Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6ohk3JPZA4RgD2hsKxoVuecCWU.roa
File: X6ohk3JPZA4RgD2hsKxoVuecCWU.roa (raw, json)
Hash identifier: +drsUyCG9maq8tYHUeIJ0o56uK3yKRCoLa/aIconkPs=
Subject key identifier: 5F:AA:21:93:72:4F:64:0E:11:80:3D:A1:B0:AC:68:56:E7:9C:09:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF26F97B8DE562FD3D1CBFAF04EF26EA6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6ohk3JPZA4RgD2hsKxoVuecCWU.roa
Signing time: Tue 21 Nov 2023 15:11:21 +0000
ROA not before: Tue 21 Nov 2023 15:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:6f:97:b8:de:56:2f:d3:d1:cb:fa:f0:4e:f2:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 15:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5faa2193724f640e11803da1b0ac6856e79c0965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:61:c7:d7:49:c7:10:8a:43:c7:06:fe:d0:
24:4f:78:e7:29:2e:96:e3:07:00:46:79:9c:0c:08:
5a:3b:f8:e5:2b:bb:ec:42:2b:4c:76:8e:96:0e:79:
7a:4f:f6:10:fe:6e:97:46:78:b3:5a:0e:a9:3d:12:
34:36:eb:e2:c2:ae:dc:29:75:32:bd:ef:51:2d:2a:
0e:ae:18:2d:9e:db:74:94:11:61:67:4a:99:fb:3b:
36:e0:f8:1b:81:26:b1:9d:c0:49:79:77:2f:e3:f0:
21:39:95:44:c2:21:ab:1e:7e:66:e4:12:d4:7f:e9:
0c:48:d6:4c:ea:35:aa:22:b0:5a:f5:c5:77:e6:ed:
46:f5:50:56:4b:ac:9e:81:c0:4a:6d:e6:ce:af:02:
a1:c2:33:a7:ab:14:6b:22:4e:fe:ef:bb:51:b1:66:
bd:e9:7b:62:2e:e3:e0:0f:35:b1:6f:14:53:78:99:
7a:67:3c:aa:b4:16:34:eb:6f:46:ca:b2:12:2b:74:
2d:c3:ac:ac:b8:af:04:8f:44:0a:ac:e1:51:ad:09:
13:3c:70:c3:38:f3:6c:b9:55:f2:24:72:3d:b7:60:
0f:ed:f2:1a:cf:89:08:53:b2:9f:07:51:70:08:9b:
13:8a:0f:6b:65:31:5e:ee:e4:19:1d:79:ad:08:51:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:21:93:72:4F:64:0E:11:80:3D:A1:B0:AC:68:56:E7:9C:09:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6ohk3JPZA4RgD2hsKxoVuecCWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:36:e2:e5:53:90:57:41:77:ff:0a:87:05:c9:11:32:9f:51:
a8:4b:5d:ef:d8:8a:0d:ba:fe:bc:a8:25:0f:6e:90:ab:8b:30:
ce:07:35:51:c6:82:13:5b:5e:c2:27:70:02:49:b7:03:38:06:
a4:03:62:12:17:45:fe:0f:92:7c:dc:e9:c8:92:dc:04:12:bf:
e4:c2:39:03:b7:37:45:c6:83:ce:77:9d:e4:38:b7:e5:ce:93:
0c:02:d9:af:5c:d0:5d:f6:af:bd:49:8d:58:9b:69:61:e6:45:
7c:ce:be:20:82:e4:b3:cb:f0:5a:a6:86:30:ce:a7:66:ad:ad:
54:45:49:d2:c3:2b:2d:b9:a7:87:48:36:a5:b8:34:e3:8e:d2:
89:28:1e:57:1e:13:b7:e2:f6:d1:34:17:65:79:ea:a9:52:55:
f5:e9:9b:f6:99:d6:8e:ec:86:1e:2b:da:e7:c0:71:96:4f:ec:
0c:3b:4b:ed:7f:74:c0:67:b6:c3:ca:c4:5b:2d:d6:43:a6:c5:
2e:f9:00:bd:9b:96:56:b3:ff:e6:00:5f:a8:60:fc:07:c6:b9:
30:03:30:85:bc:f9:6f:20:03:2c:b8:3b:c6:58:88:db:77:9e:
05:df:d9:82:4c:f2:62:b9:f6:30:e0:5d:2b:32:a0:11:ba:20:
2e:71:e6:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvyb5e43lYv09HL+vBO8m6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIxMTUxMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmFhMjE5MzcyNGY2NDBlMTE4MDNkYTFiMGFjNjg1NmU3OWMwOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWZhx9dJxxCKQ8cG/tAkT3jnKS6W
4wcARnmcDAhaO/jlK7vsQitMdo6WDnl6T/YQ/m6XRnizWg6pPRI0Nuviwq7cKXUy
ve9RLSoOrhgtntt0lBFhZ0qZ+zs24PgbgSaxncBJeXcv4/AhOZVEwiGrHn5m5BLU
f+kMSNZM6jWqIrBa9cV35u1G9VBWS6yegcBKbebOrwKhwjOnqxRrIk7+77tRsWa9
6XtiLuPgDzWxbxRTeJl6ZzyqtBY0629GyrISK3Qtw6ysuK8Ej0QKrOFRrQkTPHDD
OPNsuVXyJHI9t2AP7fIaz4kIU7KfB1FwCJsTig9rZTFe7uQZHXmtCFGkiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF+qIZNyT2QOEYA9obCsaFbnnAllMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWDZvaGszSlBaQTRSZ0QyaHNLeG9WdWVjQ1dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABI24uVTkFdBd/8KhwXJ
ETKfUahLXe/Yig26/ryoJQ9ukKuLMM4HNVHGghNbXsIncAJJtwM4BqQDYhIXRf4P
knzc6ciS3AQSv+TCOQO3N0XGg853neQ4t+XOkwwC2a9c0F32r71JjVibaWHmRXzO
viCC5LPL8FqmhjDOp2atrVRFSdLDKy25p4dINqW4NOOO0okoHlceE7fi9tE0F2V5
6qlSVfXpm/aZ1o7shh4r2ufAcZZP7Aw7S+1/dMBntsPKxFst1kOmxS75AL2bllaz
/+YAX6hg/AfGuTADMIW8+W8gAyy4O8ZYiNt3ngXf2YJM8mK59jDgXSsyoBG6IC5x
5us=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:07:11 2025 by rpki-client