Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OwMWjeo1nKceLiCPSXl5jCxqYck.roa
File: OwMWjeo1nKceLiCPSXl5jCxqYck.roa (raw, json)
Hash identifier: 6f65aYZMYMtkrvRVMj+tmEcPYpqisk5UMOgcgmVLfWM=
Subject key identifier: 3B:03:16:8D:EA:35:9C:A7:1E:2E:20:8F:49:79:79:8C:2C:6A:61:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B79A0FF3225C54985980EBD8D22FBCA4E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OwMWjeo1nKceLiCPSXl5jCxqYck.roa
Signing time: Sun 29 Oct 2023 04:11:16 +0000
ROA not before: Sun 29 Oct 2023 04:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:a0:ff:32:25:c5:49:85:98:0e:bd:8d:22:fb:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 04:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b03168dea359ca71e2e208f4979798c2c6a61c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:77:42:1d:2a:ee:df:37:b3:b1:c6:1f:8f:
8b:dd:41:f4:40:af:e7:7a:aa:f9:a1:d1:11:79:fe:
ba:4e:f5:7a:12:1e:25:17:1f:2f:5b:a5:34:cd:51:
d3:63:ac:6e:d3:84:4f:8b:f0:ff:07:65:cc:86:61:
1e:11:47:c5:8f:e4:53:f9:0d:a2:54:27:ec:82:09:
28:6b:dd:f7:e0:16:52:64:84:6c:90:84:84:a3:d9:
09:75:77:a2:fd:52:a6:2d:39:f9:ad:46:c0:06:84:
b1:b2:c9:91:25:e1:09:4b:14:43:61:40:58:19:72:
b7:1a:bf:11:c0:59:10:b4:b5:d0:f4:d2:e3:5e:cc:
18:cf:52:97:65:12:8c:ad:59:b9:ed:cb:90:5d:36:
23:6b:21:c6:55:79:c6:5a:a1:21:f4:ef:37:73:b4:
6d:d5:f4:2f:dc:3d:e8:83:65:3a:db:09:0c:8d:a8:
53:ce:83:41:6d:bf:73:02:9b:30:9e:5f:e2:43:bb:
b2:16:47:99:d5:a2:29:5d:72:23:5b:2a:11:f9:01:
12:82:77:53:52:46:da:95:be:f5:5d:36:db:65:17:
14:a9:d0:64:95:ab:f4:5f:d2:ec:1a:d0:9d:16:90:
81:5e:9c:72:bb:11:61:8a:19:b3:22:16:6c:9a:41:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:16:8D:EA:35:9C:A7:1E:2E:20:8F:49:79:79:8C:2C:6A:61:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OwMWjeo1nKceLiCPSXl5jCxqYck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:3b:15:04:84:87:03:64:5e:d5:33:22:99:18:cf:ff:98:47:
68:e8:1e:03:65:ce:40:0d:92:ce:d0:f7:54:04:90:71:96:31:
fa:20:67:e5:4b:8d:ee:c2:cf:54:cc:58:2b:ee:97:11:87:99:
87:ae:21:85:e3:37:a4:51:e7:e7:ce:93:0a:99:28:74:ed:4d:
67:a0:aa:27:6f:95:4d:5d:f9:91:e3:19:0b:1b:2c:d4:77:d9:
5d:0f:8d:35:ec:48:a1:5a:40:48:ea:c5:d9:93:25:b0:53:52:
38:51:7c:35:91:8a:d0:2b:6c:d6:fd:f6:b6:8d:71:83:0e:f4:
ab:1c:5c:16:95:66:9d:41:ad:cd:c0:74:27:0e:20:31:b5:4a:
9c:09:74:32:99:e2:4c:54:64:d1:16:31:aa:5d:c3:db:d5:dc:
ac:b0:ff:25:19:64:15:81:ad:03:b9:53:68:1a:ed:96:6a:52:
7e:49:e0:e1:79:99:e3:62:f7:03:7f:be:85:93:7b:3d:e1:39:
f5:98:0e:ba:d8:d4:54:80:b6:5b:31:7f:bc:39:68:ee:3e:53:
48:2b:55:9b:f9:b0:5f:a2:1b:09:3c:c4:85:49:c1:d9:63:7d:
c5:4b:38:75:83:19:58:8d:c7:37:0c:a9:6f:94:d7:32:7f:ce:
56:54:1a:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt5oP8yJcVJhZgOvY0i+8pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI5MDQxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjAzMTY4ZGVhMzU5Y2E3MWUyZTIwOGY0OTc5Nzk4YzJjNmE2MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8h3Qh0q7t83s7HGH4+L3UH0QK/n
eqr5odERef66TvV6Eh4lFx8vW6U0zVHTY6xu04RPi/D/B2XMhmEeEUfFj+RT+Q2i
VCfsggkoa9334BZSZIRskISEo9kJdXei/VKmLTn5rUbABoSxssmRJeEJSxRDYUBY
GXK3Gr8RwFkQtLXQ9NLjXswYz1KXZRKMrVm57cuQXTYjayHGVXnGWqEh9O83c7Rt
1fQv3D3og2U62wkMjahTzoNBbb9zApswnl/iQ7uyFkeZ1aIpXXIjWyoR+QESgndT
Ukbalb71XTbbZRcUqdBklav0X9LsGtCdFpCBXpxyuxFhihmzIhZsmkExBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsDFo3qNZynHi4gj0l5eYwsamHJMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT3dNV2plbzFuS2NlTGlDUFNYbDVqQ3hxWWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABI7FQSEhwNkXtUzIpkY
z/+YR2joHgNlzkANks7Q91QEkHGWMfogZ+VLje7Cz1TMWCvulxGHmYeuIYXjN6RR
5+fOkwqZKHTtTWegqidvlU1d+ZHjGQsbLNR32V0PjTXsSKFaQEjqxdmTJbBTUjhR
fDWRitArbNb99raNcYMO9KscXBaVZp1Brc3AdCcOIDG1SpwJdDKZ4kxUZNEWMapd
w9vV3Kyw/yUZZBWBrQO5U2ga7ZZqUn5J4OF5meNi9wN/voWTez3hOfWYDrrY1FSA
tlsxf7w5aO4+U0grVZv5sF+iGwk8xIVJwdljfcVLOHWDGViNxzcMqW+U1zJ/zlZU
Gk4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:29:26 2025 by rpki-client