Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Bh4PRs7w3xuvnRKh5QvD_cHX04.roa
File: _Bh4PRs7w3xuvnRKh5QvD_cHX04.roa (raw, json)
Hash identifier: 4Qnpi5LwaX6Kf8urGIpB9I9+GlQMq9Pil3cpNmpsdUM=
Subject key identifier: FC:18:78:3D:1B:3B:C3:7C:6E:BE:74:4A:87:94:2F:0F:F7:07:5F:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0B208AC36EFDC8025D3A32A5338760FC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Bh4PRs7w3xuvnRKh5QvD_cHX04.roa
Signing time: Sat 07 Oct 2023 17:12:43 +0000
ROA not before: Sat 07 Oct 2023 17:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:20:8a:c3:6e:fd:c8:02:5d:3a:32:a5:33:87:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 17:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc18783d1b3bc37c6ebe744a87942f0ff7075f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:5d:df:d7:3c:fc:c3:4c:2c:7a:4a:95:53:
a0:c5:0e:27:72:e0:70:09:60:3b:b0:8d:09:de:87:
17:58:51:82:58:50:ed:49:c9:23:98:26:be:4c:16:
d9:94:78:b0:40:09:37:60:d9:6c:3c:51:c0:91:5e:
bd:94:e8:8f:8d:13:c4:7b:50:c4:c0:5d:ad:35:69:
13:41:71:94:00:95:bb:19:10:c8:a0:7c:01:47:2f:
e0:ca:68:3e:79:32:26:1f:00:d8:31:c0:ff:84:ba:
1d:63:11:80:cf:9e:29:d4:d4:d0:d2:e1:69:02:74:
e3:a3:a7:20:73:4b:b4:fc:30:34:a3:66:28:8c:01:
33:7f:75:d1:8c:a1:9e:5f:fb:be:23:e2:ab:e8:7c:
bc:10:86:27:80:4a:33:8a:a9:35:41:e6:04:52:94:
9a:98:3d:ef:3c:70:67:03:9d:97:f5:82:e2:f7:17:
19:d3:d6:1c:f8:9e:b3:da:8b:69:5d:ef:40:b3:d9:
a6:f3:7d:98:4f:1a:25:54:30:8f:3f:1f:a4:14:50:
01:d6:3c:c0:00:53:f4:c0:4b:ff:11:01:d3:e3:21:
31:93:e6:c9:cd:2f:5c:5c:3a:31:62:10:3c:f3:86:
ab:4f:4c:60:91:9a:a6:70:48:60:b5:bb:9b:4c:61:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:18:78:3D:1B:3B:C3:7C:6E:BE:74:4A:87:94:2F:0F:F7:07:5F:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Bh4PRs7w3xuvnRKh5QvD_cHX04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:20:73:40:66:b0:21:5e:bc:ac:81:bc:bf:ab:77:11:6f:3a:
1d:44:c9:79:fc:bf:c6:a7:4f:3c:e9:55:9a:61:7c:e1:bd:69:
98:b5:26:af:fd:59:be:01:4c:4a:49:f3:e0:86:54:7e:d9:f5:
bf:c8:8c:9c:13:df:dc:b5:74:cc:78:51:2e:a8:c1:25:22:b9:
1a:e3:e0:6f:d1:98:93:22:e6:10:85:ec:ff:3f:5c:bb:5c:f4:
e3:82:0a:2b:9a:b1:f4:97:d4:d9:cf:48:5d:10:13:74:ef:da:
7b:68:69:91:7e:d0:e2:05:93:bd:8d:3c:93:ab:6e:15:e0:05:
09:ae:5d:d8:f4:76:02:48:45:29:48:c2:83:ef:c6:40:8f:7e:
0f:74:81:f6:20:35:cc:8a:bb:6e:70:d6:62:9c:11:17:8a:80:
b0:ef:0e:51:ce:f3:10:10:1d:76:43:2a:38:91:91:52:fb:4e:
b3:7d:a5:9e:70:2d:17:fd:bb:aa:c5:89:08:22:7c:5d:ff:c8:
2c:2d:09:1a:25:9a:b3:18:8b:3b:f0:24:89:11:1a:58:95:97:
92:13:3e:89:57:85:49:1f:ee:bc:e9:37:46:a8:c7:00:7e:46:
23:76:e1:2e:88:87:3e:29:ac:64:93:41:c6:40:a6:80:f1:b5:
d5:5a:1f:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsLIIrDbv3IAl06MqUzh2D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA3MTcxMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzE4NzgzZDFiM2JjMzdjNmViZTc0NGE4Nzk0MmYwZmY3MDc1ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuNd39c8/MNMLHpKlVOgxQ4ncuBw
CWA7sI0J3ocXWFGCWFDtSckjmCa+TBbZlHiwQAk3YNlsPFHAkV69lOiPjRPEe1DE
wF2tNWkTQXGUAJW7GRDIoHwBRy/gymg+eTImHwDYMcD/hLodYxGAz54p1NTQ0uFp
AnTjo6cgc0u0/DA0o2YojAEzf3XRjKGeX/u+I+Kr6Hy8EIYngEoziqk1QeYEUpSa
mD3vPHBnA52X9YLi9xcZ09Yc+J6z2otpXe9As9mm832YTxolVDCPPx+kFFAB1jzA
AFP0wEv/EQHT4yExk+bJzS9cXDoxYhA884arT0xgkZqmcEhgtbubTGEmywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPwYeD0bO8N8br50SoeULw/3B19OMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvX0JoNFBSczd3M3h1dm5SS2g1UXZEX2NIWDA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF0gc0BmsCFevKyBvL+r
dxFvOh1EyXn8v8anTzzpVZphfOG9aZi1Jq/9Wb4BTEpJ8+CGVH7Z9b/IjJwT39y1
dMx4US6owSUiuRrj4G/RmJMi5hCF7P8/XLtc9OOCCiuasfSX1NnPSF0QE3Tv2nto
aZF+0OIFk72NPJOrbhXgBQmuXdj0dgJIRSlIwoPvxkCPfg90gfYgNcyKu25w1mKc
EReKgLDvDlHO8xAQHXZDKjiRkVL7TrN9pZ5wLRf9u6rFiQgifF3/yCwtCRolmrMY
izvwJIkRGliVl5ITPolXhUkf7rzpN0aoxwB+RiN24S6Ihz4prGSTQcZApoDxtdVa
H5Y=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:17 2025 by rpki-client