Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O9URTQgWbzeO3vQoPnfoR3jpYtc.roa
File: O9URTQgWbzeO3vQoPnfoR3jpYtc.roa (raw, json)
Hash identifier: DwsnnY8hkFfuEC9Jidwq219fHhPkAAswEest6gf0Ewk=
Subject key identifier: 3B:D5:11:4D:08:16:6F:37:8E:DE:F4:28:3E:77:E8:47:78:E9:62:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADB7F4B3109C0FEE3F98195424954CD95
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O9URTQgWbzeO3vQoPnfoR3jpYtc.roa
Signing time: Thu 28 Sep 2023 11:14:27 +0000
ROA not before: Thu 28 Sep 2023 11:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:7f:4b:31:09:c0:fe:e3:f9:81:95:42:49:54:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 11:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bd5114d08166f378edef4283e77e84778e962d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:23:f9:e9:4d:8b:4e:1f:9b:b9:c9:46:b6:
27:04:6c:90:c9:f1:b0:9f:b7:67:55:ed:22:61:80:
93:f4:bd:3e:63:0e:e9:f9:d8:bf:1e:07:bf:29:cc:
ce:7e:8d:64:66:ff:5c:46:8c:4e:34:3c:9d:04:d4:
56:eb:1e:1d:bd:d2:7a:ab:f0:5b:57:7b:23:f8:4c:
53:b0:e8:d2:8a:c3:c9:f3:05:28:58:e2:74:8e:c3:
1b:9b:98:82:95:51:17:ce:23:2a:41:46:08:1e:ce:
83:bf:53:c2:88:20:8c:74:9e:cf:78:2a:2c:e0:f3:
4f:0d:5c:62:bd:c8:60:ca:e1:3d:7d:ed:6e:65:b9:
fd:30:f9:33:0b:8e:9a:73:af:03:44:d1:f8:8c:a7:
f1:06:70:8d:67:06:fe:d9:f5:7f:72:29:97:9d:3e:
f7:97:1f:7c:5d:8c:c1:59:51:93:d6:39:26:a2:e2:
82:a0:17:df:9b:cc:22:d1:7c:b6:a4:b2:5a:7b:bb:
8f:f2:9b:81:a3:32:7e:40:57:76:5a:9c:cb:e7:5c:
29:2a:7d:50:ad:0f:a2:f3:e8:ed:3a:a2:b1:06:47:
19:ac:79:c9:f6:a9:51:01:12:79:1c:8b:51:e1:05:
c3:0e:a7:db:a7:19:ab:44:f2:a1:41:0b:b7:ff:8b:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:11:4D:08:16:6F:37:8E:DE:F4:28:3E:77:E8:47:78:E9:62:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O9URTQgWbzeO3vQoPnfoR3jpYtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:45:9b:c0:92:a5:11:2b:84:42:14:56:5e:d5:7f:c2:f1:09:
1f:a2:47:e2:4a:39:25:05:82:84:d7:d6:0c:5d:e8:5f:13:b7:
d5:5a:57:33:bf:92:ef:88:cb:80:12:9b:3a:5b:8b:ab:55:06:
56:fb:38:c2:04:72:18:61:c7:2f:0b:50:3d:5e:63:27:32:5e:
8a:32:f3:63:7d:92:f4:6e:0d:d4:cb:1a:a2:25:4e:b3:12:b1:
69:0e:fb:a6:e4:db:73:cd:1f:08:5d:fd:10:09:2a:8d:ad:4f:
80:23:dd:8f:e0:12:f6:5a:b8:1c:9a:36:df:17:d7:76:4b:47:
7f:a7:53:6f:bc:08:65:3b:13:23:5f:7e:19:c2:3f:b7:88:45:
d0:a1:e6:db:70:0e:61:16:6c:8a:cd:03:a4:1d:38:ae:a9:5a:
fe:11:e2:3e:3c:b4:6b:e6:aa:f5:bd:0f:7f:14:82:90:d6:2f:
f9:71:38:71:f7:6f:5b:83:ed:62:d7:55:62:5f:b6:f7:af:62:
0f:d6:fd:e0:9f:f8:dd:fc:8c:7b:4f:93:14:2a:c3:1c:4a:4c:
60:9f:21:f4:a6:65:bd:12:b1:19:61:b5:f7:6b:68:36:4b:7b:
c7:96:35:cf:c5:a6:76:46:ff:cc:7e:4a:5c:e5:71:71:55:23:
06:cf:14:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrbf0sxCcD+4/mBlUJJVM2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI4MTExNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmQ1MTE0ZDA4MTY2ZjM3OGVkZWY0MjgzZTc3ZTg0Nzc4ZTk2MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxsj+elNi04fm7nJRrYnBGyQyfGw
n7dnVe0iYYCT9L0+Yw7p+di/Hge/KczOfo1kZv9cRoxONDydBNRW6x4dvdJ6q/Bb
V3sj+ExTsOjSisPJ8wUoWOJ0jsMbm5iClVEXziMqQUYIHs6Dv1PCiCCMdJ7PeCos
4PNPDVxivchgyuE9fe1uZbn9MPkzC46ac68DRNH4jKfxBnCNZwb+2fV/cimXnT73
lx98XYzBWVGT1jkmouKCoBffm8wi0Xy2pLJae7uP8puBozJ+QFd2WpzL51wpKn1Q
rQ+i8+jtOqKxBkcZrHnJ9qlRARJ5HItR4QXDDqfbpxmrRPKhQQu3/4uvAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDvVEU0IFm83jt70KD536Ed46WLXMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTzlVUlRRZ1diemVPM3ZRb1BuZm9SM2pwWXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADNFm8CSpRErhEIUVl7V
f8LxCR+iR+JKOSUFgoTX1gxd6F8Tt9VaVzO/ku+Iy4ASmzpbi6tVBlb7OMIEchhh
xy8LUD1eYycyXooy82N9kvRuDdTLGqIlTrMSsWkO+6bk23PNHwhd/RAJKo2tT4Aj
3Y/gEvZauByaNt8X13ZLR3+nU2+8CGU7EyNffhnCP7eIRdCh5ttwDmEWbIrNA6Qd
OK6pWv4R4j48tGvmqvW9D38UgpDWL/lxOHH3b1uD7WLXVWJftvevYg/W/eCf+N38
jHtPkxQqwxxKTGCfIfSmZb0SsRlhtfdraDZLe8eWNc/FpnZG/8x+SlzlcXFVIwbP
FFA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:55:51 2025 by rpki-client