Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkn_mEOvGwLFbCoI7ne99py64nI.roa
File: Rkn_mEOvGwLFbCoI7ne99py64nI.roa (raw, json)
Hash identifier: bHGJ/7e9MWU/OAbsZ43w3e6hsFqXVB1ANUHZ4EXDpNw=
Subject key identifier: 46:49:FF:98:43:AF:1B:02:C5:6C:2A:08:EE:77:BD:F6:9C:BA:E2:72
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4FC0BE1502B5FB968376D7F54CD5818E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkn_mEOvGwLFbCoI7ne99py64nI.roa
Signing time: Sat 09 Dec 2023 18:04:40 +0000
ROA not before: Sat 09 Dec 2023 18:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4fc0:8581/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:c0:be:15:02:b5:fb:96:83:76:d7:f5:4c:d5:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 18:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4649ff9843af1b02c56c2a08ee77bdf69cbae272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:ab:02:e6:78:86:f7:1e:ec:ae:cb:37:f8:
00:87:eb:f3:4b:61:64:30:31:99:9e:7b:1c:4a:d8:
27:aa:63:25:97:b5:c1:43:62:34:41:2e:d2:98:c7:
91:7b:65:da:08:35:e3:c3:45:45:57:97:eb:25:ed:
9a:1a:35:30:7b:40:4b:d0:d1:3f:94:67:90:ff:3e:
41:5f:59:29:1c:c1:a6:7d:0c:c2:9c:7b:dd:6c:0c:
d2:a5:86:3a:16:05:c0:99:3c:48:03:be:80:92:78:
3c:5a:f1:60:49:fb:bc:49:98:14:92:4d:d5:33:bc:
27:dc:4e:00:14:0e:77:fa:1d:55:93:e6:42:08:f1:
04:9c:14:27:59:85:fd:de:a8:54:22:a0:07:9c:76:
39:0c:82:52:b8:8d:9b:33:dd:95:09:97:fe:7d:ab:
3b:6d:9a:f6:28:11:fe:c9:e1:9e:a6:8e:f5:5a:52:
90:1d:01:e7:4e:d1:d0:52:94:ae:a1:f2:5c:7c:93:
11:2c:b3:3b:ce:4a:25:02:d5:69:93:b0:8c:87:e5:
c2:99:f6:b8:bc:66:25:4e:68:25:d6:9b:f0:1e:4a:
32:2c:4d:26:d6:bd:de:7c:19:13:8b:8e:47:63:b0:
18:9f:da:cb:dc:ae:06:d3:a7:38:02:89:a2:eb:86:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:FF:98:43:AF:1B:02:C5:6C:2A:08:EE:77:BD:F6:9C:BA:E2:72
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkn_mEOvGwLFbCoI7ne99py64nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:6e:6e:d5:92:42:d4:cd:76:44:fe:c2:5c:e4:d5:89:1b:74:
21:6c:c0:d4:46:43:83:99:4a:a9:fc:2f:f8:7a:26:4c:57:ea:
7d:1c:fb:84:c8:15:a5:7f:e7:bf:e1:23:b0:77:b2:ad:c1:f6:
6c:28:d7:1f:66:04:cc:49:44:52:3b:7f:42:5e:64:d4:d1:c2:
00:85:ee:e8:42:0d:85:21:bb:89:9b:13:50:8e:f2:0d:2c:3f:
30:7c:d1:22:3a:0d:46:7d:65:da:73:e6:c2:95:5a:d0:55:0c:
27:c2:02:33:7d:39:7d:ad:88:7c:ea:df:be:77:b0:a6:46:a7:
44:e7:39:5c:45:9c:dc:10:db:d4:1d:b4:1b:cb:46:f6:40:0f:
27:5a:8f:91:9e:e4:bc:c1:0a:a9:e3:4e:87:29:22:5c:ed:2c:
e1:ea:2d:88:c5:43:ff:1b:8c:eb:a0:de:44:5a:04:97:a1:53:
22:6b:01:61:5d:6b:b0:f2:3b:29:7d:88:ab:33:fb:e4:cb:7d:
46:7c:5e:31:cc:e7:7e:63:29:07:b4:1b:37:57:75:fc:f8:71:
26:5f:8d:bd:14:4e:9d:35:02:ea:4f:26:ba:f7:23:f5:c0:3f:
84:94:4b:db:91:70:7e:16:24:bb:12:fb:4b:3e:b4:f2:a4:6f:
a0:fe:06:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxPwL4VArX7loN21/VM1YGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA5MTgwNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQ5ZmY5ODQzYWYxYjAyYzU2YzJhMDhlZTc3YmRmNjljYmFlMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9erAuZ4hvce7K7LN/gAh+vzS2Fk
MDGZnnscStgnqmMll7XBQ2I0QS7SmMeRe2XaCDXjw0VFV5frJe2aGjUwe0BL0NE/
lGeQ/z5BX1kpHMGmfQzCnHvdbAzSpYY6FgXAmTxIA76Akng8WvFgSfu8SZgUkk3V
M7wn3E4AFA53+h1Vk+ZCCPEEnBQnWYX93qhUIqAHnHY5DIJSuI2bM92VCZf+fas7
bZr2KBH+yeGepo71WlKQHQHnTtHQUpSuofJcfJMRLLM7zkolAtVpk7CMh+XCmfa4
vGYlTmgl1pvwHkoyLE0m1r3efBkTi45HY7AYn9rL3K4G06c4Aomi64ZPiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEZJ/5hDrxsCxWwqCO53vfacuuJyMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUmtuX21FT3ZHd0xGYkNvSTduZTk5cHk2NG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHBubtWSQtTNdkT+wlzk
1YkbdCFswNRGQ4OZSqn8L/h6JkxX6n0c+4TIFaV/57/hI7B3sq3B9mwo1x9mBMxJ
RFI7f0JeZNTRwgCF7uhCDYUhu4mbE1CO8g0sPzB80SI6DUZ9Zdpz5sKVWtBVDCfC
AjN9OX2tiHzq3753sKZGp0TnOVxFnNwQ29QdtBvLRvZADydaj5Ge5LzBCqnjTocp
IlztLOHqLYjFQ/8bjOug3kRaBJehUyJrAWFda7DyOyl9iKsz++TLfUZ8XjHM535j
KQe0GzdXdfz4cSZfjb0UTp01AupPJrr3I/XAP4SUS9uRcH4WJLsS+0s+tPKkb6D+
Blo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:19 2025 by rpki-client