Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Om_WK3d2v8hnx4LGCYDF4wVy3_Q.roa
File: Om_WK3d2v8hnx4LGCYDF4wVy3_Q.roa (raw, json)
Hash identifier: A2Zrb//axNo5fyHDD/xuIm/9gfoGvWgj2H/AGrxr6Ys=
Subject key identifier: 3A:6F:D6:2B:77:76:BF:C8:67:C7:82:C6:09:80:C5:E3:05:72:DF:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5713BDBA23810B6F3380D714A92951B3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Om_WK3d2v8hnx4LGCYDF4wVy3_Q.roa
Signing time: Mon 11 Dec 2023 04:12:40 +0000
ROA not before: Mon 11 Dec 2023 04:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:13:bd:ba:23:81:0b:6f:33:80:d7:14:a9:29:51:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 04:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a6fd62b7776bfc867c782c60980c5e30572dff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:36:2f:7e:26:85:1d:42:df:bc:44:11:2b:
89:80:ea:ca:4c:d3:5c:5c:be:a2:47:17:50:5b:d0:
b2:26:39:8b:a6:d5:d4:e4:9d:33:56:47:82:51:82:
01:0c:86:b8:8d:ec:67:16:27:d0:39:0b:0c:44:dd:
a3:f9:57:29:5c:00:82:09:c1:0b:51:b0:05:f5:e3:
19:18:32:a7:b5:71:c6:33:e4:fb:e7:a3:3b:66:64:
0c:29:a8:d5:f3:3d:fb:51:57:59:90:4c:76:eb:90:
16:ad:53:2c:bc:ef:68:45:01:83:6e:61:c6:49:73:
f2:58:d3:76:84:dd:4a:c3:37:73:74:b4:ca:26:00:
0e:f9:af:8f:c3:ab:64:c9:a2:ac:fc:c1:bd:ec:9c:
ae:4b:13:0e:90:c8:c3:39:13:cc:e3:5e:4b:3c:72:
8e:36:97:31:3a:57:75:7c:af:42:f7:6f:58:c3:be:
c7:9d:a5:7e:4c:b8:f0:52:7e:b8:6f:c6:84:a2:ff:
34:e2:58:95:d0:7a:5d:6c:b7:47:e6:61:ac:1e:ac:
fe:2e:7b:66:57:17:53:03:88:bd:af:b1:36:eb:61:
18:d9:b8:8d:3a:9b:ef:84:0c:b6:9d:ca:c0:3a:eb:
7e:09:77:67:76:ea:d5:b9:d6:f7:3b:c2:b2:36:ce:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:D6:2B:77:76:BF:C8:67:C7:82:C6:09:80:C5:E3:05:72:DF:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Om_WK3d2v8hnx4LGCYDF4wVy3_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:63:3a:3a:a1:ef:2d:06:79:49:38:ef:e0:7a:3f:bf:37:e8:
2e:14:86:8d:b3:73:9d:96:58:c7:b7:49:71:9d:98:bc:35:74:
39:20:5c:64:23:f0:5a:a3:f3:32:00:8e:e2:ac:8e:24:10:fe:
b2:2e:fa:18:2e:4d:4c:f3:dc:de:0e:dd:61:64:3d:de:ed:8c:
5a:9c:97:75:7e:af:4f:f3:29:1a:a1:6d:3e:14:be:6b:53:99:
f5:24:2e:ff:89:6d:75:d1:a8:8b:ff:a9:ca:28:75:9b:3f:91:
9a:14:54:2b:3c:8a:a3:ed:71:07:9d:d0:e2:bb:e9:2d:01:87:
60:44:bf:e3:8a:8b:49:a3:3f:ff:8d:95:c1:36:3f:16:a7:07:
4f:bf:44:26:2e:00:f2:63:51:7b:de:06:ca:9e:2b:79:fd:b1:
d1:81:32:a4:b4:4b:1b:df:a6:f0:30:b4:f4:e7:bc:37:fb:93:
30:65:a7:94:27:dd:30:de:85:47:36:42:09:a2:ff:1a:7b:8d:
29:56:82:45:8b:f4:cd:d2:21:c8:0a:ca:09:6e:04:53:20:48:
47:a4:58:e9:33:4b:57:85:3e:0c:72:41:50:0d:8c:1f:e8:9d:
3b:04:d8:14:86:ac:8e:89:c6:40:2b:d5:da:23:91:83:51:99:
36:c6:42:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxXE726I4ELbzOA1xSpKVGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMDQxMjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZmZDYyYjc3NzZiZmM4NjdjNzgyYzYwOTgwYzVlMzA1NzJkZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2w2L34mhR1C37xEESuJgOrKTNNc
XL6iRxdQW9CyJjmLptXU5J0zVkeCUYIBDIa4jexnFifQOQsMRN2j+VcpXACCCcEL
UbAF9eMZGDKntXHGM+T756M7ZmQMKajV8z37UVdZkEx265AWrVMsvO9oRQGDbmHG
SXPyWNN2hN1KwzdzdLTKJgAO+a+Pw6tkyaKs/MG97JyuSxMOkMjDORPM415LPHKO
NpcxOld1fK9C929Yw77HnaV+TLjwUn64b8aEov804liV0HpdbLdH5mGsHqz+Lntm
VxdTA4i9r7E262EY2biNOpvvhAy2ncrAOut+CXdndurVudb3O8KyNs5lYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDpv1it3dr/IZ8eCxgmAxeMFct/0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT21fV0szZDJ2OGhueDRMR0NZREY0d1Z5M19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAARjOjqh7y0GeUk47+B6
P7836C4Uho2zc52WWMe3SXGdmLw1dDkgXGQj8Fqj8zIAjuKsjiQQ/rIu+hguTUzz
3N4O3WFkPd7tjFqcl3V+r0/zKRqhbT4UvmtTmfUkLv+JbXXRqIv/qcoodZs/kZoU
VCs8iqPtcQed0OK76S0Bh2BEv+OKi0mjP/+NlcE2PxanB0+/RCYuAPJjUXveBsqe
K3n9sdGBMqS0SxvfpvAwtPTnvDf7kzBlp5Qn3TDehUc2Qgmi/xp7jSlWgkWL9M3S
IcgKygluBFMgSEekWOkzS1eFPgxyQVANjB/onTsE2BSGrI6JxkAr1dojkYNRmTbG
QkU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:47 2025 by rpki-client