Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rk4rRRJwA_1YV9O_VLa8j0G97Ok.roa
File: Rk4rRRJwA_1YV9O_VLa8j0G97Ok.roa (raw, json)
Hash identifier: srYj0XOfq8WaDuw/jACYf4wRSuzRa+i2WrF0IVObeYY=
Subject key identifier: 46:4E:2B:45:12:70:03:FD:58:57:D3:BF:54:B6:BC:8F:41:BD:EC:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B22BD0847C4FF776F6C2FF2872D49A386
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rk4rRRJwA_1YV9O_VLa8j0G97Ok.roa
Signing time: Thu 12 Oct 2023 07:14:55 +0000
ROA not before: Thu 12 Oct 2023 07:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:bd:08:47:c4:ff:77:6f:6c:2f:f2:87:2d:49:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 07:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464e2b45127003fd5857d3bf54b6bc8f41bdece9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:0e:d0:c0:e0:db:e4:0c:5b:64:8a:ba:60:
40:43:58:f7:63:f7:eb:13:de:33:70:8c:75:7e:c9:
9e:40:6f:c9:13:44:af:bc:8c:27:61:6f:f7:76:6d:
ed:40:4e:56:db:d8:c2:79:39:12:d0:95:44:15:11:
c2:ed:01:9b:dc:0e:d3:4d:af:ca:ca:5d:9a:20:37:
40:5d:17:0f:1e:aa:1e:20:92:ed:ca:96:90:84:32:
06:5b:7e:b2:0a:e4:0f:6f:6a:6a:d4:4f:45:b8:8a:
77:31:44:a8:67:7e:4a:2d:b5:18:dd:60:6b:14:86:
95:cf:45:ed:29:dc:44:c7:5d:88:ca:e7:53:bf:a8:
bc:be:90:bb:df:41:ba:80:5f:34:92:b4:ca:c6:e0:
45:60:1f:40:b8:13:41:b9:3b:8f:c5:7c:6d:c8:10:
4f:42:91:5f:65:45:82:bc:f9:52:51:a9:eb:f8:84:
51:c8:f7:3b:57:4a:72:78:bf:d3:8f:52:88:b0:c8:
36:9d:fa:e3:26:41:8b:3a:37:42:d2:4a:2a:56:0d:
ec:70:6c:ad:cb:85:fd:7d:f3:4b:0a:75:ad:4d:7b:
54:13:e8:8e:e8:ca:6b:89:4e:26:af:0c:17:24:e1:
cd:9c:dc:2b:ce:27:c9:41:c6:ff:a8:4f:83:53:39:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:2B:45:12:70:03:FD:58:57:D3:BF:54:B6:BC:8F:41:BD:EC:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rk4rRRJwA_1YV9O_VLa8j0G97Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:8d:d2:c8:83:d2:f3:f8:e9:85:35:2e:5b:99:5b:31:7c:2e:
f6:2d:07:44:4f:9e:00:f5:43:b9:6f:e6:58:ac:8d:f3:42:10:
cf:07:de:37:67:97:37:95:58:ac:a5:e4:64:b6:55:c3:4d:80:
89:5d:f8:e8:41:8c:3a:a7:87:a5:7c:97:4b:cf:cb:a9:ce:57:
2e:d8:4a:fc:d7:6f:25:cf:a0:11:50:94:d6:bc:0d:ca:3a:eb:
8a:c7:7f:a5:b6:57:01:6f:e6:fa:c8:5e:74:ba:3f:c1:97:f8:
92:55:a0:31:df:84:2e:3b:55:2a:63:9a:bc:0d:5b:f7:30:18:
04:da:7b:06:1b:f9:b4:a8:f1:8d:3b:6e:74:17:97:9b:c3:a5:
83:da:4e:61:67:a2:a3:2f:20:3b:71:25:29:3e:bf:28:ef:24:
18:6d:8a:b8:4a:cd:1a:6e:0d:88:bd:7a:89:66:60:8d:05:2c:
8d:bc:3b:13:f7:93:76:05:9b:be:28:4a:b7:86:1a:e3:f2:12:
79:9a:9c:e8:4b:5a:2f:ef:0e:5d:5d:a5:11:17:0b:c9:0f:76:
d8:56:05:42:fd:c4:11:33:63:a5:78:8f:74:48:d3:54:35:fb:
30:dd:56:94:9f:2c:a0:93:9e:b5:e9:8f:38:ce:18:f6:02:b1:
d2:3c:8c:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsivQhHxP93b2wv8octSaOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEyMDcxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjRlMmI0NTEyNzAwM2ZkNTg1N2QzYmY1NGI2YmM4ZjQxYmRlY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk38O0MDg2+QMW2SKumBAQ1j3Y/fr
E94zcIx1fsmeQG/JE0SvvIwnYW/3dm3tQE5W29jCeTkS0JVEFRHC7QGb3A7TTa/K
yl2aIDdAXRcPHqoeIJLtypaQhDIGW36yCuQPb2pq1E9FuIp3MUSoZ35KLbUY3WBr
FIaVz0XtKdxEx12IyudTv6i8vpC730G6gF80krTKxuBFYB9AuBNBuTuPxXxtyBBP
QpFfZUWCvPlSUanr+IRRyPc7V0pyeL/Tj1KIsMg2nfrjJkGLOjdC0koqVg3scGyt
y4X9ffNLCnWtTXtUE+iO6MpriU4mrwwXJOHNnNwrzifJQcb/qE+DUznx3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEZOK0UScAP9WFfTv1S2vI9BvezpMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUms0clJSSndBXzFZVjlPX1ZMYThqMEc5N09rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD2N0siD0vP46YU1LluZ
WzF8LvYtB0RPngD1Q7lv5lisjfNCEM8H3jdnlzeVWKyl5GS2VcNNgIld+OhBjDqn
h6V8l0vPy6nOVy7YSvzXbyXPoBFQlNa8Dco664rHf6W2VwFv5vrIXnS6P8GX+JJV
oDHfhC47VSpjmrwNW/cwGATaewYb+bSo8Y07bnQXl5vDpYPaTmFnoqMvIDtxJSk+
vyjvJBhtirhKzRpuDYi9eolmYI0FLI28OxP3k3YFm74oSreGGuPyEnmanOhLWi/v
Dl1dpREXC8kPdthWBUL9xBEzY6V4j3RI01Q1+zDdVpSfLKCTnrXpjzjOGPYCsdI8
jDk=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:13:58 2025 by rpki-client