Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yh2r_hIXHOINY5QkR5-bwCu36_Q.roa
File: Yh2r_hIXHOINY5QkR5-bwCu36_Q.roa (raw, json)
Hash identifier: qPhSvqeymLPI6I2dgYzoxzyenP07dbBAF1kdcevJZc4=
Subject key identifier: 62:1D:AB:FE:12:17:1C:E2:0D:63:94:24:47:9F:9B:C0:2B:B7:EB:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC29238F787CEA00FEABB218B6DDB2988
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yh2r_hIXHOINY5QkR5-bwCu36_Q.roa
Signing time: Sat 23 Sep 2023 15:04:37 +0000
ROA not before: Sat 23 Sep 2023 15:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c291:feea/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:92:38:f7:87:ce:a0:0f:ea:bb:21:8b:6d:db:29:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 15:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=621dabfe12171ce20d639424479f9bc02bb7ebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:ea:87:1f:f8:b1:87:13:69:54:9f:1e:7c:
66:ab:34:25:02:e2:af:00:b3:bd:50:95:83:50:78:
88:85:ca:2e:67:66:e2:dd:4d:03:85:f8:0b:d4:76:
4c:d2:d2:45:91:2c:1c:55:dc:e0:cc:76:49:b2:e6:
7b:93:a5:94:2a:aa:98:da:22:e8:3e:93:c2:0a:f1:
87:7e:75:a2:77:79:45:41:83:b6:7c:d9:ef:cf:33:
d8:0b:0e:29:df:1e:6a:b4:90:c8:19:0a:b5:ad:32:
48:d8:d2:0f:21:4e:12:d3:f8:36:03:b0:55:31:ab:
03:9c:81:e6:82:87:21:15:d1:74:d3:24:cc:a8:07:
6d:e2:de:22:9d:fd:99:4f:0f:df:db:88:f7:c6:19:
20:b0:78:5c:f8:7e:84:0a:f9:b3:0c:37:f8:b0:ee:
b0:93:ba:58:5c:cd:72:45:29:50:88:3e:8c:21:fb:
2a:5f:89:33:fe:ca:48:e0:f9:d8:b2:94:20:bd:8a:
ce:52:ea:9e:65:bc:36:f5:43:1b:0d:3f:f7:97:ab:
a7:d0:7b:d6:a3:34:cc:6a:8e:58:c1:c1:36:b0:7a:
1a:b8:8d:ea:f3:ca:85:8f:03:0b:44:50:19:f1:9b:
3e:25:17:f7:4f:49:e0:a4:4d:0a:bb:79:b0:9a:66:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:AB:FE:12:17:1C:E2:0D:63:94:24:47:9F:9B:C0:2B:B7:EB:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Yh2r_hIXHOINY5QkR5-bwCu36_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:21:5f:a3:40:0a:e4:5f:6a:e2:2c:ed:fb:1d:47:b4:67:72:
44:e3:68:d6:d4:2e:fb:94:7c:4c:22:5b:4e:20:90:58:e2:f7:
31:c8:43:ab:53:2f:c1:fe:4f:2a:12:9c:ac:76:ae:06:e0:c0:
f3:b1:e4:0a:c6:10:97:98:3e:42:76:04:30:a1:54:a7:c1:e6:
66:15:3b:5f:03:fa:27:13:bd:7e:99:ca:57:d7:dc:2b:9e:b2:
07:8d:ee:f5:9c:e0:90:96:61:62:63:78:91:75:68:fa:41:34:
a3:e7:d3:e9:f6:00:01:ac:1b:e8:15:d6:f7:54:4f:23:e3:22:
0a:99:eb:bb:61:7d:f2:c8:da:a2:c5:22:ff:7d:f1:61:88:57:
67:da:59:a9:2d:22:6d:d7:74:ec:c7:20:3d:90:01:b6:9e:12:
4f:fe:96:d6:ca:a3:4d:fb:8c:8e:8e:52:27:18:74:e1:ee:5b:
5d:b1:1b:38:83:7d:c1:49:56:f7:c2:5e:7a:b9:13:5a:43:54:
e6:7d:32:a2:fe:e6:5c:c0:b9:55:ae:d2:f1:b9:41:df:c6:88:
5e:d2:8b:14:77:b9:5d:e9:d9:b2:81:75:6e:7c:12:91:50:25:
9a:b8:a4:06:0d:10:6a:6d:76:ff:63:3e:28:ad:e3:9b:c2:bf:
d1:4e:7a:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrCkjj3h86gD+q7IYtt2ymIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIzMTUwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjFkYWJmZTEyMTcxY2UyMGQ2Mzk0MjQ0NzlmOWJjMDJiYjdlYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwvqhx/4sYcTaVSfHnxmqzQlAuKv
ALO9UJWDUHiIhcouZ2bi3U0DhfgL1HZM0tJFkSwcVdzgzHZJsuZ7k6WUKqqY2iLo
PpPCCvGHfnWid3lFQYO2fNnvzzPYCw4p3x5qtJDIGQq1rTJI2NIPIU4S0/g2A7BV
MasDnIHmgochFdF00yTMqAdt4t4inf2ZTw/f24j3xhkgsHhc+H6ECvmzDDf4sO6w
k7pYXM1yRSlQiD6MIfsqX4kz/spI4PnYspQgvYrOUuqeZbw29UMbDT/3l6un0HvW
ozTMao5YwcE2sHoauI3q88qFjwMLRFAZ8Zs+JRf3T0ngpE0Ku3mwmmYEVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGIdq/4SFxziDWOUJEefm8Art+v0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWWgycl9oSVhIT0lOWTVRa1I1LWJ3Q3UzNl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHQhX6NACuRfauIs7fsd
R7RnckTjaNbULvuUfEwiW04gkFji9zHIQ6tTL8H+TyoSnKx2rgbgwPOx5ArGEJeY
PkJ2BDChVKfB5mYVO18D+icTvX6ZylfX3CuesgeN7vWc4JCWYWJjeJF1aPpBNKPn
0+n2AAGsG+gV1vdUTyPjIgqZ67thffLI2qLFIv998WGIV2faWaktIm3XdOzHID2Q
AbaeEk/+ltbKo037jI6OUicYdOHuW12xGziDfcFJVvfCXnq5E1pDVOZ9MqL+5lzA
uVWu0vG5Qd/GiF7SixR3uV3p2bKBdW58EpFQJZq4pAYNEGptdv9jPiit45vCv9FO
euc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:58 2025 by rpki-client