Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OIwk6zZ7mesvciQuCpGYum00CuA.roa
File: OIwk6zZ7mesvciQuCpGYum00CuA.roa (raw, json)
Hash identifier: pof2uQFvchMRWVV7Hfn0bmZLqFw9GfoewfHSpsHPSLA=
Subject key identifier: 38:8C:24:EB:36:7B:99:EB:2F:72:24:2E:0A:91:98:BA:6D:34:0A:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9D10F5E7C6F17A74A9F25FF6C1C3C0B2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OIwk6zZ7mesvciQuCpGYum00CuA.roa
Signing time: Sun 05 Nov 2023 01:20:16 +0000
ROA not before: Sun 05 Nov 2023 01:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9d:10:f5:e7:c6:f1:7a:74:a9:f2:5f:f6:c1:c3:c0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 01:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388c24eb367b99eb2f72242e0a9198ba6d340ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:fe:89:b1:c7:60:a0:62:03:50:fc:c5:c8:
cb:27:41:b2:2a:96:e7:59:92:38:1d:70:93:ea:74:
7b:1a:cd:d4:a4:51:9d:07:5d:86:7c:d4:ed:84:84:
e9:ce:cc:25:19:b2:5e:e0:3d:a3:a2:e1:02:60:10:
89:7e:66:66:a4:68:ed:5e:86:10:80:6b:ea:c1:3c:
f5:74:eb:c4:97:df:96:f3:12:7d:30:65:44:a4:86:
49:e1:bb:b4:b5:e1:a9:46:a3:9a:c8:33:72:ec:71:
1a:82:b8:05:16:fb:21:02:ed:01:3a:53:03:0e:f2:
2f:22:b7:cd:3b:d1:bb:56:c9:5b:7e:72:0b:9c:5f:
f4:5b:48:5a:11:a3:71:24:e2:a3:74:f2:9c:2e:74:
7b:d0:c3:29:03:d1:78:52:6d:ea:de:cf:82:f3:e7:
53:28:6c:ad:13:1a:19:b8:2d:ba:26:45:aa:f4:16:
03:78:da:61:1d:8c:c0:ba:52:14:c5:e1:2b:c4:80:
c9:67:37:ce:b2:08:17:af:90:7c:bf:f8:63:23:c5:
d8:b0:ab:9a:1a:fc:9e:e9:db:3d:8d:5c:47:68:82:
13:fb:1b:02:d5:c1:f6:da:12:51:4b:d2:c1:20:8c:
fd:87:01:26:22:b1:8a:18:0a:2a:b2:b0:10:ad:33:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:24:EB:36:7B:99:EB:2F:72:24:2E:0A:91:98:BA:6D:34:0A:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OIwk6zZ7mesvciQuCpGYum00CuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:4c:c8:d0:53:70:f6:a9:e5:8c:9a:f9:ed:67:4c:6e:0a:d1:
99:77:e3:00:75:5d:5e:1f:cd:1f:de:84:96:91:3f:a3:e1:f9:
77:fc:26:d9:fd:fb:a9:6e:77:76:7b:1f:45:da:e3:ba:52:2b:
86:2d:b9:f2:dd:4b:8b:6e:0c:8e:42:23:ca:3d:17:29:de:ca:
6f:ac:54:74:30:9d:0a:41:c9:9c:3a:89:5b:cd:70:18:74:37:
7a:40:a8:43:cd:e5:f4:1a:32:93:e2:be:99:7b:a9:15:d9:47:
3c:a4:9e:39:cc:69:a9:45:21:86:01:9c:52:a2:63:2a:47:54:
ce:2b:2c:1a:68:79:52:dd:0e:22:a9:68:d7:26:8d:51:94:0c:
4d:00:cd:7f:ab:16:c3:ec:4d:8e:81:13:84:8f:e7:ca:e8:cb:
2d:2d:eb:75:86:f7:15:9b:98:85:63:a2:f0:38:5f:65:5e:aa:
b3:d8:2a:8d:1e:90:19:18:9b:41:3b:90:d9:da:b6:59:0f:c3:
19:0e:7e:5d:54:4c:12:31:34:93:eb:a4:10:d7:75:5d:0d:f7:
ba:72:5e:0a:69:37:b9:ea:16:8f:eb:56:e4:70:5a:50:bd:fa:
66:cb:54:e5:09:73:c6:2c:4f:e4:b5:ab:2a:a9:8b:58:2f:be:
69:7b:17:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYudEPXnxvF6dKnyX/bBw8CyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA1MDEyMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODhjMjRlYjM2N2I5OWViMmY3MjI0MmUwYTkxOThiYTZkMzQwYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS3+ibHHYKBiA1D8xcjLJ0GyKpbn
WZI4HXCT6nR7Gs3UpFGdB12GfNTthITpzswlGbJe4D2jouECYBCJfmZmpGjtXoYQ
gGvqwTz1dOvEl9+W8xJ9MGVEpIZJ4bu0teGpRqOayDNy7HEagrgFFvshAu0BOlMD
DvIvIrfNO9G7VslbfnILnF/0W0haEaNxJOKjdPKcLnR70MMpA9F4Um3q3s+C8+dT
KGytExoZuC26JkWq9BYDeNphHYzAulIUxeErxIDJZzfOsggXr5B8v/hjI8XYsKua
Gvye6ds9jVxHaIIT+xsC1cH22hJRS9LBIIz9hwEmIrGKGAoqsrAQrTNO8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDiMJOs2e5nrL3IkLgqRmLptNArgMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT0l3azZ6WjdtZXN2Y2lRdUNwR1l1bTAwQ3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVMyNBTcPap5Yya+e1n
TG4K0Zl34wB1XV4fzR/ehJaRP6Ph+Xf8Jtn9+6lud3Z7H0Xa47pSK4YtufLdS4tu
DI5CI8o9Fyneym+sVHQwnQpByZw6iVvNcBh0N3pAqEPN5fQaMpPivpl7qRXZRzyk
njnMaalFIYYBnFKiYypHVM4rLBpoeVLdDiKpaNcmjVGUDE0AzX+rFsPsTY6BE4SP
58royy0t63WG9xWbmIVjovA4X2VeqrPYKo0ekBkYm0E7kNnatlkPwxkOfl1UTBIx
NJPrpBDXdV0N97pyXgppN7nqFo/rVuRwWlC9+mbLVOUJc8YsT+S1qyqpi1gvvml7
Fzo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:03:22 2025 by rpki-client