Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RdA_D3_pLZrdq_DWtnyfsT7IdUw.roa
File: RdA_D3_pLZrdq_DWtnyfsT7IdUw.roa (raw, json)
Hash identifier: hqbrp6hl8fVAf8GdAVg8uQENV3KIO/QgpFGou2lpUac=
Subject key identifier: 45:D0:3F:0F:7F:E9:2D:9A:DD:AB:F0:D6:B6:7C:9F:B1:3E:C8:75:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF01AD6D6DDA677665C0FA4D67B44EC56
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RdA_D3_pLZrdq_DWtnyfsT7IdUw.roa
Signing time: Mon 02 Oct 2023 11:16:45 +0000
ROA not before: Mon 02 Oct 2023 11:16:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:1a:d6:d6:dd:a6:77:66:5c:0f:a4:d6:7b:44:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 11:16:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d03f0f7fe92d9addabf0d6b67c9fb13ec8754c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:c4:5c:31:ad:65:12:a1:a3:cb:71:84:09:
36:f5:a9:86:25:c8:7a:5f:57:58:36:75:6f:20:f1:
2a:5d:74:f1:ea:69:60:b4:d2:5a:69:ee:86:74:97:
af:50:9d:f9:9e:55:c4:e1:72:ab:10:54:de:a4:b0:
91:73:bc:95:3b:31:d4:58:7b:39:cd:14:73:fc:9a:
41:48:b7:37:26:69:bb:d5:f9:f8:31:5c:a6:c5:11:
a8:39:ac:05:78:77:df:03:d1:52:17:d0:56:6e:1e:
46:f1:36:8b:e6:e8:c9:55:d5:c4:1a:f1:6f:ec:68:
c5:54:4b:63:fb:a0:27:b3:46:4b:c1:a0:5d:26:13:
a2:be:22:dc:a3:ea:ee:9b:2f:3a:2c:9d:42:dc:13:
49:53:e8:74:6c:27:d4:a6:6d:91:12:f1:30:2c:5c:
bc:b9:40:68:27:cc:12:36:8c:d6:43:0d:bf:33:6c:
fb:c3:f5:d6:10:36:39:dc:62:44:3d:58:ed:7c:df:
49:2c:94:77:92:7f:db:d3:2c:f3:fb:11:b7:f8:9e:
55:c1:06:35:3a:f4:53:31:5d:9f:9d:ac:3e:fd:16:
a7:62:61:e6:6e:57:aa:25:68:fe:d4:3b:a2:a9:17:
21:dc:aa:1d:a3:67:0d:92:f9:58:35:bd:1b:a1:30:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:3F:0F:7F:E9:2D:9A:DD:AB:F0:D6:B6:7C:9F:B1:3E:C8:75:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RdA_D3_pLZrdq_DWtnyfsT7IdUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:7b:2f:3b:4b:88:86:0c:65:59:8f:70:ae:fe:8b:a4:41:42:
8d:cb:89:6b:4a:b6:ee:16:05:b1:9e:c9:a0:d1:d0:2d:eb:fa:
65:f6:30:af:cd:10:f7:e6:80:b9:0c:f3:b3:1e:3a:1c:dc:1b:
1b:f0:12:15:59:0c:6e:0f:63:bd:08:e0:5b:3d:21:7b:ea:4c:
e8:40:e4:a1:4e:b5:68:c6:91:96:28:c5:04:df:0d:31:a9:66:
7c:6e:fd:63:b8:7e:e4:70:b9:27:29:df:7c:7c:a6:10:06:99:
59:39:68:d9:4b:2f:93:cd:fc:17:5f:bb:6b:58:e3:9c:57:87:
2d:61:06:1c:1a:df:d0:30:20:8f:11:fa:09:fb:b2:b6:df:4d:
d6:43:d9:e6:3b:94:34:60:15:01:7c:a2:da:6e:b3:1e:c3:93:
8d:31:50:3d:3e:a7:6c:79:fb:06:89:ee:71:20:e7:c6:5f:a6:
c2:fa:13:4f:b5:d9:03:6d:fa:49:89:73:a5:ed:b9:ba:ad:a1:
da:e1:e6:9e:c6:92:dd:93:1f:20:25:e6:02:ae:03:e6:ab:4a:
f7:21:27:60:5e:5c:77:86:f0:5b:d8:f7:a0:65:1e:b3:22:ca:
0d:7f:07:e1:b4:df:ed:8c:dc:56:07:61:4f:95:01:e8:b5:b2:
2f:8a:19:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrwGtbW3aZ3ZlwPpNZ7ROxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMTExNjQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQwM2YwZjdmZTkyZDlhZGRhYmYwZDZiNjdjOWZiMTNlYzg3NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB3EXDGtZRKho8txhAk29amGJch6
X1dYNnVvIPEqXXTx6mlgtNJaae6GdJevUJ35nlXE4XKrEFTepLCRc7yVOzHUWHs5
zRRz/JpBSLc3Jmm71fn4MVymxRGoOawFeHffA9FSF9BWbh5G8TaL5ujJVdXEGvFv
7GjFVEtj+6Ans0ZLwaBdJhOiviLco+rumy86LJ1C3BNJU+h0bCfUpm2REvEwLFy8
uUBoJ8wSNozWQw2/M2z7w/XWEDY53GJEPVjtfN9JLJR3kn/b0yzz+xG3+J5VwQY1
OvRTMV2fnaw+/RanYmHmbleqJWj+1DuiqRch3Kodo2cNkvlYNb0boTC4qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEXQPw9/6S2a3avw1rZ8n7E+yHVMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUmRBX0QzX3BMWnJkcV9EV3RueWZzVDdJZFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKl7LztLiIYMZVmPcK7+
i6RBQo3LiWtKtu4WBbGeyaDR0C3r+mX2MK/NEPfmgLkM87MeOhzcGxvwEhVZDG4P
Y70I4Fs9IXvqTOhA5KFOtWjGkZYoxQTfDTGpZnxu/WO4fuRwuScp33x8phAGmVk5
aNlLL5PN/Bdfu2tY45xXhy1hBhwa39AwII8R+gn7srbfTdZD2eY7lDRgFQF8otpu
sx7Dk40xUD0+p2x5+waJ7nEg58ZfpsL6E0+12QNt+kmJc6Xtubqtodrh5p7Gkt2T
HyAl5gKuA+arSvchJ2BeXHeG8FvY96BlHrMiyg1/B+G03+2M3FYHYU+VAei1si+K
GdY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:13 2025 by rpki-client