Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TceEQZl9rNgYRbSEZiSdbVsI0yM.roa
File: TceEQZl9rNgYRbSEZiSdbVsI0yM.roa (raw, json)
Hash identifier: P/ef/93Dbg/1UfWWkeJBC+lBosGBrQ3w2DxZUrh8Ipg=
Subject key identifier: 4D:C7:84:41:99:7D:AC:D8:18:45:B4:84:66:24:9D:6D:5B:08:D3:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B46FDE56ECC05746C1EC888BA5E958254
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TceEQZl9rNgYRbSEZiSdbVsI0yM.roa
Signing time: Thu 19 Oct 2023 08:12:06 +0000
ROA not before: Thu 19 Oct 2023 08:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:fd:e5:6e:cc:05:74:6c:1e:c8:88:ba:5e:95:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 08:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc78441997dacd81845b48466249d6d5b08d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:be:3f:43:5b:73:2e:aa:8e:46:2c:d1:53:
41:b0:b6:5f:a5:f4:28:0a:65:14:d7:35:d9:33:e0:
e3:a5:9c:60:f5:af:38:e1:08:74:1f:e3:c2:05:89:
c8:7b:02:66:55:ca:8b:2a:3b:1c:45:c6:5c:75:40:
89:33:98:64:dd:f2:62:78:38:74:8d:90:7c:53:b4:
a6:94:f8:be:0a:9c:40:bb:d2:8b:ed:f2:8b:a2:84:
a7:b7:ca:73:84:79:df:3c:44:2b:48:4c:24:92:51:
b0:c7:2b:4b:38:57:99:2e:32:94:2d:9c:62:9d:ee:
11:a7:6c:18:4b:68:38:ad:04:c6:ce:84:3e:87:54:
f6:ec:5a:d8:4c:48:ac:7d:01:a3:0b:c1:30:49:bf:
04:d4:d7:8f:f4:0f:90:1b:90:af:a3:11:83:79:27:
03:4b:dd:12:66:d9:57:0c:7d:66:a7:1d:c8:bb:16:
cf:f6:1a:26:be:c8:89:ed:e6:84:1d:53:18:ec:95:
a9:8e:67:90:94:bd:be:23:76:78:c6:e2:5a:a8:44:
94:81:e6:1c:0b:7d:61:63:86:cd:03:9f:b6:52:8e:
67:44:92:83:92:5f:ca:9c:95:3b:49:1c:87:9e:68:
56:9f:10:15:7f:98:54:f7:cc:63:14:b5:dc:ae:ea:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:84:41:99:7D:AC:D8:18:45:B4:84:66:24:9D:6D:5B:08:D3:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TceEQZl9rNgYRbSEZiSdbVsI0yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:11:81:d8:1e:79:c8:1a:eb:a5:93:ad:97:b0:39:e5:cf:3a:
be:16:5c:a2:75:eb:5a:e7:5f:9d:50:48:3f:43:c9:23:92:12:
0a:ae:0c:b2:40:b3:e0:20:06:5e:14:f7:8b:7e:5d:d4:ea:68:
c5:75:c2:f5:ae:ce:a1:48:03:83:92:b2:e8:f6:4e:23:c4:ce:
ce:e1:e9:26:2f:8c:86:00:ad:a9:e9:9e:73:f1:ee:89:49:61:
71:39:95:f5:3e:50:37:9e:8d:1b:57:c7:d6:79:54:aa:e3:6e:
f3:5a:ff:49:1b:40:a7:00:ac:b1:76:f8:9b:b5:19:7e:49:7d:
f7:6b:a8:76:79:c9:46:04:c2:0a:30:58:ed:58:10:3f:58:af:
26:2c:55:30:3a:d4:cf:ee:34:ca:cf:4e:46:03:9d:46:17:af:
3c:8a:ce:98:0f:fd:ec:8b:8d:e9:04:6f:34:eb:e3:fa:a7:42:
04:03:6d:ce:45:d3:c2:85:fc:07:d5:e7:21:35:1f:66:ae:f4:
80:07:6a:95:58:7e:db:28:a4:d4:72:07:e8:42:2e:3b:2d:31:
2c:8d:6c:48:8b:e2:0a:14:00:72:69:83:ad:ad:09:ef:7e:70:
04:8e:77:4d:e6:82:10:e4:61:a9:a5:0c:0b:2a:e0:17:98:ea:
25:c2:87:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtG/eVuzAV0bB7IiLpelYJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDgxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGM3ODQ0MTk5N2RhY2Q4MTg0NWI0ODQ2NjI0OWQ2ZDViMDhkMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMW+P0Nbcy6qjkYs0VNBsLZfpfQo
CmUU1zXZM+DjpZxg9a844Qh0H+PCBYnIewJmVcqLKjscRcZcdUCJM5hk3fJieDh0
jZB8U7SmlPi+CpxAu9KL7fKLooSnt8pzhHnfPEQrSEwkklGwxytLOFeZLjKULZxi
ne4Rp2wYS2g4rQTGzoQ+h1T27FrYTEisfQGjC8EwSb8E1NeP9A+QG5CvoxGDeScD
S90SZtlXDH1mpx3IuxbP9homvsiJ7eaEHVMY7JWpjmeQlL2+I3Z4xuJaqESUgeYc
C31hY4bNA5+2Uo5nRJKDkl/KnJU7SRyHnmhWnxAVf5hU98xjFLXcruotWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE3HhEGZfazYGEW0hGYknW1bCNMjMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVGNlRVFabDlyTmdZUmJTRVppU2RiVnNJMHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABsRgdgeecga66WTrZew
OeXPOr4WXKJ161rnX51QSD9DySOSEgquDLJAs+AgBl4U94t+XdTqaMV1wvWuzqFI
A4OSsuj2TiPEzs7h6SYvjIYAranpnnPx7olJYXE5lfU+UDeejRtXx9Z5VKrjbvNa
/0kbQKcArLF2+Ju1GX5JffdrqHZ5yUYEwgowWO1YED9YryYsVTA61M/uNMrPTkYD
nUYXrzyKzpgP/eyLjekEbzTr4/qnQgQDbc5F08KF/AfV5yE1H2au9IAHapVYftso
pNRyB+hCLjstMSyNbEiL4goUAHJpg62tCe9+cASOd03mghDkYamlDAsq4BeY6iXC
h0Y=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:09:07 2025 by rpki-client