Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U-9qjW5EOCmqbxq2dCYw9ojBsoA.roa
File: U-9qjW5EOCmqbxq2dCYw9ojBsoA.roa (raw, json)
Hash identifier: pQY6D+uyOKskdU14KxK6LFKphdXnJR5Ow5kmRwh5F5E=
Subject key identifier: 53:EF:6A:8D:6E:44:38:29:AA:6F:1A:B6:74:26:30:F6:88:C1:B2:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B281A53A83C5564D390B307796DBC56F0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U-9qjW5EOCmqbxq2dCYw9ojBsoA.roa
Signing time: Fri 13 Oct 2023 08:14:55 +0000
ROA not before: Fri 13 Oct 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:1a:53:a8:3c:55:64:d3:90:b3:07:79:6d:bc:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ef6a8d6e443829aa6f1ab6742630f688c1b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:68:7a:23:bf:72:2b:dd:a1:ec:99:c0:6d:
6f:1d:01:6a:dd:71:0f:22:9b:9d:f1:fe:e7:25:23:
d9:10:10:29:2d:d9:7d:f6:2a:bf:40:87:09:86:d9:
c7:62:f8:4e:36:be:a2:46:3f:db:08:5f:c4:01:93:
06:2a:58:ff:ec:e9:e2:f1:90:47:c1:4b:03:88:bc:
77:e3:27:c1:ef:85:2a:82:8a:da:be:1b:6c:31:ae:
0e:52:f0:47:09:34:7a:2a:15:52:f9:3b:68:62:84:
7d:2f:0c:8d:7e:d3:ae:8d:44:65:68:d3:4c:ac:ea:
5e:0a:eb:39:45:ea:37:86:dc:52:d9:ea:63:86:28:
36:95:f5:f6:67:ea:b5:cc:48:f0:3f:22:bc:6e:58:
2f:63:fe:7d:ff:aa:4c:d1:c9:00:af:d8:2d:7f:2b:
b3:1c:7d:d4:11:55:98:d4:7c:c2:63:3b:5f:81:ed:
ab:c6:b0:4f:77:96:fb:19:de:0e:34:b0:7d:03:89:
0a:54:e0:30:9e:fa:61:d9:60:b2:27:89:6a:72:fb:
02:9c:7e:b8:ec:32:b1:4b:4d:7a:67:d0:9f:bf:61:
5c:bf:48:b5:f6:ff:d8:39:df:04:d7:95:4e:a9:57:
f3:d0:5c:fe:d4:41:1c:3a:1a:21:33:c0:a3:40:52:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:6A:8D:6E:44:38:29:AA:6F:1A:B6:74:26:30:F6:88:C1:B2:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/U-9qjW5EOCmqbxq2dCYw9ojBsoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:51:a1:0d:ec:6a:df:36:aa:7b:47:fd:c5:25:92:6a:a3:7a:
f0:a1:2f:67:24:e4:ec:82:f5:83:66:ca:b7:1d:9f:9d:75:16:
7a:78:74:99:98:a7:3f:d5:4b:d6:37:c7:4c:af:ff:55:fb:6e:
f3:fe:18:76:4b:8e:69:71:ee:eb:92:c1:74:ab:fe:09:80:1c:
7e:86:a9:29:33:0f:58:06:5e:20:d4:ef:18:1b:8b:d8:a4:c9:
78:fb:41:8e:62:56:96:9f:17:ca:67:0e:cf:ef:cd:f9:ca:24:
0c:c7:6b:88:18:3b:61:a3:f6:a0:db:34:e7:15:7c:3f:70:ca:
ef:2a:63:de:47:7a:3c:79:04:76:28:ee:e7:27:0e:61:a6:4a:
12:8b:7c:ed:3d:78:12:6e:13:af:b7:6e:65:ab:29:92:44:a7:
ec:77:61:88:2e:35:e2:27:c1:8d:72:3c:e6:46:96:f7:2f:d3:
b4:f2:62:cb:20:59:3e:b5:40:cb:0d:f1:a2:7d:91:2b:31:fd:
cb:d8:d3:8f:5a:b8:79:25:e7:85:01:f5:a5:d8:dc:2e:5f:37:
95:13:d2:78:c9:90:9e:b1:c9:ba:62:fc:76:68:c7:b0:01:51:
be:2c:1d:00:0e:89:bf:27:59:90:42:9c:43:88:1a:e1:99:37:
19:b2:32:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsoGlOoPFVk05CzB3ltvFbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMDgxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VmNmE4ZDZlNDQzODI5YWE2ZjFhYjY3NDI2MzBmNjg4YzFiMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoFoeiO/civdoeyZwG1vHQFq3XEP
Ipud8f7nJSPZEBApLdl99iq/QIcJhtnHYvhONr6iRj/bCF/EAZMGKlj/7Oni8ZBH
wUsDiLx34yfB74UqgoravhtsMa4OUvBHCTR6KhVS+TtoYoR9LwyNftOujURlaNNM
rOpeCus5Reo3htxS2epjhig2lfX2Z+q1zEjwPyK8blgvY/59/6pM0ckAr9gtfyuz
HH3UEVWY1HzCYztfge2rxrBPd5b7Gd4ONLB9A4kKVOAwnvph2WCyJ4lqcvsCnH64
7DKxS016Z9Cfv2Fcv0i19v/YOd8E15VOqVfz0Fz+1EEcOhohM8CjQFIumwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFPvao1uRDgpqm8atnQmMPaIwbKAMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVS05cWpXNUVPQ21xYnhxMmRDWXc5b2pCc29BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMFRoQ3sat82qntH/cUl
kmqjevChL2ck5OyC9YNmyrcdn511Fnp4dJmYpz/VS9Y3x0yv/1X7bvP+GHZLjmlx
7uuSwXSr/gmAHH6GqSkzD1gGXiDU7xgbi9ikyXj7QY5iVpafF8pnDs/vzfnKJAzH
a4gYO2Gj9qDbNOcVfD9wyu8qY95Hejx5BHYo7ucnDmGmShKLfO09eBJuE6+3bmWr
KZJEp+x3YYguNeInwY1yPOZGlvcv07TyYssgWT61QMsN8aJ9kSsx/cvY049auHkl
54UB9aXY3C5fN5UT0njJkJ6xybpi/HZox7ABUb4sHQAOib8nWZBCnEOIGuGZNxmy
MvA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:46 2025 by rpki-client