Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sd219ISAUDt9f4saN_RpZPmXG-4.roa
File: Sd219ISAUDt9f4saN_RpZPmXG-4.roa (raw, json)
Hash identifier: pJ8DFUXfA/UAZsxU4VJcG/3YcRB3/eVX0F4eS2Y0wqk=
Subject key identifier: 49:DD:B5:F4:84:80:50:3B:7D:7F:8B:1A:37:F4:69:64:F9:97:1B:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B721E29491E8701C4E4414EDB228E39FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sd219ISAUDt9f4saN_RpZPmXG-4.roa
Signing time: Fri 27 Oct 2023 17:11:01 +0000
ROA not before: Fri 27 Oct 2023 17:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:1e:29:49:1e:87:01:c4:e4:41:4e:db:22:8e:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 17:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ddb5f48480503b7d7f8b1a37f46964f9971bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:12:6d:10:50:72:b4:5d:fc:b9:9f:4d:72:
1b:47:76:67:55:86:f3:f4:7d:ca:fb:6e:78:0e:f6:
72:cd:fe:9f:60:17:27:24:c9:0c:8f:13:53:07:30:
4a:fb:38:ac:54:e6:1a:ec:52:c1:7c:7e:0d:4b:c0:
6c:74:5e:da:b9:c5:59:51:c0:9c:63:fc:d7:58:02:
e3:f7:1d:18:18:07:54:2e:51:a2:64:d9:f2:3c:6e:
06:09:66:8c:19:81:21:d9:a4:f7:67:27:b1:a9:e3:
63:50:4f:6f:d3:51:7d:ee:d2:5a:f5:59:d3:d9:96:
09:d0:3c:64:8f:9e:6e:f0:85:47:2a:65:f4:71:ca:
01:f8:34:d7:2c:12:6a:52:c5:e2:ff:48:51:ef:12:
dc:9e:06:37:69:81:32:cb:4f:08:b0:3a:bc:65:0c:
18:ea:06:25:ed:68:10:f2:0f:8f:37:b3:16:66:11:
c3:d1:1d:49:74:59:31:fa:84:6d:6c:b2:f2:d6:76:
46:36:65:de:61:2d:10:e5:71:e7:d1:9b:27:22:d1:
80:69:a2:0b:41:e9:4f:f5:00:49:30:e2:da:0c:0c:
9b:47:cb:d1:e2:85:d5:ef:df:65:73:c0:37:a0:87:
89:b9:95:0a:cb:66:9b:08:e5:36:1c:d4:55:2d:97:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:B5:F4:84:80:50:3B:7D:7F:8B:1A:37:F4:69:64:F9:97:1B:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sd219ISAUDt9f4saN_RpZPmXG-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:42:bc:61:06:4b:b1:52:68:32:77:70:4d:dc:2c:04:1b:6a:
de:fb:e6:00:5c:59:ca:20:0d:76:af:c5:63:0d:08:5c:8c:c6:
bc:02:b1:24:78:ed:97:d2:21:df:3a:81:c5:93:60:23:0e:cd:
dd:2e:c9:b3:c5:ca:64:cb:bc:a8:15:8e:99:dc:b7:b5:0f:76:
cb:e0:d9:29:ca:39:68:f6:6e:21:25:8f:ea:9c:7e:23:46:8d:
00:81:cc:74:74:9f:79:dd:38:fc:6f:66:23:ef:d0:05:d7:45:
b9:d3:d3:ed:2b:f9:ae:8b:fe:19:3b:87:2b:52:dd:bb:25:0e:
a9:f8:1d:16:17:d3:54:f6:38:04:53:de:09:ba:0b:b4:9c:42:
6b:6d:9d:a8:b9:5f:45:dc:bb:d2:13:ea:9c:cd:4c:1a:96:25:
89:0b:ae:42:d0:21:c1:82:9d:68:e6:c0:6d:6d:a4:ab:8d:e0:
ff:6b:fd:a7:4b:b8:00:d5:76:db:26:bc:fd:f8:60:0a:b1:b4:
4c:f5:b1:ff:06:8d:94:2a:35:42:59:3f:7d:62:79:28:7a:ae:
7e:8f:e3:81:b6:ed:f7:76:a5:b2:7f:10:30:03:15:44:49:29:
6f:79:3d:e0:d0:48:19:32:b7:f9:25:ae:99:c4:5e:56:a8:93:
1f:50:b7:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtyHilJHocBxORBTtsijjn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI3MTcxMTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWRkYjVmNDg0ODA1MDNiN2Q3ZjhiMWEzN2Y0Njk2NGY5OTcxYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ISbRBQcrRd/LmfTXIbR3ZnVYbz
9H3K+254DvZyzf6fYBcnJMkMjxNTBzBK+zisVOYa7FLBfH4NS8BsdF7aucVZUcCc
Y/zXWALj9x0YGAdULlGiZNnyPG4GCWaMGYEh2aT3ZyexqeNjUE9v01F97tJa9VnT
2ZYJ0Dxkj55u8IVHKmX0ccoB+DTXLBJqUsXi/0hR7xLcngY3aYEyy08IsDq8ZQwY
6gYl7WgQ8g+PN7MWZhHD0R1JdFkx+oRtbLLy1nZGNmXeYS0Q5XHn0ZsnItGAaaIL
QelP9QBJMOLaDAybR8vR4oXV799lc8A3oIeJuZUKy2abCOU2HNRVLZdRywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEndtfSEgFA7fX+LGjf0aWT5lxvuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvU2QyMTlJU0FVRHQ5ZjRzYU5fUnBaUG1YRy00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxCvGEGS7FSaDJ3cE3c
LAQbat775gBcWcogDXavxWMNCFyMxrwCsSR47ZfSId86gcWTYCMOzd0uybPFymTL
vKgVjpnct7UPdsvg2SnKOWj2biElj+qcfiNGjQCBzHR0n3ndOPxvZiPv0AXXRbnT
0+0r+a6L/hk7hytS3bslDqn4HRYX01T2OART3gm6C7ScQmttnai5X0Xcu9IT6pzN
TBqWJYkLrkLQIcGCnWjmwG1tpKuN4P9r/adLuADVdtsmvP34YAqxtEz1sf8GjZQq
NUJZP31ieSh6rn6P44G27fd2pbJ/EDADFURJKW95PeDQSBkyt/klrpnEXlaokx9Q
tx4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:00:01 2025 by rpki-client