Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVCG9uf9JTyet6fFKvBxIatz2s0.roa
File: RVCG9uf9JTyet6fFKvBxIatz2s0.roa (raw, json)
Hash identifier: ZgO9qfWfO9l17h6cTanbGWQT1nx/Sf0BJdOGpiK3W8c=
Subject key identifier: 45:50:86:F6:E7:FD:25:3C:9E:B7:A7:C5:2A:F0:71:21:AB:73:DA:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5DF84E3A3CE37CA69F60ABFFEBD78A6A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVCG9uf9JTyet6fFKvBxIatz2s0.roa
Signing time: Mon 23 Oct 2023 19:17:15 +0000
ROA not before: Mon 23 Oct 2023 19:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:f8:4e:3a:3c:e3:7c:a6:9f:60:ab:ff:eb:d7:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 19:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=455086f6e7fd253c9eb7a7c52af07121ab73dacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:ca:ec:93:98:e5:34:db:03:51:c7:64:be:
3d:cf:b0:f8:5a:25:a3:0c:1e:26:75:b2:88:5b:2a:
4f:18:06:f5:18:9a:47:9f:c5:c4:7e:59:85:80:14:
72:94:9d:45:58:9f:7d:b5:f8:30:65:fa:f5:71:c4:
45:f0:c9:d5:6a:b9:ae:d1:8a:b5:92:7d:71:28:64:
5a:11:31:db:01:b9:3a:0b:cb:80:00:71:42:67:b3:
4c:69:78:99:9e:5b:f0:59:36:ae:38:78:b8:78:ec:
de:9c:5b:f9:9a:82:9a:ce:68:ad:0c:0b:6f:b1:e2:
4e:e5:56:d5:37:87:5d:11:60:96:80:b0:61:30:1a:
88:5e:21:eb:58:2d:3c:95:b7:3c:b1:a8:7e:06:45:
0c:db:55:cf:29:52:00:52:b0:50:ce:74:9e:24:6e:
93:e0:00:1e:a2:52:b1:57:be:25:62:72:7e:fa:31:
80:aa:1f:ab:56:bc:08:c4:dc:6e:72:9f:da:de:6a:
c3:59:40:8d:34:f2:25:99:4a:52:90:ea:42:f6:77:
98:fc:b9:44:00:90:61:6e:57:09:4a:3d:e1:2f:f7:
d8:de:33:c1:d6:75:0b:29:3f:25:28:ee:ae:48:f6:
00:e5:4a:e9:d7:ec:66:da:39:2f:29:b7:3f:83:e3:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:86:F6:E7:FD:25:3C:9E:B7:A7:C5:2A:F0:71:21:AB:73:DA:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVCG9uf9JTyet6fFKvBxIatz2s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:de:0f:77:93:f9:df:a2:45:25:50:11:72:5f:1b:9c:57:66:
77:91:7a:37:5d:70:0d:39:f3:b8:9f:97:a2:db:99:a0:d1:0a:
be:4d:c0:36:a9:1c:77:7b:81:df:16:57:d6:ac:d5:36:78:06:
07:8d:a7:54:3f:80:1b:40:95:01:ab:08:0a:2f:79:57:45:3f:
e5:b7:be:2f:5f:98:9a:23:10:75:c8:b6:ad:47:11:1d:cf:51:
80:be:fb:f2:08:ed:09:e0:dc:10:50:06:ec:1a:3e:bd:92:a6:
46:01:98:02:35:d0:ea:6a:d0:0a:40:f8:ed:23:e9:ce:6d:ce:
25:b9:58:6d:ae:8a:df:df:25:ad:ea:1b:8a:e1:cb:16:dc:6c:
0e:be:fe:ee:f3:57:1c:e5:94:07:0f:2a:8d:2a:af:75:a0:4d:
42:e5:35:40:c6:b6:8f:d7:e3:94:e4:4d:a2:bc:5a:25:22:08:
a3:d8:45:82:03:6c:b8:e8:78:85:62:f3:44:1d:b6:88:7b:d5:
f0:41:a6:92:df:27:43:38:d5:0e:d7:d4:ba:4b:8c:de:d2:ba:
b0:d3:7b:53:fb:79:78:de:24:0c:c5:65:77:c0:cf:4a:8e:37:
65:66:30:07:fb:c1:37:17:8c:2c:0a:dc:d4:c9:db:f9:ed:fc:
ff:e7:0d:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtd+E46PON8pp9gq//r14pqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIzMTkxNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTUwODZmNmU3ZmQyNTNjOWViN2E3YzUyYWYwNzEyMWFiNzNkYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4DK7JOY5TTbA1HHZL49z7D4WiWj
DB4mdbKIWypPGAb1GJpHn8XEflmFgBRylJ1FWJ99tfgwZfr1ccRF8MnVarmu0Yq1
kn1xKGRaETHbAbk6C8uAAHFCZ7NMaXiZnlvwWTauOHi4eOzenFv5moKazmitDAtv
seJO5VbVN4ddEWCWgLBhMBqIXiHrWC08lbc8sah+BkUM21XPKVIAUrBQznSeJG6T
4AAeolKxV74lYnJ++jGAqh+rVrwIxNxucp/a3mrDWUCNNPIlmUpSkOpC9neY/LlE
AJBhblcJSj3hL/fY3jPB1nULKT8lKO6uSPYA5Urp1+xm2jkvKbc/g+PM+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEVQhvbn/SU8nrenxSrwcSGrc9rNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUlZDRzl1ZjlKVHlldDZmRkt2QnhJYXR6MnMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHXeD3eT+d+iRSVQEXJf
G5xXZneRejddcA0587ifl6LbmaDRCr5NwDapHHd7gd8WV9as1TZ4BgeNp1Q/gBtA
lQGrCAoveVdFP+W3vi9fmJojEHXItq1HER3PUYC++/II7Qng3BBQBuwaPr2SpkYB
mAI10Opq0ApA+O0j6c5tziW5WG2uit/fJa3qG4rhyxbcbA6+/u7zVxzllAcPKo0q
r3WgTULlNUDGto/X45TkTaK8WiUiCKPYRYIDbLjoeIVi80Qdtoh71fBBppLfJ0M4
1Q7X1LpLjN7SurDTe1P7eXjeJAzFZXfAz0qON2VmMAf7wTcXjCwK3NTJ2/nt/P/n
DfU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:45:54 2025 by rpki-client