d:
22:ac:46:a4:9f:5d:ea:a5:d5:29:13:cf:53:df:e2:
f2:c4:be:be:4a:99:e0:20:a5:ad:28:bd:20:38:b4:
07:ec:b2:16:93:a0:13:cf:d8:5e:bc:b6:a0:51:5a:
76:9b:16:a6:fa:c9:37:f7:09:5a:08:70:e6:de:05:
d3:36:93:7f:14:58:3d:87:f6:9a:d0:bb:fe:56:83:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:A4:AA:3E:1E:6D:BF:6C:A8:7B:A9:C2:E8:85:34:D2:00:8B:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O2Gkqj4ebb9sqHupwuiFNNIAixI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:1b:ff:58:75:04:83:02:80:ee:3f:92:73:f3:d4:df:f9:5a:
5e:07:7f:bd:7e:30:d0:47:71:2d:e3:4e:b0:91:35:45:4c:ad:
5e:91:26:a6:4c:c1:79:e4:e7:e2:2f:6e:24:96:27:8d:7e:e4:
54:77:b1:ad:17:1a:51:19:e2:8b:37:6a:40:a4:f8:22:bd:0a:
86:8e:e8:76:cf:f6:be:44:22:6c:22:fd:af:c5:4f:81:99:33:
c9:ae:54:df:8f:3c:25:2a:a4:1f:77:82:5b:4e:4f:53:65:dc:
df:4b:b9:8f:b3:d1:8b:eb:f1:6b:2d:fc:3d:2a:ac:2c:14:71:
05:1c:3f:2d:cd:6a:8c:b9:df:c7:00:8a:0b:c8:70:3d:d4:90:
c5:25:ec:8f:cd:72:14:bf:27:a9:ab:3e:a4:55:40:e7:9b:7e:
07:54:28:d8:14:cf:7b:e4:95:c5:a8:e6:72:5f:65:d6:ce:6f:
5f:69:b5:03:9c:c9:a5:61:22:81:87:f4:8b:5f:8d:74:24:df:
01:b9:2a:84:29:97:e9:66:ed:94:d8:e6:5c:53:6d:5e:41:90:
ca:6f:55:1a:8b:41:0d:34:5e:0f:6a:37:d6:59:2a:6f:15:cf:
05:05:31:de:a1:68:c2:cc:a4:5f:02:70:34:e6:da:66:2c:f9:
1f:b3:a4:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsZTAuqyYB9XW2hMvv7GMzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEwMTExNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjYxYTRhYTNlMWU2ZGJmNmNhODdiYTljMmU4ODUzNGQyMDA4YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3xtFarLQn2aFM1FRkvORnauR5zj
kh3WbdYxTExxBWtBpGZccV6vh58bC2jksZ5b0YiL5OirQFlGEiUshuhGBd84it4j
OKMUT6ggzr8798bcLfqeg9KTRKlxamqvHWXRyRtFvziq2sOQ2I1JH1PBGxak3orV
0cKMTMjrvTkm4pardW5TYWo7fF2g+HsTCHC5QyEpoSPqALQc8UYovYojdAFSlFvw
hfUIZljmJfP3AjIhxD0irEakn13qpdUpE89T3+LyxL6+SpngIKWtKL0gOLQH7LIW
k6ATz9hevLagUVp2mxam+sk39wlaCHDm3gXTNpN/FFg9h/aa0Lv+VoOxjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDthpKo+Hm2/bKh7qcLohTTSAIsSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTzJHa3FqNGViYjlzcUh1cHd1aUZOTklBaXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAob/1h1BIMCgO4/knPz
1N/5Wl4Hf71+MNBHcS3jTrCRNUVMrV6RJqZMwXnk5+IvbiSWJ41+5FR3sa0XGlEZ
4os3akCk+CK9CoaO6HbP9r5EImwi/a/FT4GZM8muVN+PPCUqpB93gltOT1Nl3N9L
uY+z0Yvr8Wst/D0qrCwUcQUcPy3Naoy538cAigvIcD3UkMUl7I/NchS/J6mrPqRV
QOebfgdUKNgUz3vklcWo5nJfZdbOb19ptQOcyaVhIoGH9ItfjXQk3wG5KoQpl+lm
7ZTY5lxTbV5BkMpvVRqLQQ00Xg9qN9ZZKm8VzwUFMd6haMLMpF8CcDTm2mYs+R+z
pGI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:56 2025 by rpki-client