Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PyV3MFX0ydu75eZKUSCWw84nYRc.roa
File: PyV3MFX0ydu75eZKUSCWw84nYRc.roa (raw, json)
Hash identifier: hlhlvZ3XhZ/WDltrZlh1VkKcwiFf4JLotr79PrzicUE=
Subject key identifier: 3F:25:77:30:55:F4:C9:DB:BB:E5:E6:4A:51:20:96:C3:CE:27:61:17
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFE42B06601238F6CE876B6EAAB533934
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PyV3MFX0ydu75eZKUSCWw84nYRc.roa
Signing time: Thu 05 Oct 2023 05:14:57 +0000
ROA not before: Thu 05 Oct 2023 05:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:42:b0:66:01:23:8f:6c:e8:76:b6:ea:ab:53:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 05:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f25773055f4c9dbbbe5e64a512096c3ce276117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:db:74:a5:70:60:f1:e6:2b:7e:1f:f8:d1:
13:53:f2:12:48:c6:9e:c2:85:c3:29:b4:03:50:3a:
2c:73:08:c4:b3:67:6a:ad:59:ba:42:14:f9:53:78:
6e:e1:14:e5:6a:3d:07:5e:c0:61:75:da:35:e9:17:
55:d6:58:77:dc:95:bb:ac:9c:79:ba:17:92:ce:24:
49:22:e2:91:58:4a:b8:74:d9:b8:3d:12:e9:18:95:
93:f8:86:a6:08:d0:7b:80:49:c1:b0:4b:f6:70:4e:
17:dc:0c:7b:bd:c8:2f:e4:29:13:ba:60:30:7e:0e:
a6:2b:c2:07:01:f5:25:19:1b:62:61:52:74:f0:da:
71:20:0a:f0:ee:34:68:d6:bd:32:8f:56:7d:3c:0a:
f9:8f:49:af:db:a6:dc:30:1a:11:83:18:35:1a:11:
72:23:11:58:d7:ef:14:7f:f7:73:4f:d4:f3:2c:62:
b4:9e:0e:42:57:9a:cd:e7:39:0f:08:a3:80:39:88:
f5:ed:86:83:8a:5f:26:4d:2d:88:70:bd:3a:14:7a:
fe:e1:f0:ff:46:24:92:0b:95:f9:97:f7:a9:81:23:
a4:98:f2:16:e9:18:ff:1c:0c:f8:9f:98:de:f1:e7:
b7:3e:e9:e0:eb:82:6e:71:c8:67:a5:22:c5:3e:da:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:77:30:55:F4:C9:DB:BB:E5:E6:4A:51:20:96:C3:CE:27:61:17
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PyV3MFX0ydu75eZKUSCWw84nYRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:53:a0:ac:3e:ca:d9:e2:0c:54:3f:87:19:da:0c:30:de:75:
a4:b9:85:86:33:aa:0d:c4:50:09:b7:e5:76:c1:4a:44:8e:78:
22:8f:4b:9c:ad:6a:04:5c:f1:cc:28:83:a7:14:27:00:16:f9:
84:a1:2f:26:9b:04:85:0f:88:44:74:4e:0d:19:cf:29:1f:a3:
03:3b:12:8f:0b:fd:d5:e3:3a:02:fd:b9:4f:fb:1b:a8:56:00:
52:cd:52:63:9a:49:5c:d7:74:69:4e:dc:ac:9c:1d:92:fe:8a:
fc:73:a4:97:1e:39:39:1f:68:4f:ef:c2:9f:1c:05:b3:4e:e5:
7d:27:55:77:f9:a0:49:25:22:0c:03:1d:5f:ef:61:aa:6f:27:
a3:df:af:d3:7c:b8:a4:f6:3e:85:f0:a1:a8:7e:94:e3:70:ee:
f7:5d:85:02:1b:a8:a0:23:20:1d:32:9a:41:17:55:91:7d:1e:
e2:68:36:aa:a1:a2:30:b0:ae:67:a7:71:65:bd:36:fe:a5:bd:
9a:30:48:9f:b9:35:8f:8e:57:86:b7:eb:8a:83:72:63:e3:21:
5f:bb:db:54:3c:e9:2d:4f:93:06:d8:03:4b:a1:70:6c:06:24:
b5:33:2a:30:2b:18:11:5a:bd:89:9b:00:f4:2c:c0:30:cf:16:
71:15:1d:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr+QrBmASOPbOh2tuqrUzk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MDUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjI1NzczMDU1ZjRjOWRiYmJlNWU2NGE1MTIwOTZjM2NlMjc2MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o3bdKVwYPHmK34f+NETU/ISSMae
woXDKbQDUDoscwjEs2dqrVm6QhT5U3hu4RTlaj0HXsBhddo16RdV1lh33JW7rJx5
uheSziRJIuKRWEq4dNm4PRLpGJWT+IamCNB7gEnBsEv2cE4X3Ax7vcgv5CkTumAw
fg6mK8IHAfUlGRtiYVJ08NpxIArw7jRo1r0yj1Z9PAr5j0mv26bcMBoRgxg1GhFy
IxFY1+8Uf/dzT9TzLGK0ng5CV5rN5zkPCKOAOYj17YaDil8mTS2IcL06FHr+4fD/
RiSSC5X5l/epgSOkmPIW6Rj/HAz4n5je8ee3Pung64JucchnpSLFPtqgTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD8ldzBV9Mnbu+XmSlEglsPOJ2EXMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUHlWM01GWDB5ZHU3NWVaS1VTQ1d3ODRuWVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE5ToKw+ytniDFQ/hxna
DDDedaS5hYYzqg3EUAm35XbBSkSOeCKPS5ytagRc8cwog6cUJwAW+YShLyabBIUP
iER0Tg0ZzykfowM7Eo8L/dXjOgL9uU/7G6hWAFLNUmOaSVzXdGlO3KycHZL+ivxz
pJceOTkfaE/vwp8cBbNO5X0nVXf5oEklIgwDHV/vYapvJ6Pfr9N8uKT2PoXwoah+
lONw7vddhQIbqKAjIB0ymkEXVZF9HuJoNqqhojCwrmencWW9Nv6lvZowSJ+5NY+O
V4a364qDcmPjIV+721Q86S1PkwbYA0uhcGwGJLUzKjArGBFavYmbAPQswDDPFnEV
Hfo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:40 2025 by rpki-client