Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_kv_yZ_hJIOtkGA_3aMLAuXaxI.roa
File: T_kv_yZ_hJIOtkGA_3aMLAuXaxI.roa (raw, json)
Hash identifier: EW0hiNFIB/+gOU6uhnROznISISR/pVLgkfUvTSjOIxo=
Subject key identifier: 4F:F9:2F:FF:26:7F:84:92:0E:B6:41:80:FF:76:8C:2C:0B:97:6B:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B12DBE982423741890DEA5DD0AA997796
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_kv_yZ_hJIOtkGA_3aMLAuXaxI.roa
Signing time: Mon 09 Oct 2023 05:14:43 +0000
ROA not before: Mon 09 Oct 2023 05:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:db:e9:82:42:37:41:89:0d:ea:5d:d0:aa:99:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 05:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff92fff267f84920eb64180ff768c2c0b976b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:6e:1b:7b:08:a7:4f:ed:0e:ee:15:ee:ad:
17:3e:1b:d7:df:5c:2d:f5:88:75:aa:69:f0:58:02:
33:df:0a:36:8c:b5:0e:b4:a6:5e:f6:6d:a6:32:dd:
94:c5:8b:96:b2:29:6b:95:e4:46:a5:8d:a4:16:8e:
65:1e:4d:88:53:b9:75:ff:e0:52:8b:64:22:4f:07:
b5:04:9e:d5:46:e6:cf:10:5c:96:6f:d7:46:ff:27:
74:61:23:d7:e5:6b:1b:65:08:30:09:5a:06:2a:47:
74:e7:a4:9c:75:68:cc:49:a6:5d:5a:5a:7c:76:7a:
ce:41:1d:97:c4:ae:fa:ed:ef:4f:2c:12:9f:7d:b0:
e1:99:eb:46:b5:7f:82:e4:26:d5:1b:29:12:e4:8b:
1b:4a:7f:5e:95:0a:bf:77:96:bf:43:21:3e:e2:69:
2e:19:b5:6e:f6:19:c3:4e:0b:8b:62:7c:34:64:2d:
6a:36:67:a4:af:aa:8d:53:3d:19:d1:61:b1:ba:ba:
ee:43:35:00:d2:cd:2a:8c:49:b8:46:aa:51:6f:92:
8f:6d:fa:18:fe:b2:7c:46:34:1a:9a:9a:4c:48:72:
b2:db:a7:ec:2f:df:3d:1b:5a:be:29:3d:d5:71:d5:
8a:13:79:b3:c7:24:77:60:7c:53:78:89:18:8f:70:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:2F:FF:26:7F:84:92:0E:B6:41:80:FF:76:8C:2C:0B:97:6B:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T_kv_yZ_hJIOtkGA_3aMLAuXaxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:b1:82:e0:03:98:ea:88:44:81:44:43:75:a1:a2:a1:32:d2:
07:b5:f9:b8:64:9e:54:d7:b9:6b:5e:6a:50:cc:43:05:50:50:
1f:72:5b:24:83:d1:3b:57:7d:0e:2d:d4:04:85:a6:db:60:81:
bb:59:da:4b:e2:58:9b:bd:20:97:35:78:ba:14:d8:bd:4f:d9:
32:49:21:d1:76:df:91:8c:16:89:d3:3e:33:18:24:e6:ad:40:
74:fd:c2:f6:2a:5b:7f:89:fa:b0:d4:cc:f2:ec:ab:c8:81:48:
70:ee:6f:ae:a8:4b:e1:b5:15:bc:c7:c2:54:f8:f1:92:57:68:
be:94:7f:08:67:88:e2:8e:05:29:c4:46:c8:3d:58:fc:c4:e0:
1e:4a:17:67:bd:d8:00:cb:a5:6a:87:f2:67:b3:da:74:94:02:
f3:d2:85:28:d3:3c:e3:02:c1:ac:b2:14:9d:e8:60:d2:87:3b:
a9:05:47:a4:ca:61:7a:87:9d:7a:60:5b:e5:30:91:48:ec:29:
71:d5:0f:29:d1:cc:ae:ab:9e:28:13:6e:83:0a:9e:b0:a5:0d:
2f:a2:84:a9:6f:af:a0:a6:6d:58:b6:5f:95:03:ba:ca:21:21:
9b:12:2a:ca:e0:27:43:12:76:0b:45:d7:39:47:42:9f:21:67:
cf:7c:6b:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsS2+mCQjdBiQ3qXdCqmXeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA5MDUxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY5MmZmZjI2N2Y4NDkyMGViNjQxODBmZjc2OGMyYzBiOTc2YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDFuG3sIp0/tDu4V7q0XPhvX31wt
9Yh1qmnwWAIz3wo2jLUOtKZe9m2mMt2UxYuWsilrleRGpY2kFo5lHk2IU7l1/+BS
i2QiTwe1BJ7VRubPEFyWb9dG/yd0YSPX5WsbZQgwCVoGKkd056ScdWjMSaZdWlp8
dnrOQR2XxK767e9PLBKffbDhmetGtX+C5CbVGykS5IsbSn9elQq/d5a/QyE+4mku
GbVu9hnDTguLYnw0ZC1qNmekr6qNUz0Z0WGxurruQzUA0s0qjEm4RqpRb5KPbfoY
/rJ8RjQamppMSHKy26fsL989G1q+KT3VcdWKE3mzxyR3YHxTeIkYj3A65wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE/5L/8mf4SSDrZBgP92jCwLl2sSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVF9rdl95Wl9oSklPdGtHQV8zYU1MQXVYYXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKqxguADmOqIRIFEQ3Wh
oqEy0ge1+bhknlTXuWtealDMQwVQUB9yWySD0TtXfQ4t1ASFpttggbtZ2kviWJu9
IJc1eLoU2L1P2TJJIdF235GMFonTPjMYJOatQHT9wvYqW3+J+rDUzPLsq8iBSHDu
b66oS+G1FbzHwlT48ZJXaL6UfwhniOKOBSnERsg9WPzE4B5KF2e92ADLpWqH8mez
2nSUAvPShSjTPOMCwayyFJ3oYNKHO6kFR6TKYXqHnXpgW+UwkUjsKXHVDynRzK6r
nigTboMKnrClDS+ihKlvr6CmbVi2X5UDusohIZsSKsrgJ0MSdgtF1zlHQp8hZ898
a+U=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:05:22 2025 by rpki-client