Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y8WzoqnBLeSEhdKZM4MFmvE4SLE.roa
File: Y8WzoqnBLeSEhdKZM4MFmvE4SLE.roa (raw, json)
Hash identifier: SSvipAXSToyATbru0MocQ7jxq21vTZ9W/6w9SL6ugEI=
Subject key identifier: 63:C5:B3:A2:A9:C1:2D:E4:84:85:D2:99:33:83:05:9A:F1:38:48:B1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B49591D65EF4A5DBB99447DD2DF2F1417
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y8WzoqnBLeSEhdKZM4MFmvE4SLE.roa
Signing time: Thu 19 Oct 2023 19:10:58 +0000
ROA not before: Thu 19 Oct 2023 19:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4952:f8f7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:59:1d:65:ef:4a:5d:bb:99:44:7d:d2:df:2f:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 19:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63c5b3a2a9c12de48485d2993383059af13848b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:ea:ea:08:95:2b:30:72:4c:19:e4:7a:5d:
bf:78:7c:70:71:b8:7e:63:d4:bb:9e:c4:88:8f:e8:
43:25:d4:d1:3e:b8:c1:12:a9:14:fa:3d:7d:ef:9a:
12:bd:e8:f9:64:fc:8a:14:75:c2:46:d3:14:0a:af:
eb:de:65:fb:ce:a1:99:77:18:b4:5c:21:11:77:ed:
50:cc:1b:3a:64:43:73:b8:98:57:4e:23:7f:96:52:
02:a2:81:d5:46:5f:e3:02:43:e2:bd:36:cd:8f:84:
49:7b:9a:15:3e:8c:71:75:72:38:5b:f4:eb:7c:be:
5a:6e:2c:5a:9a:81:73:60:fd:cc:e2:db:47:c6:6c:
20:06:fa:40:c5:63:f0:fa:9c:4e:b9:6c:03:26:72:
44:8b:ee:31:17:a5:e0:31:b0:25:81:64:9b:10:49:
97:a0:1e:7e:f1:36:6f:b0:ab:19:6d:ba:a7:9a:ef:
c1:73:8a:c7:1a:ab:b7:8f:2a:e9:44:46:b1:b1:ba:
5d:65:1a:c6:7c:02:ec:13:8e:c0:eb:9e:db:c2:b6:
ba:df:91:14:ff:e3:5e:21:0f:ff:70:6a:29:cd:55:
58:04:50:f3:d9:15:c9:05:e2:18:6d:6d:64:e8:e3:
69:b5:e6:7f:0d:ca:4e:a6:3d:1e:19:47:e4:15:7b:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:B3:A2:A9:C1:2D:E4:84:85:D2:99:33:83:05:9A:F1:38:48:B1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y8WzoqnBLeSEhdKZM4MFmvE4SLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:3a:74:83:6a:52:c1:6f:bb:61:51:07:be:8d:40:76:28:22:
a1:3a:c8:fe:b9:79:09:a6:df:a5:6d:74:9b:01:c5:a2:7e:28:
56:d8:f2:b9:ec:75:e1:ad:e9:39:1a:4f:27:90:00:6b:f5:ee:
a7:9a:2c:20:3e:eb:98:1e:9d:5a:96:84:83:56:d1:b5:03:06:
bf:d3:46:3b:2d:a1:04:48:3e:f6:b8:e4:0d:89:e8:0b:6e:0c:
33:8c:30:f9:a6:68:1c:8c:16:72:1a:9c:cd:7f:5c:3c:54:9c:
8c:cd:aa:8c:cf:23:b4:0c:65:ad:39:b1:12:b8:8b:18:90:35:
15:e3:0d:52:57:c9:5a:56:93:ae:3a:03:eb:3e:39:48:eb:de:
b9:a3:23:ca:e4:e8:97:39:59:cf:c1:09:72:30:79:03:0e:d2:
fe:82:96:e9:24:ba:8e:bb:c8:05:ae:a1:9b:26:40:44:42:0f:
6e:31:b1:32:5e:1e:0f:fb:3a:c6:a6:b3:88:7a:2f:4e:d9:89:
23:c0:9b:3a:3f:13:f1:77:e7:15:ed:df:9a:70:2a:e0:f9:9a:
38:57:17:01:59:03:55:48:94:ef:4c:02:bb:ea:e3:b9:71:28:
13:f4:0f:28:e8:ec:cd:b1:32:51:a3:c5:f5:eb:2e:c5:ef:b9:
c8:d6:23:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtJWR1l70pdu5lEfdLfLxQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MTkxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2M1YjNhMmE5YzEyZGU0ODQ4NWQyOTkzMzgzMDU5YWYxMzg0OGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqjq6giVKzByTBnkel2/eHxwcbh+
Y9S7nsSIj+hDJdTRPrjBEqkU+j1975oSvej5ZPyKFHXCRtMUCq/r3mX7zqGZdxi0
XCERd+1QzBs6ZENzuJhXTiN/llICooHVRl/jAkPivTbNj4RJe5oVPoxxdXI4W/Tr
fL5abixamoFzYP3M4ttHxmwgBvpAxWPw+pxOuWwDJnJEi+4xF6XgMbAlgWSbEEmX
oB5+8TZvsKsZbbqnmu/Bc4rHGqu3jyrpREaxsbpdZRrGfALsE47A657bwra635EU
/+NeIQ//cGopzVVYBFDz2RXJBeIYbW1k6ONpteZ/DcpOpj0eGUfkFXsklwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGPFs6KpwS3khIXSmTODBZrxOEixMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWThXem9xbkJMZVNFaGRLWk00TUZtdkU0U0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF86dINqUsFvu2FRB76N
QHYoIqE6yP65eQmm36VtdJsBxaJ+KFbY8rnsdeGt6TkaTyeQAGv17qeaLCA+65ge
nVqWhINW0bUDBr/TRjstoQRIPva45A2J6AtuDDOMMPmmaByMFnIanM1/XDxUnIzN
qozPI7QMZa05sRK4ixiQNRXjDVJXyVpWk646A+s+OUjr3rmjI8rk6Jc5Wc/BCXIw
eQMO0v6Clukkuo67yAWuoZsmQERCD24xsTJeHg/7Osams4h6L07ZiSPAmzo/E/F3
5xXt35pwKuD5mjhXFwFZA1VIlO9MArvq47lxKBP0Dyjo7M2xMlGjxfXrLsXvucjW
I6U=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:38:21 2025 by rpki-client