Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQcA5SAyfLnB6scfIg5tGko_bs.roa
File: YZQcA5SAyfLnB6scfIg5tGko_bs.roa (raw, json)
Hash identifier: LfFFfphzVs/r4jviPqTSRL0rxtL6BBvB5qnZOdmFiNY=
Subject key identifier: 61:94:1C:03:94:80:C9:F2:E7:07:AB:1C:7C:88:39:B4:69:28:FD:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2B871265045AB12F78B39AC24DA68037
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQcA5SAyfLnB6scfIg5tGko_bs.roa
Signing time: Sat 02 Dec 2023 17:15:21 +0000
ROA not before: Sat 02 Dec 2023 17:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:87:12:65:04:5a:b1:2f:78:b3:9a:c2:4d:a6:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 17:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61941c039480c9f2e707ab1c7c8839b46928fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:47:0c:46:6d:6f:34:a9:37:a1:74:d7:09:
e3:ef:f7:e3:59:74:a1:6e:56:a4:2e:96:6a:db:d2:
9d:ee:07:02:1f:b1:35:68:29:65:47:fa:de:66:3b:
77:a8:52:47:48:32:ae:d6:c4:cb:b7:87:57:ba:1a:
c3:bc:52:cb:d5:88:ce:08:3e:86:c7:ff:2a:e6:8e:
52:68:b6:ff:b8:ca:15:fc:8b:2b:38:bb:13:91:f3:
9b:0a:d3:20:78:78:92:f2:77:06:68:1f:fb:e3:69:
57:7d:6d:ad:ab:79:04:46:b3:25:e5:6a:3f:7f:96:
79:99:fa:f2:35:b5:e6:7b:d3:96:9c:6e:ad:5c:4d:
b0:09:cc:a0:f8:be:9d:94:c3:3b:57:db:e3:f7:bb:
93:fe:1a:2d:6a:9e:9f:67:ff:84:77:02:42:81:dc:
0d:16:d3:c5:78:78:5b:cb:02:ba:d1:ce:3a:d4:b0:
0d:9b:b2:f9:ab:11:93:2c:14:ff:54:83:13:05:c6:
aa:25:84:19:6e:2e:14:4f:7e:19:a8:17:10:fb:88:
1b:95:ab:61:65:70:97:57:bb:70:f8:64:1c:05:c1:
54:90:9d:ff:cb:5d:0d:3a:54:08:f3:a2:88:da:44:
b9:e7:3a:d8:09:f4:d6:ad:86:44:89:f5:39:4f:f4:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:1C:03:94:80:C9:F2:E7:07:AB:1C:7C:88:39:B4:69:28:FD:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YZQcA5SAyfLnB6scfIg5tGko_bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:2b:2e:98:f2:32:05:af:47:2a:99:c9:fb:16:ea:57:be:79:
ca:f1:b6:39:ea:6f:58:4c:5c:cd:2f:aa:26:c5:f2:24:9f:9e:
72:0b:dc:36:b8:be:5d:37:93:79:68:25:a1:66:ff:cd:ba:b2:
b4:c0:41:99:7a:7e:ee:6e:16:00:0c:06:09:36:a5:e4:f7:cf:
ca:b5:24:69:16:5f:54:2a:d2:a4:57:5b:23:fd:ab:93:d5:ca:
0c:ec:b0:7d:b7:9b:4f:d6:83:b3:e8:ed:d7:09:9a:0a:91:36:
0c:40:a1:2b:86:32:05:19:c5:e3:c8:17:45:a7:82:95:0c:55:
65:90:43:84:d8:22:ad:60:75:4c:77:90:48:d2:64:cb:69:fb:
b9:e2:22:7d:90:a0:c0:6a:1a:20:6d:cc:a3:2d:90:3c:30:40:
0f:98:f0:a5:3d:00:41:62:ac:b5:26:03:df:f5:83:c6:f6:14:
5d:98:07:aa:49:35:3f:59:00:47:f4:68:b3:0d:87:10:61:87:
5b:87:f5:d5:66:86:da:8f:bf:8d:b4:0c:2c:f3:c5:bc:ac:cb:
56:47:de:e0:5c:9e:b5:13:0b:a4:c8:7a:32:21:90:02:c9:51:
41:36:1f:23:41:50:7f:0a:b2:5d:ab:0a:90:50:84:c2:bf:50:
4b:9d:89:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwrhxJlBFqxL3izmsJNpoA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAyMTcxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk0MWMwMzk0ODBjOWYyZTcwN2FiMWM3Yzg4MzliNDY5MjhmZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/9HDEZtbzSpN6F01wnj7/fjWXSh
blakLpZq29Kd7gcCH7E1aCllR/reZjt3qFJHSDKu1sTLt4dXuhrDvFLL1YjOCD6G
x/8q5o5SaLb/uMoV/IsrOLsTkfObCtMgeHiS8ncGaB/742lXfW2tq3kERrMl5Wo/
f5Z5mfryNbXme9OWnG6tXE2wCcyg+L6dlMM7V9vj97uT/hotap6fZ/+EdwJCgdwN
FtPFeHhbywK60c461LANm7L5qxGTLBT/VIMTBcaqJYQZbi4UT34ZqBcQ+4gblath
ZXCXV7tw+GQcBcFUkJ3/y10NOlQI86KI2kS55zrYCfTWrYZEifU5T/TsAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGGUHAOUgMny5werHHyIObRpKP27MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWVpRY0E1U0F5ZkxuQjZzY2ZJZzV0R2tvX2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIUrLpjyMgWvRyqZyfsW
6le+ecrxtjnqb1hMXM0vqibF8iSfnnIL3Da4vl03k3loJaFm/826srTAQZl6fu5u
FgAMBgk2peT3z8q1JGkWX1Qq0qRXWyP9q5PVygzssH23m0/Wg7Po7dcJmgqRNgxA
oSuGMgUZxePIF0WngpUMVWWQQ4TYIq1gdUx3kEjSZMtp+7niIn2QoMBqGiBtzKMt
kDwwQA+Y8KU9AEFirLUmA9/1g8b2FF2YB6pJNT9ZAEf0aLMNhxBhh1uH9dVmhtqP
v420DCzzxbysy1ZH3uBcnrUTC6TIejIhkALJUUE2HyNBUH8Ksl2rCpBQhMK/UEud
iSE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:04 2025 by rpki-client