Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVqNatbJMqw3wBknLy8xi5cP0rU.roa
File: RVqNatbJMqw3wBknLy8xi5cP0rU.roa (raw, json)
Hash identifier: ++Aed+CZQRrTB5cxRB6gXpbY0lphvL/vQ5S0QwsTZOM=
Subject key identifier: 45:5A:8D:6A:D6:C9:32:AC:37:C0:19:27:2F:2F:31:8B:97:0F:D2:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC675665684076763530410E9422E5622
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVqNatbJMqw3wBknLy8xi5cP0rU.roa
Signing time: Sun 24 Sep 2023 09:11:37 +0000
ROA not before: Sun 24 Sep 2023 09:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c6:75:66:56:84:07:67:63:53:04:10:e9:42:2e:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 09:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=455a8d6ad6c932ac37c019272f2f318b970fd2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:d4:c8:c5:c5:19:0b:26:cd:2c:95:a6:0c:
ed:61:9b:0b:7d:c7:9d:45:ee:a1:50:d6:8a:d3:ab:
fe:24:46:36:69:69:a3:04:58:49:e5:4c:c5:dc:9a:
b6:f7:e7:ab:2f:31:00:b0:7f:aa:2f:44:93:73:6a:
f2:12:8a:9d:9c:04:bc:53:fe:4d:aa:4f:a9:07:8e:
9d:56:15:b2:56:a9:da:61:ca:c0:78:8a:eb:4b:9b:
98:a5:e3:45:c7:cf:eb:fa:cb:71:84:41:c6:98:78:
f8:eb:a3:1d:7a:9a:91:8f:75:79:59:27:fe:c6:06:
57:0c:67:42:e7:ea:d8:ff:ac:78:5f:61:22:67:66:
61:dc:45:65:d3:61:c0:ff:bf:92:f0:64:62:21:74:
03:5c:26:4a:08:6b:43:2b:41:1b:bd:43:be:52:d3:
cd:c0:00:81:18:a0:22:01:e5:93:ca:f4:fd:d8:f0:
3d:99:5f:ac:4e:90:ef:6c:98:3d:c5:cb:3a:69:49:
37:07:df:7a:f7:f8:5b:1c:4b:e3:75:cb:ed:3f:7e:
e6:ec:9c:60:6d:be:14:74:bd:a4:62:ac:8a:39:06:
57:62:dc:10:3e:43:bb:81:d0:17:6b:7a:74:fd:d8:
55:e6:3f:6b:2c:e8:d3:9c:c4:9b:65:87:07:8f:ff:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5A:8D:6A:D6:C9:32:AC:37:C0:19:27:2F:2F:31:8B:97:0F:D2:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RVqNatbJMqw3wBknLy8xi5cP0rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:36:cb:89:85:07:65:ec:b7:08:c5:39:dc:be:13:75:08:16:
33:d8:20:9b:9b:9c:64:b2:c7:ee:7a:15:50:03:89:46:04:ca:
7e:d0:7d:4d:4f:34:93:ca:59:91:5e:58:e1:2f:e8:5f:1c:e5:
7b:4d:28:ed:5c:3c:dc:31:b6:86:10:1a:1a:8b:2f:e5:97:7e:
8a:26:cd:1d:e6:05:50:56:74:8c:c3:52:6b:b5:9a:c4:be:49:
6e:47:7f:db:7c:67:0b:3c:a1:1c:73:f5:0e:dc:3f:f3:35:99:
68:2b:eb:a0:9f:0a:fe:68:10:3a:3a:2a:f7:d3:c3:d9:7b:ea:
fb:70:2d:78:23:b3:17:28:c3:9d:b7:46:68:6d:2e:d1:60:ea:
1c:3a:6f:60:97:d5:d2:7b:4a:c1:8e:96:9d:ed:2e:f2:b3:99:
f1:0b:43:72:db:91:7f:b9:80:f3:a1:9d:11:a9:8c:32:15:3b:
a7:d2:f9:e1:fd:5c:bc:a6:55:3e:9b:01:c2:80:1d:af:f7:08:
ce:26:a8:57:c6:37:96:2d:3d:3c:ee:de:2b:58:11:17:1f:a4:
1f:64:85:a3:d5:47:90:02:ab:7d:0e:17:12:7e:43:da:bb:65:
37:ef:a4:61:6d:e6:7a:c5:0d:dc:43:ca:d5:5b:09:b3:59:b6:
2b:cb:ed:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrGdWZWhAdnY1MEEOlCLlYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI0MDkxMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTVhOGQ2YWQ2YzkzMmFjMzdjMDE5MjcyZjJmMzE4Yjk3MGZkMmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokPUyMXFGQsmzSyVpgztYZsLfced
Re6hUNaK06v+JEY2aWmjBFhJ5UzF3Jq29+erLzEAsH+qL0STc2ryEoqdnAS8U/5N
qk+pB46dVhWyVqnaYcrAeIrrS5uYpeNFx8/r+stxhEHGmHj466MdepqRj3V5WSf+
xgZXDGdC5+rY/6x4X2EiZ2Zh3EVl02HA/7+S8GRiIXQDXCZKCGtDK0EbvUO+UtPN
wACBGKAiAeWTyvT92PA9mV+sTpDvbJg9xcs6aUk3B9969/hbHEvjdcvtP37m7Jxg
bb4UdL2kYqyKOQZXYtwQPkO7gdAXa3p0/dhV5j9rLOjTnMSbZYcHj/8DFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEVajWrWyTKsN8AZJy8vMYuXD9K1MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUlZxTmF0YkpNcXczd0Jrbkx5OHhpNWNQMHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGc2y4mFB2XstwjFOdy+
E3UIFjPYIJubnGSyx+56FVADiUYEyn7QfU1PNJPKWZFeWOEv6F8c5XtNKO1cPNwx
toYQGhqLL+WXfoomzR3mBVBWdIzDUmu1msS+SW5Hf9t8Zws8oRxz9Q7cP/M1mWgr
66CfCv5oEDo6KvfTw9l76vtwLXgjsxcow523RmhtLtFg6hw6b2CX1dJ7SsGOlp3t
LvKzmfELQ3LbkX+5gPOhnRGpjDIVO6fS+eH9XLymVT6bAcKAHa/3CM4mqFfGN5Yt
PTzu3itYERcfpB9khaPVR5ACq30OFxJ+Q9q7ZTfvpGFt5nrFDdxDytVbCbNZtivL
7bA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:39:52 2025 by rpki-client