Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtZBRwObADoj2XndHUEpmoOwSRU.roa
File: OtZBRwObADoj2XndHUEpmoOwSRU.roa (raw, json)
Hash identifier: v1vE9F0yzIHy6O6DDr7ByIs4BfIGF4G74PXaTut61uk=
Subject key identifier: 3A:D6:41:47:03:9B:00:3A:23:D9:79:DD:1D:41:29:9A:83:B0:49:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C78912152DEB549A9C0311A08AAC3A3BA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtZBRwObADoj2XndHUEpmoOwSRU.roa
Signing time: Sun 17 Dec 2023 16:17:06 +0000
ROA not before: Sun 17 Dec 2023 16:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:91:21:52:de:b5:49:a9:c0:31:1a:08:aa:c3:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 16:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad64147039b003a23d979dd1d41299a83b04915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:5b:a0:95:2e:b9:64:24:1e:39:88:3e:28:
0e:bb:cc:27:16:35:51:26:a4:f2:99:e7:fd:69:99:
c5:00:09:1b:bb:0e:50:dd:a9:52:f3:a8:2a:04:ff:
b7:18:e1:9d:ff:e4:7f:45:27:ad:c4:81:fd:7f:97:
67:18:d6:57:42:e1:9d:d1:18:a3:ab:ed:82:5e:4f:
4e:af:fe:07:3e:7f:7d:fb:d4:c0:f3:18:ed:95:9a:
0e:9a:06:c5:26:4a:c7:27:2d:90:0e:d6:14:90:1b:
43:3d:d5:ef:6a:d0:f7:c7:2f:6f:37:20:06:62:7d:
89:f7:1f:41:97:8c:a1:6f:e0:df:b8:5a:31:70:a4:
35:d3:52:90:e9:e0:d2:c6:82:66:6e:f5:3e:7a:25:
33:f3:de:54:91:8e:7e:48:ea:87:0e:f4:6e:29:64:
cf:15:35:5c:d0:e0:25:11:ba:ba:35:99:70:4a:ce:
11:9b:6d:fd:f0:2b:d3:88:10:7a:f6:94:92:b0:82:
7f:8a:c6:1a:8e:a8:31:89:60:4f:24:61:58:5d:46:
e6:3e:cd:b2:64:84:d8:3f:9e:b2:12:e3:95:1d:fc:
05:65:72:0c:b7:8c:f3:c7:e0:7d:00:b4:5c:d3:e0:
5f:ed:82:5b:01:16:6f:55:95:c3:30:90:14:55:39:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:41:47:03:9B:00:3A:23:D9:79:DD:1D:41:29:9A:83:B0:49:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtZBRwObADoj2XndHUEpmoOwSRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:6b:86:cf:30:8c:c2:d8:0f:60:7b:63:9a:63:b0:7b:89:2c:
32:d0:bc:c1:35:e7:fd:1f:4d:d2:65:b5:6e:f6:7a:fe:b0:6f:
25:49:dc:2f:93:da:91:42:d7:af:6b:c4:1e:8d:e2:f6:17:c8:
0c:2a:20:48:79:29:78:7b:90:b0:c1:e2:ab:01:97:0b:32:71:
a2:44:2c:03:72:6b:b7:50:d0:e3:ea:ad:1d:94:39:e3:76:ca:
ef:dc:43:f4:8c:53:e1:15:14:08:45:3d:75:0c:6a:75:de:a8:
f9:dc:8f:fe:0a:b3:16:16:1a:5c:d8:89:01:fb:87:e9:4b:1b:
01:ea:70:93:b8:9b:d9:d2:cb:4a:47:c4:97:77:bf:2e:d4:60:
f4:eb:ae:83:5f:74:14:78:09:b0:fd:87:4a:46:b8:0b:11:58:
2d:f1:1b:6f:62:3d:14:cd:30:85:bf:eb:5c:89:17:42:72:8e:
6b:23:40:26:e6:24:10:1f:91:32:3e:50:ca:aa:5f:94:cf:72:
09:d1:25:40:a3:f6:40:6c:0e:fd:cc:ba:41:b8:39:2d:c4:e9:
26:37:27:d9:e1:a9:97:90:7c:81:58:9f:09:04:18:34:f3:48:
c9:96:e3:4d:6d:7c:60:f0:8e:84:df:4b:70:68:93:1c:55:01:
f5:26:48:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx4kSFS3rVJqcAxGgiqw6O6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MTYxNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWQ2NDE0NzAzOWIwMDNhMjNkOTc5ZGQxZDQxMjk5YTgzYjA0OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhboJUuuWQkHjmIPigOu8wnFjVR
JqTymef9aZnFAAkbuw5Q3alS86gqBP+3GOGd/+R/RSetxIH9f5dnGNZXQuGd0Rij
q+2CXk9Or/4HPn99+9TA8xjtlZoOmgbFJkrHJy2QDtYUkBtDPdXvatD3xy9vNyAG
Yn2J9x9Bl4yhb+DfuFoxcKQ101KQ6eDSxoJmbvU+eiUz895UkY5+SOqHDvRuKWTP
FTVc0OAlEbq6NZlwSs4Rm2398CvTiBB69pSSsIJ/isYajqgxiWBPJGFYXUbmPs2y
ZITYP56yEuOVHfwFZXIMt4zzx+B9ALRc0+Bf7YJbARZvVZXDMJAUVTkHzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDrWQUcDmwA6I9l53R1BKZqDsEkVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT3RaQlJ3T2JBRG9qMlhuZEhVRXBtb093U1JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALprhs8wjMLYD2B7Y5pj
sHuJLDLQvME15/0fTdJltW72ev6wbyVJ3C+T2pFC169rxB6N4vYXyAwqIEh5KXh7
kLDB4qsBlwsycaJELANya7dQ0OPqrR2UOeN2yu/cQ/SMU+EVFAhFPXUManXeqPnc
j/4KsxYWGlzYiQH7h+lLGwHqcJO4m9nSy0pHxJd3vy7UYPTrroNfdBR4CbD9h0pG
uAsRWC3xG29iPRTNMIW/61yJF0JyjmsjQCbmJBAfkTI+UMqqX5TPcgnRJUCj9kBs
Dv3MukG4OS3E6SY3J9nhqZeQfIFYnwkEGDTzSMmW401tfGDwjoTfS3BokxxVAfUm
SFw=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:23 2025 by rpki-client