Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OEGMyfXHJLQk-rNRfFiaJtL1OUw.roa
File: OEGMyfXHJLQk-rNRfFiaJtL1OUw.roa (raw, json)
Hash identifier: o56aBWeoxFQQHaPyRFXfpnrPC82/I5+PX2HycweNu4Y=
Subject key identifier: 38:41:8C:C9:F5:C7:24:B4:24:FA:B3:51:7C:58:9A:26:D2:F5:39:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C70D5C21D9E49ABD367F10BE31D971B3C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OEGMyfXHJLQk-rNRfFiaJtL1OUw.roa
Signing time: Sat 16 Dec 2023 04:15:06 +0000
ROA not before: Sat 16 Dec 2023 04:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:70:d5:c2:1d:9e:49:ab:d3:67:f1:0b:e3:1d:97:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 04:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38418cc9f5c724b424fab3517c589a26d2f5394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:07:ac:61:98:60:aa:e7:41:f9:b0:81:8e:3e:
30:97:56:be:68:d9:0c:5a:ed:a1:3e:a8:1d:61:76:
73:88:8a:92:ad:ce:d7:bb:d4:06:f0:de:ba:b8:f1:
8b:1d:03:d0:40:07:90:b3:e9:d3:c6:dc:91:ef:c1:
08:88:84:39:3d:42:e4:fc:6d:fd:cd:cc:04:5f:9a:
1a:06:d2:a1:9f:04:ab:ed:78:1b:fd:82:d9:cf:d0:
92:1e:38:04:b4:de:26:76:83:70:60:4d:34:bf:49:
9b:43:6f:9b:f7:49:84:e7:34:26:b3:71:9e:ca:45:
09:0c:a3:ac:2e:83:f8:8a:17:ca:1a:3b:76:70:63:
3d:06:c1:f3:95:6d:fc:59:49:8a:85:f0:7a:4a:f8:
05:02:d7:18:09:49:f9:89:24:ec:50:2b:0d:2f:ad:
69:0b:84:82:d5:23:3d:a7:9f:23:86:ff:78:f6:b9:
c6:ee:7e:42:43:c3:b0:b9:e7:9e:60:b7:8f:31:0a:
dc:5a:6f:aa:59:14:25:e1:2c:65:c4:ee:8d:86:d9:
24:cb:ff:80:95:34:93:86:3b:44:c1:f7:43:66:91:
22:08:b0:20:43:dd:c4:bd:67:fa:f0:e2:b5:9a:77:
5f:d3:d4:7c:28:27:18:a1:e9:c1:2a:23:b9:d2:c1:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:8C:C9:F5:C7:24:B4:24:FA:B3:51:7C:58:9A:26:D2:F5:39:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OEGMyfXHJLQk-rNRfFiaJtL1OUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:b6:b0:2a:23:84:be:41:2c:6c:27:79:39:7b:95:2f:1c:13:
e2:bd:5e:a3:b0:17:68:26:d8:82:d8:03:5a:16:b8:f1:d7:3c:
03:bd:f1:27:72:d7:f0:5b:7c:aa:27:b1:26:01:f4:bc:06:f8:
f5:2f:ea:65:cc:7c:6c:1a:e4:70:8c:5a:35:88:47:cd:62:26:
33:83:5f:b6:04:d4:40:d1:11:f1:39:32:55:a2:f4:54:1a:bb:
7c:fe:17:72:eb:0b:ea:fc:98:0f:98:0e:60:cb:84:6b:cc:78:
f9:8f:4a:16:2b:ae:b6:3f:4c:d3:70:04:3d:b9:eb:3e:85:91:
43:16:60:f9:44:e0:bb:ef:0c:92:f8:e7:8b:a1:e3:f9:a3:14:
bd:d7:e3:89:65:70:8c:03:eb:fc:89:3c:00:f4:ce:69:87:8e:
bb:34:e9:75:81:77:e1:0d:51:90:ca:eb:33:c7:78:e5:e4:94:
fb:ce:d8:fb:b7:62:a2:8b:c7:0a:c5:ae:d2:2f:f1:d5:8a:96:
0c:b5:ee:75:27:79:19:5e:95:2f:b2:72:dd:b0:43:a1:c8:15:
5b:e3:cf:2e:f3:46:80:97:3e:f3:59:d8:34:0f:ff:6c:df:07:
99:d6:3b:33:43:62:e2:e1:87:23:d3:50:00:ca:f5:ac:f0:f7:
a8:12:80:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxw1cIdnkmr02fxC+Mdlxs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE2MDQxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQxOGNjOWY1YzcyNGI0MjRmYWIzNTE3YzU4OWEyNmQyZjUzOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwesYZhgqudB+bCBjj4wl1a+aNkM
Wu2hPqgdYXZziIqSrc7Xu9QG8N66uPGLHQPQQAeQs+nTxtyR78EIiIQ5PULk/G39
zcwEX5oaBtKhnwSr7Xgb/YLZz9CSHjgEtN4mdoNwYE00v0mbQ2+b90mE5zQms3Ge
ykUJDKOsLoP4ihfKGjt2cGM9BsHzlW38WUmKhfB6SvgFAtcYCUn5iSTsUCsNL61p
C4SC1SM9p58jhv949rnG7n5CQ8OwueeeYLePMQrcWm+qWRQl4SxlxO6Nhtkky/+A
lTSThjtEwfdDZpEiCLAgQ93EvWf68OK1mndf09R8KCcYoenBKiO50sGghwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDhBjMn1xyS0JPqzUXxYmibS9TlMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT0VHTXlmWEhKTFFrLXJOUmZGaWFKdEwxT1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANG2sCojhL5BLGwneTl7
lS8cE+K9XqOwF2gm2ILYA1oWuPHXPAO98Sdy1/BbfKonsSYB9LwG+PUv6mXMfGwa
5HCMWjWIR81iJjODX7YE1EDREfE5MlWi9FQau3z+F3LrC+r8mA+YDmDLhGvMePmP
ShYrrrY/TNNwBD256z6FkUMWYPlE4LvvDJL454uh4/mjFL3X44llcIwD6/yJPAD0
zmmHjrs06XWBd+ENUZDK6zPHeOXklPvO2Pu3YqKLxwrFrtIv8dWKlgy17nUneRle
lS+yct2wQ6HIFVvjzy7zRoCXPvNZ2DQP/2zfB5nWOzNDYuLhhyPTUADK9azw96gS
gFI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:25:14 2025 by rpki-client