Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V3whrB2m1mugiGTKJkozegAcFL0.roa
File: V3whrB2m1mugiGTKJkozegAcFL0.roa (raw, json)
Hash identifier: PHqNNAh7bQlf+kIduiVeBuaqtmUWnF5ZistIasMZ5PI=
Subject key identifier: 57:7C:21:AC:1D:A6:D6:6B:A0:88:64:CA:26:4A:33:7A:00:1C:14:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B68B1F8C468983CBF0AC0B872A1150A54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V3whrB2m1mugiGTKJkozegAcFL0.roa
Signing time: Wed 25 Oct 2023 21:16:15 +0000
ROA not before: Wed 25 Oct 2023 21:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:b1:f8:c4:68:98:3c:bf:0a:c0:b8:72:a1:15:0a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 21:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=577c21ac1da6d66ba08864ca264a337a001c14bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:a2:57:68:f6:f1:31:0a:4e:e8:46:a9:fe:
a8:7c:23:3a:16:bf:21:77:ef:97:a3:ea:12:7f:2d:
4c:7a:19:79:ec:2d:db:b3:33:64:0b:ed:4a:80:cf:
07:1c:e1:4f:92:c8:73:30:40:c8:dd:7f:77:3a:bf:
23:fb:e9:72:8d:1f:36:48:93:7a:e8:67:56:ad:3f:
88:38:7e:0e:dd:f5:b8:b3:3a:9c:a1:2a:37:01:56:
a3:12:54:66:97:1f:ee:c5:cb:65:62:b9:29:b4:fa:
4b:5e:ca:45:25:f2:b3:c4:13:7f:ec:d8:67:f3:e6:
b5:14:39:77:d6:bf:da:70:f9:ea:3c:ca:ff:98:9c:
77:a3:66:68:32:ee:dd:cc:ef:16:07:d2:50:1f:3e:
95:c5:d1:4a:7d:98:e0:a9:c7:82:c4:a8:76:75:ad:
ee:29:e8:b9:38:0f:32:33:37:6e:8f:4c:eb:cd:7f:
ad:57:27:8c:45:8e:9f:2f:10:9f:cc:19:44:cc:b6:
81:0c:c6:38:7b:57:65:ee:d0:3d:c0:d0:c4:61:56:
0a:3a:ac:e3:9a:f0:45:f2:c7:09:1a:d8:b1:8d:15:
b2:a1:ab:49:01:82:26:8a:46:12:de:e7:13:04:f3:
4d:47:be:46:de:a4:02:4e:b4:eb:4c:25:51:57:9c:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:21:AC:1D:A6:D6:6B:A0:88:64:CA:26:4A:33:7A:00:1C:14:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V3whrB2m1mugiGTKJkozegAcFL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:0a:b5:1b:46:0e:f8:b6:25:f9:bd:94:ef:e2:0c:66:a5:45:
fe:e2:e6:cb:da:21:75:32:77:b5:60:ba:70:bf:dd:c4:58:a9:
ce:ad:fe:91:0f:22:38:8a:c1:12:b4:64:85:5d:87:1a:4b:b9:
02:58:ac:b4:04:00:e3:e5:73:fe:5b:68:6f:a7:83:16:9c:59:
7c:3c:61:7a:1b:93:04:a1:c1:7a:f0:d2:82:f3:95:9e:8b:f4:
3e:55:5d:c3:49:5f:7e:e8:82:95:bf:22:2c:87:c2:53:ea:8b:
82:e5:49:cf:db:a3:35:1b:83:0f:bb:fa:48:f5:3b:92:8a:b5:
c1:ae:27:cf:4d:e0:f1:2d:df:86:ea:dd:3b:09:38:99:4a:07:
38:3c:d3:20:b7:99:e8:43:c7:10:b5:b8:bb:f5:24:01:ee:b9:
a8:b3:df:68:36:b6:f9:49:77:7a:d1:f6:60:06:9b:d0:bd:2e:
24:8a:76:b9:ee:ce:ea:80:7f:e1:8c:c3:d9:1d:be:9b:92:d3:
a0:a3:4a:a9:45:41:a1:ae:85:19:5e:50:bc:33:0f:d9:f7:3d:
5a:02:95:81:26:0f:76:62:70:e9:5f:1c:df:e9:ab:8a:d9:ed:
f5:25:c5:8f:bd:fb:5f:2f:80:b5:06:ad:8f:58:e5:b1:7c:0c:
8d:87:ad:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtosfjEaJg8vwrAuHKhFQpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI1MjExNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzdjMjFhYzFkYTZkNjZiYTA4ODY0Y2EyNjRhMzM3YTAwMWMxNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF6iV2j28TEKTuhGqf6ofCM6Fr8h
d++Xo+oSfy1Mehl57C3bszNkC+1KgM8HHOFPkshzMEDI3X93Or8j++lyjR82SJN6
6GdWrT+IOH4O3fW4szqcoSo3AVajElRmlx/uxctlYrkptPpLXspFJfKzxBN/7Nhn
8+a1FDl31r/acPnqPMr/mJx3o2ZoMu7dzO8WB9JQHz6VxdFKfZjgqceCxKh2da3u
Kei5OA8yMzduj0zrzX+tVyeMRY6fLxCfzBlEzLaBDMY4e1dl7tA9wNDEYVYKOqzj
mvBF8scJGtixjRWyoatJAYImikYS3ucTBPNNR75G3qQCTrTrTCVRV5zKYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFd8IawdptZroIhkyiZKM3oAHBS9MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVjN3aHJCMm0xbXVnaUdUS0prb3plZ0FjRkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMUKtRtGDvi2Jfm9lO/i
DGalRf7i5svaIXUyd7VgunC/3cRYqc6t/pEPIjiKwRK0ZIVdhxpLuQJYrLQEAOPl
c/5baG+ngxacWXw8YXobkwShwXrw0oLzlZ6L9D5VXcNJX37ogpW/IiyHwlPqi4Ll
Sc/bozUbgw+7+kj1O5KKtcGuJ89N4PEt34bq3TsJOJlKBzg80yC3mehDxxC1uLv1
JAHuuaiz32g2tvlJd3rR9mAGm9C9LiSKdrnuzuqAf+GMw9kdvpuS06CjSqlFQaGu
hRleULwzD9n3PVoClYEmD3ZicOlfHN/pq4rZ7fUlxY+9+18vgLUGrY9Y5bF8DI2H
rbo=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:19:49 2025 by rpki-client