Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QYOirWxmDgMyuLi1EDdXDft4pV4.roa
File: QYOirWxmDgMyuLi1EDdXDft4pV4.roa (raw, json)
Hash identifier: iYnxWcOZApU7gFNZhmXrxoO/n2sRr/BM1NClVfzsy6M=
Subject key identifier: 41:83:A2:AD:6C:66:0E:03:32:B8:B8:B5:10:37:57:0D:FB:78:A5:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5901996F203105A71479693A52E99DB0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QYOirWxmDgMyuLi1EDdXDft4pV4.roa
Signing time: Mon 11 Dec 2023 13:12:06 +0000
ROA not before: Mon 11 Dec 2023 13:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:01:99:6f:20:31:05:a7:14:79:69:3a:52:e9:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 13:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4183a2ad6c660e0332b8b8b51037570dfb78a55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:33:6c:96:f7:2a:d1:f3:05:59:78:90:90:
9a:ae:1c:bb:3f:3e:ec:bf:04:40:a8:6f:f8:86:44:
11:6d:32:a5:78:f4:53:f4:10:98:57:ba:04:a1:d8:
5b:42:e8:53:29:1b:8c:85:d5:2d:84:b9:0e:b2:98:
60:43:17:4d:b4:57:72:c6:a8:3f:96:b6:48:b5:cb:
9d:56:22:b4:04:d1:2d:c9:59:04:b0:c9:c4:70:1a:
dd:d8:c3:cd:84:8e:d2:78:4c:bd:4a:1e:29:24:44:
2d:ef:d4:3d:5d:a7:60:b8:ef:c2:46:17:83:1a:62:
98:f9:04:88:5e:18:de:a8:8e:d3:44:95:8e:6d:0d:
22:53:15:21:f9:be:e8:4a:11:96:c0:60:0e:b6:99:
ab:8b:7b:45:c5:49:a3:a0:2b:25:49:d7:44:c4:f1:
07:4d:00:5d:03:17:e2:6a:3d:4d:28:e9:7b:5b:70:
0f:6a:10:82:d3:da:40:28:51:b7:d4:a4:0b:9d:2c:
13:e7:15:de:69:8d:af:af:0e:33:4f:1f:6d:35:19:
6a:fd:06:40:79:41:52:d5:8e:c6:3b:e0:9d:a9:47:
70:f3:8b:0a:4e:a8:bb:59:06:00:be:bf:48:64:b8:
f3:f3:77:10:a2:bf:76:0d:96:a8:25:e9:59:3e:1a:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:A2:AD:6C:66:0E:03:32:B8:B8:B5:10:37:57:0D:FB:78:A5:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QYOirWxmDgMyuLi1EDdXDft4pV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:5b:9b:41:ce:05:4f:93:f8:f0:11:af:dc:71:ce:88:93:b9:
d4:ff:13:cd:48:cf:73:64:99:a0:79:99:14:ee:7e:fe:a4:82:
a1:1c:ef:15:61:fb:9f:ac:f3:20:bd:06:ab:97:f2:10:34:7f:
b7:25:46:bc:a6:7d:e7:27:f6:25:5b:0a:d1:78:f3:0f:0c:84:
5b:06:2f:60:22:7a:cb:be:82:74:0a:eb:9c:9a:15:ce:de:5a:
a9:b5:cd:0b:bf:3c:5b:ec:76:78:7c:54:0b:b9:94:b0:43:30:
bd:e5:0f:5c:42:35:b4:bb:09:9c:86:7f:4e:b7:bd:55:80:da:
5d:20:b1:76:0d:c8:60:97:99:55:71:88:cd:6a:8e:45:96:34:
04:6b:8a:74:99:22:d3:2f:7c:db:c8:c5:fc:2c:22:0d:5c:8d:
db:ff:68:d2:2e:be:93:51:ae:7d:be:d6:de:dd:58:f0:13:b1:
6e:b0:26:74:67:b3:ba:f5:5e:26:b7:ec:57:f4:49:89:94:a5:
ca:f7:8e:ab:29:11:d2:3c:ca:0c:f4:63:75:44:36:85:9d:c0:
03:53:aa:0f:67:d9:7e:76:2f:fd:d4:10:c6:e3:10:06:f7:01:
21:7c:06:b5:db:30:3a:3a:db:28:8a:aa:72:e4:c2:18:30:b1:
6b:43:da:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxZAZlvIDEFpxR5aTpS6Z2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMTMxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTgzYTJhZDZjNjYwZTAzMzJiOGI4YjUxMDM3NTcwZGZiNzhhNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpMzbJb3KtHzBVl4kJCarhy7Pz7s
vwRAqG/4hkQRbTKlePRT9BCYV7oEodhbQuhTKRuMhdUthLkOsphgQxdNtFdyxqg/
lrZItcudViK0BNEtyVkEsMnEcBrd2MPNhI7SeEy9Sh4pJEQt79Q9XadguO/CRheD
GmKY+QSIXhjeqI7TRJWObQ0iUxUh+b7oShGWwGAOtpmri3tFxUmjoCslSddExPEH
TQBdAxfiaj1NKOl7W3APahCC09pAKFG31KQLnSwT5xXeaY2vrw4zTx9tNRlq/QZA
eUFS1Y7GO+CdqUdw84sKTqi7WQYAvr9IZLjz83cQor92DZaoJelZPhrfZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEGDoq1sZg4DMri4tRA3Vw37eKVeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUVlPaXJXeG1EZ015dUxpMUVEZFhEZnQ0cFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHZbm0HOBU+T+PARr9xx
zoiTudT/E81Iz3NkmaB5mRTufv6kgqEc7xVh+5+s8yC9BquX8hA0f7clRrymfecn
9iVbCtF48w8MhFsGL2Aiesu+gnQK65yaFc7eWqm1zQu/PFvsdnh8VAu5lLBDML3l
D1xCNbS7CZyGf063vVWA2l0gsXYNyGCXmVVxiM1qjkWWNARrinSZItMvfNvIxfws
Ig1cjdv/aNIuvpNRrn2+1t7dWPATsW6wJnRns7r1Xia37Ff0SYmUpcr3jqspEdI8
ygz0Y3VENoWdwANTqg9n2X52L/3UEMbjEAb3ASF8BrXbMDo62yiKqnLkwhgwsWtD
2gk=
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:25:46 2025 by rpki-client