Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RG5mc0qVrR-FfNWSLesfnPpMcvA.roa
File: RG5mc0qVrR-FfNWSLesfnPpMcvA.roa (raw, json)
Hash identifier: Ch/GNXUAHtfO/5kzr7CtGvxHgCGyiWCXPKvY2UhzVtI=
Subject key identifier: 44:6E:66:73:4A:95:AD:1F:85:7C:D5:92:2D:EB:1F:9C:FA:4C:72:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2A3DCF75994A553CB7B42C4778FCA2C4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RG5mc0qVrR-FfNWSLesfnPpMcvA.roa
Signing time: Fri 13 Oct 2023 18:12:55 +0000
ROA not before: Fri 13 Oct 2023 18:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:3d:cf:75:99:4a:55:3c:b7:b4:2c:47:78:fc:a2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 18:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=446e66734a95ad1f857cd5922deb1f9cfa4c72f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:27:0e:fc:1f:14:52:d0:57:8c:08:00:90:
39:e8:3c:83:01:16:2d:0b:81:09:2f:47:7b:e8:90:
15:a7:5a:0f:b0:a2:22:b7:e1:80:b8:3d:c5:1f:5a:
5d:2f:05:68:83:b1:9c:2d:64:44:62:08:63:5e:c0:
dd:2b:cf:52:74:b8:ac:24:b3:36:7c:70:2d:49:4a:
59:87:3c:55:94:68:5d:60:82:6f:b4:70:42:29:4b:
c0:61:9b:8c:d8:f3:76:df:bc:6a:70:a5:32:b9:ea:
f1:96:f3:5c:a1:7b:fd:8a:38:76:ad:99:71:e9:9d:
fd:04:39:02:a2:84:dc:6b:22:ef:41:42:12:00:bb:
a2:fd:ec:79:64:3b:d3:b0:7b:58:c6:f8:e9:b4:a8:
7b:b0:52:63:43:7c:b5:e7:4b:ac:a8:1a:1a:c9:d9:
06:86:db:aa:e8:be:19:c1:4f:89:8a:fb:e8:41:e9:
1a:99:21:06:67:f1:56:32:a1:27:6f:45:0e:5c:13:
0e:a3:54:f0:34:dd:30:a0:8a:40:6a:58:bd:7f:c2:
6d:7d:5f:69:a0:cd:d3:50:86:8d:ba:8d:e9:3b:3a:
02:24:f8:d1:8f:dc:f8:51:e7:dc:dd:d3:07:9f:2d:
1b:2d:f0:b5:66:b5:8d:41:ef:ed:b4:13:90:c7:c3:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:66:73:4A:95:AD:1F:85:7C:D5:92:2D:EB:1F:9C:FA:4C:72:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RG5mc0qVrR-FfNWSLesfnPpMcvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:2b:02:3b:be:20:4b:fc:2f:8c:e1:75:f1:e1:7f:02:6b:93:
02:bc:46:34:14:52:a1:06:f2:e7:35:00:a2:13:84:0b:8f:18:
62:1d:6f:75:00:83:21:e6:80:b0:56:2d:dc:3a:5e:34:92:29:
9c:6c:88:67:75:4c:06:0c:40:cc:7d:63:f7:7c:4d:90:52:d5:
37:c2:86:a0:fb:2a:8c:5c:b5:69:ca:f1:53:55:6a:91:e0:52:
74:b3:0c:84:c8:77:a0:0c:1c:ed:38:1a:04:44:0e:c1:72:f3:
00:3e:25:29:33:13:0c:61:1d:f9:a4:c9:0c:36:3c:d6:a3:a0:
a2:d4:e7:7b:31:f8:47:fb:41:2b:8f:2f:fe:ec:bf:43:84:12:
b9:f1:3b:5b:58:1d:8d:72:22:bc:5c:a9:71:68:57:3a:8d:99:
93:c5:31:11:fb:9f:79:90:96:17:f1:76:63:01:b4:4e:66:1d:
c0:75:52:38:cc:a7:99:95:fe:fa:16:b4:67:ee:2b:36:0e:64:
44:65:29:d2:4b:69:c2:fb:bb:d6:04:fb:ef:20:83:ea:08:10:
42:61:ba:5d:82:00:4a:bb:69:4b:79:d4:26:72:22:78:f1:73:
7d:e8:2a:d4:61:af:b4:1b:07:43:6a:73:17:6b:ba:2e:b5:d0:
37:69:26:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsqPc91mUpVPLe0LEd4/KLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMTgxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDZlNjY3MzRhOTVhZDFmODU3Y2Q1OTIyZGViMWY5Y2ZhNGM3MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTknDvwfFFLQV4wIAJA56DyDARYt
C4EJL0d76JAVp1oPsKIit+GAuD3FH1pdLwVog7GcLWREYghjXsDdK89SdLisJLM2
fHAtSUpZhzxVlGhdYIJvtHBCKUvAYZuM2PN237xqcKUyuerxlvNcoXv9ijh2rZlx
6Z39BDkCooTcayLvQUISALui/ex5ZDvTsHtYxvjptKh7sFJjQ3y150usqBoaydkG
htuq6L4ZwU+JivvoQekamSEGZ/FWMqEnb0UOXBMOo1TwNN0woIpAali9f8JtfV9p
oM3TUIaNuo3pOzoCJPjRj9z4Uefc3dMHny0bLfC1ZrWNQe/ttBOQx8M5UwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFERuZnNKla0fhXzVki3rH5z6THLwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUkc1bWMwcVZyUi1GZk5XU0xlc2ZuUHBNY3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACArAju+IEv8L4zhdfHh
fwJrkwK8RjQUUqEG8uc1AKIThAuPGGIdb3UAgyHmgLBWLdw6XjSSKZxsiGd1TAYM
QMx9Y/d8TZBS1TfChqD7KoxctWnK8VNVapHgUnSzDITId6AMHO04GgREDsFy8wA+
JSkzEwxhHfmkyQw2PNajoKLU53sx+Ef7QSuPL/7sv0OEErnxO1tYHY1yIrxcqXFo
VzqNmZPFMRH7n3mQlhfxdmMBtE5mHcB1UjjMp5mV/voWtGfuKzYOZERlKdJLacL7
u9YE++8gg+oIEEJhul2CAEq7aUt51CZyInjxc33oKtRhr7QbB0Nqcxdrui610Ddp
JsA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:28:16 2025 by rpki-client