Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RhfF7iVBw7BbtkPCWkcItujeZUc.roa
File: RhfF7iVBw7BbtkPCWkcItujeZUc.roa (raw, json)
Hash identifier: 94Grkz9M48r/BvInL45zaGv/pQaXn0G5RMzyX0DAm7c=
Subject key identifier: 46:17:C5:EE:25:41:C3:B0:5B:B6:43:C2:5A:47:08:B6:E8:DE:65:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C457D512EF234E8159ED74B805B704602
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RhfF7iVBw7BbtkPCWkcItujeZUc.roa
Signing time: Thu 07 Dec 2023 18:14:49 +0000
ROA not before: Thu 07 Dec 2023 18:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:7d:51:2e:f2:34:e8:15:9e:d7:4b:80:5b:70:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 18:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4617c5ee2541c3b05bb643c25a4708b6e8de6547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:91:ee:76:b2:2a:23:7d:4a:ad:0f:b3:23:
9b:33:12:62:28:6d:a4:b6:05:88:57:af:66:07:f5:
0e:1b:e7:0a:5e:c5:f5:55:fb:e0:52:9d:3a:9b:e3:
0d:d3:da:48:28:d8:78:7f:e4:e2:82:73:52:2a:6c:
dc:75:2f:28:32:77:e4:23:a6:61:6c:4a:fa:b3:1f:
c2:b6:4b:97:8f:11:4b:e0:cf:40:ce:f9:74:92:65:
e1:9a:9f:d1:52:02:01:44:fd:58:92:cd:45:ea:82:
d9:bb:3e:36:24:64:23:36:63:69:6e:cf:ee:79:35:
e3:38:34:f4:54:ba:6e:32:51:ed:81:09:ac:8a:ea:
62:ea:dc:f5:33:8e:9e:64:b3:20:6b:ed:4f:25:88:
d5:f8:a7:3c:0b:04:05:dd:cc:80:18:5b:1a:da:86:
9f:01:94:df:8a:e3:47:62:43:11:0f:d5:4c:15:21:
a9:f6:5f:29:42:95:0e:90:d7:1a:6b:49:21:78:fd:
29:d3:40:38:dd:29:2e:72:0c:da:db:7f:da:2a:1a:
6f:ed:35:5f:10:f7:7b:13:32:ea:0b:ec:db:3b:85:
68:c8:ad:a2:4f:a9:56:d9:21:01:8a:a3:1f:48:2a:
2a:ec:4f:98:75:2e:70:57:48:c2:31:b9:a7:98:fc:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:C5:EE:25:41:C3:B0:5B:B6:43:C2:5A:47:08:B6:E8:DE:65:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RhfF7iVBw7BbtkPCWkcItujeZUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:30:1a:8a:c5:f5:82:46:0d:b6:f6:e4:c5:f7:50:dd:e2:42:
4a:53:1f:fa:b6:95:e0:95:01:6e:35:58:36:b6:44:a7:c5:3f:
9a:b7:3f:0f:a3:55:0d:e3:55:3b:4e:a4:81:b3:3a:04:54:7c:
3b:aa:e6:d9:03:9c:d0:d4:5b:6a:8b:10:c4:21:0e:a9:3d:1d:
c5:15:04:a1:1d:c4:63:29:9a:11:6a:a7:2b:ae:c1:4c:e5:1f:
c7:02:fc:60:82:b3:47:04:81:ef:51:11:eb:5b:b5:73:9f:07:
a4:64:de:1f:e6:46:e9:dd:ed:a8:7a:5b:4c:eb:13:ea:95:d0:
41:40:f4:7d:e0:fb:7a:23:92:d2:40:22:5f:90:e6:2d:19:ed:
29:b1:fd:9f:6c:34:cc:ee:2b:5f:ae:bf:bf:e7:38:72:f0:10:
44:fb:55:c9:52:78:b3:20:9b:64:4d:26:64:9e:54:83:09:56:
e9:48:4f:ce:c1:05:78:d6:fd:03:bf:26:dd:f8:a3:66:cb:e1:
57:7b:ce:8c:40:0d:30:19:1f:bf:87:83:99:f3:e8:2c:86:82:
d7:72:e9:95:86:2a:66:58:30:2c:29:9b:8a:83:9a:a3:1c:55:
34:57:3d:66:ae:68:aa:13:7c:ee:d1:72:76:23:fd:13:17:8b:
19:c7:87:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxFfVEu8jToFZ7XS4BbcEYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA3MTgxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjE3YzVlZTI1NDFjM2IwNWJiNjQzYzI1YTQ3MDhiNmU4ZGU2NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmyR7nayKiN9Sq0PsyObMxJiKG2k
tgWIV69mB/UOG+cKXsX1VfvgUp06m+MN09pIKNh4f+TignNSKmzcdS8oMnfkI6Zh
bEr6sx/CtkuXjxFL4M9Azvl0kmXhmp/RUgIBRP1Yks1F6oLZuz42JGQjNmNpbs/u
eTXjODT0VLpuMlHtgQmsiupi6tz1M46eZLMga+1PJYjV+Kc8CwQF3cyAGFsa2oaf
AZTfiuNHYkMRD9VMFSGp9l8pQpUOkNcaa0kheP0p00A43Skucgza23/aKhpv7TVf
EPd7EzLqC+zbO4VoyK2iT6lW2SEBiqMfSCoq7E+YdS5wV0jCMbmnmPy0mQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEYXxe4lQcOwW7ZDwlpHCLbo3mVHMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUmhmRjdpVkJ3N0JidGtQQ1drY0l0dWplWlVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABswGorF9YJGDbb25MX3
UN3iQkpTH/q2leCVAW41WDa2RKfFP5q3Pw+jVQ3jVTtOpIGzOgRUfDuq5tkDnNDU
W2qLEMQhDqk9HcUVBKEdxGMpmhFqpyuuwUzlH8cC/GCCs0cEge9REetbtXOfB6Rk
3h/mRund7ah6W0zrE+qV0EFA9H3g+3ojktJAIl+Q5i0Z7Smx/Z9sNMzuK1+uv7/n
OHLwEET7VclSeLMgm2RNJmSeVIMJVulIT87BBXjW/QO/Jt34o2bL4Vd7zoxADTAZ
H7+Hg5nz6CyGgtdy6ZWGKmZYMCwpm4qDmqMcVTRXPWauaKoTfO7RcnYj/RMXixnH
hyU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:55 2025 by rpki-client