Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PWcqCUM1DjZhEhg2XsY_vMIY4YM.roa
File: PWcqCUM1DjZhEhg2XsY_vMIY4YM.roa (raw, json)
Hash identifier: Fc7RlulT0+xBKH6BI7c/26WjnmtYnSU3BqY8c0KaC2o=
Subject key identifier: 3D:67:2A:09:43:35:0E:36:61:12:18:36:5E:C6:3F:BC:C2:18:E1:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4CD086763CAF90DBCE7ABEEE58F30CD8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PWcqCUM1DjZhEhg2XsY_vMIY4YM.roa
Signing time: Fri 20 Oct 2023 11:20:16 +0000
ROA not before: Fri 20 Oct 2023 11:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:d0:86:76:3c:af:90:db:ce:7a:be:ee:58:f3:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 11:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d672a0943350e36611218365ec63fbcc218e183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:48:21:ef:42:21:b8:70:25:b8:12:22:4f:
5b:8b:52:60:47:33:9f:a4:10:3a:67:f1:bb:11:e0:
67:ff:2f:d1:b9:0f:88:64:be:a9:18:f7:f2:b4:0c:
c0:f4:c4:8a:98:2e:85:69:c4:97:93:09:70:bc:b6:
81:49:ad:8e:57:3e:e3:d1:78:56:86:5f:c3:9f:92:
e4:52:da:fa:c7:c7:f6:f4:12:0e:25:45:a6:87:56:
d4:df:47:16:f9:45:a8:e3:1b:d3:d1:cd:05:c9:2c:
86:26:f3:c7:1f:47:74:fe:52:03:0f:06:47:95:e2:
52:29:b6:95:0c:3e:2c:e5:76:dc:e7:c7:d0:cd:9b:
e0:64:0f:eb:38:4a:78:1c:b3:36:fb:94:10:bd:0d:
21:a0:a9:35:73:f8:f5:f9:f1:e5:04:26:a5:e5:97:
b5:70:85:70:e0:c5:aa:6d:42:d2:68:29:0a:31:42:
5d:e3:59:00:95:0b:ec:b6:33:54:07:ba:15:41:09:
e1:97:df:68:4d:39:d5:8f:75:5c:58:fd:82:33:ff:
2f:90:33:22:b6:5a:2d:d3:be:49:83:1d:02:dc:b4:
72:eb:0f:b2:23:ad:a2:c5:28:94:ad:e2:53:3c:6b:
9c:63:41:7a:d5:3c:8c:78:06:34:9c:67:9b:34:18:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:67:2A:09:43:35:0E:36:61:12:18:36:5E:C6:3F:BC:C2:18:E1:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PWcqCUM1DjZhEhg2XsY_vMIY4YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:b5:93:4a:97:07:25:14:fa:da:6d:84:32:06:90:33:7b:00:
1b:04:08:d5:93:b0:2b:b0:43:21:ff:bd:36:a5:d9:8d:60:73:
9a:a7:df:c0:10:43:ea:e0:1a:98:74:37:57:bd:73:7b:7c:64:
d3:0a:e3:31:bb:80:21:0e:52:75:42:f9:8c:89:7b:41:20:07:
1b:b0:a0:d4:d8:c0:29:45:31:52:5a:10:cd:52:e4:38:c9:36:
26:b1:35:d2:b3:cf:f3:0d:87:46:08:5a:39:9c:40:04:b2:ac:
92:80:5a:ce:57:97:a7:23:cc:6e:44:dc:a0:10:9b:93:c0:14:
d6:16:62:2d:91:74:7a:2d:07:7f:1f:38:c8:d1:04:fd:62:da:
ba:bc:3b:ee:1c:44:48:22:42:cf:5a:be:f9:e0:7d:7f:90:cb:
18:3f:3f:6c:2b:1a:b5:8e:de:dc:ba:c4:53:42:d9:99:6b:fd:
29:ab:3f:b7:4d:9e:7f:16:0f:00:1d:41:01:bb:9c:9f:d1:f2:
9c:7a:fc:9e:2c:48:24:31:48:4a:c1:dd:c8:b6:96:c6:aa:e8:
f9:30:8b:3b:b3:da:70:7a:f2:77:77:67:2b:30:82:1a:de:f1:
d5:9c:04:f3:38:f7:85:78:5f:31:f7:51:34:41:29:b9:e9:99:
55:83:16:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtM0IZ2PK+Q2856vu5Y8wzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIwMTEyMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDY3MmEwOTQzMzUwZTM2NjExMjE4MzY1ZWM2M2ZiY2MyMThlMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM1IIe9CIbhwJbgSIk9bi1JgRzOf
pBA6Z/G7EeBn/y/RuQ+IZL6pGPfytAzA9MSKmC6FacSXkwlwvLaBSa2OVz7j0XhW
hl/Dn5LkUtr6x8f29BIOJUWmh1bU30cW+UWo4xvT0c0FySyGJvPHH0d0/lIDDwZH
leJSKbaVDD4s5Xbc58fQzZvgZA/rOEp4HLM2+5QQvQ0hoKk1c/j1+fHlBCal5Ze1
cIVw4MWqbULSaCkKMUJd41kAlQvstjNUB7oVQQnhl99oTTnVj3VcWP2CM/8vkDMi
tlot075Jgx0C3LRy6w+yI62ixSiUreJTPGucY0F61TyMeAY0nGebNBjydQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD1nKglDNQ42YRIYNl7GP7zCGOGDMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUFdjcUNVTTFEalpoRWhnMlhzWV92TUlZNFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJK1k0qXByUU+tpthDIG
kDN7ABsECNWTsCuwQyH/vTal2Y1gc5qn38AQQ+rgGph0N1e9c3t8ZNMK4zG7gCEO
UnVC+YyJe0EgBxuwoNTYwClFMVJaEM1S5DjJNiaxNdKzz/MNh0YIWjmcQASyrJKA
Ws5Xl6cjzG5E3KAQm5PAFNYWYi2RdHotB38fOMjRBP1i2rq8O+4cREgiQs9avvng
fX+Qyxg/P2wrGrWO3ty6xFNC2Zlr/SmrP7dNnn8WDwAdQQG7nJ/R8px6/J4sSCQx
SErB3ci2lsaq6Pkwizuz2nB68nd3Zyswghre8dWcBPM494V4XzH3UTRBKbnpmVWD
FjI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:45:28 2025 by rpki-client