Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TqtiejQ9UIgiAz50UQ_FqpI-WJU.roa
File: TqtiejQ9UIgiAz50UQ_FqpI-WJU.roa (raw, json)
Hash identifier: 7pHoxht4VqnmHTwyI1T2aoPONHE//92mzjTwisTCmpY=
Subject key identifier: 4E:AB:62:7A:34:3D:50:88:22:03:3E:74:51:0F:C5:AA:92:3E:58:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4691DE8DB9C51DE8EE450CFEBE0FA37F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TqtiejQ9UIgiAz50UQ_FqpI-WJU.roa
Signing time: Thu 19 Oct 2023 06:14:06 +0000
ROA not before: Thu 19 Oct 2023 06:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:91:de:8d:b9:c5:1d:e8:ee:45:0c:fe:be:0f:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 06:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eab627a343d508822033e74510fc5aa923e5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:ac:57:db:c2:8d:5a:26:3a:1d:51:fd:03:
6c:92:80:31:83:29:68:e4:6a:5c:f6:86:9d:2b:32:
5d:9d:d4:0e:05:85:f1:f9:46:07:d1:5a:77:d9:86:
0d:95:3e:f8:99:ff:f6:74:90:a1:2c:2e:00:1b:fb:
05:94:bf:e4:8c:bb:d3:48:d4:94:1b:4e:fb:47:00:
0f:bf:23:31:96:cc:cb:5b:0c:ee:51:ac:b1:ce:43:
83:13:83:c5:44:b7:de:9a:5a:ed:dd:40:64:9c:8c:
d9:44:f9:88:9c:ba:df:88:7e:6c:fe:da:f3:2e:12:
44:43:22:13:ca:8b:0c:39:e0:ed:f2:ff:60:47:79:
78:ab:52:9c:51:7d:34:6f:a5:f0:04:24:bf:be:1d:
64:33:33:6b:38:c9:7e:a5:f0:51:67:f5:1e:09:d9:
bc:31:8a:d7:b1:66:55:78:66:24:b4:c7:14:e9:88:
25:bc:76:23:1c:16:96:0a:de:ef:f9:c0:47:03:7a:
d0:ba:e5:34:49:84:2e:6c:57:ee:e2:46:07:bd:98:
9f:f3:4a:0a:50:fc:ed:df:8a:30:9f:1b:4a:58:15:
33:f6:d6:f1:e2:19:08:3c:af:84:72:fa:54:31:70:
a2:58:b9:5b:a7:09:e1:ca:f6:83:c0:e4:0c:64:09:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:62:7A:34:3D:50:88:22:03:3E:74:51:0F:C5:AA:92:3E:58:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TqtiejQ9UIgiAz50UQ_FqpI-WJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:39:93:d5:e7:9d:4f:c7:89:56:b3:03:40:f2:29:21:12:ac:
23:46:36:95:bc:fe:e1:a9:a9:75:79:df:4c:c3:05:2d:ae:c4:
03:1e:3c:59:94:4e:45:a7:cb:ed:0c:6c:0c:3a:5c:7f:95:07:
68:5e:52:d7:b3:7d:db:b0:75:97:c2:1c:1a:fa:d4:02:c5:5c:
e4:6d:99:f8:4b:75:1e:37:4b:f8:c7:73:9c:47:cd:72:a1:f8:
56:93:77:20:d8:2e:bd:4c:6a:62:c9:09:ec:ff:df:fa:84:2a:
27:d3:70:a9:a7:96:b0:d3:02:8e:ef:35:e3:42:00:2a:3d:6a:
4c:df:e8:54:a8:5f:c7:a1:ab:4c:47:1a:2e:55:97:68:6d:1c:
4d:bc:77:21:0d:ad:ee:84:48:b2:80:5a:db:bb:9d:a2:64:8a:
a8:8d:e2:06:6e:35:1e:54:3c:37:ae:4a:d1:83:ec:87:35:3c:
79:3b:aa:dc:e6:05:45:bb:2e:62:0e:01:90:ff:09:d5:21:11:
c8:4e:43:b6:c8:2c:b0:cc:3b:4f:bc:60:c0:dc:5e:4a:aa:44:
39:df:32:d1:91:9b:ab:b4:0c:6b:bd:19:b8:9b:31:30:a8:b1:
9c:e2:ba:8b:90:a6:f6:dd:e2:aa:1f:6e:3a:24:8d:09:f7:55:
e3:4e:c9:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtGkd6NucUd6O5FDP6+D6N/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDYxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWFiNjI3YTM0M2Q1MDg4MjIwMzNlNzQ1MTBmYzVhYTkyM2U1ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+isV9vCjVomOh1R/QNskoAxgylo
5Gpc9oadKzJdndQOBYXx+UYH0Vp32YYNlT74mf/2dJChLC4AG/sFlL/kjLvTSNSU
G077RwAPvyMxlszLWwzuUayxzkODE4PFRLfemlrt3UBknIzZRPmInLrfiH5s/trz
LhJEQyITyosMOeDt8v9gR3l4q1KcUX00b6XwBCS/vh1kMzNrOMl+pfBRZ/UeCdm8
MYrXsWZVeGYktMcU6YglvHYjHBaWCt7v+cBHA3rQuuU0SYQubFfu4kYHvZif80oK
UPzt34ownxtKWBUz9tbx4hkIPK+EcvpUMXCiWLlbpwnhyvaDwOQMZAmqHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE6rYno0PVCIIgM+dFEPxaqSPliVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVHF0aWVqUTlVSWdpQXo1MFVRX0ZxcEktV0pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFE5k9XnnU/HiVazA0Dy
KSESrCNGNpW8/uGpqXV530zDBS2uxAMePFmUTkWny+0MbAw6XH+VB2heUtezfduw
dZfCHBr61ALFXORtmfhLdR43S/jHc5xHzXKh+FaTdyDYLr1MamLJCez/3/qEKifT
cKmnlrDTAo7vNeNCACo9akzf6FSoX8ehq0xHGi5Vl2htHE28dyENre6ESLKAWtu7
naJkiqiN4gZuNR5UPDeuStGD7Ic1PHk7qtzmBUW7LmIOAZD/CdUhEchOQ7bILLDM
O0+8YMDcXkqqRDnfMtGRm6u0DGu9GbibMTCosZziuouQpvbd4qofbjokjQn3VeNO
yag=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:56 2025 by rpki-client