Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_NvLhcj9kDypTB8sGbbSy63ubDQ.roa
File: _NvLhcj9kDypTB8sGbbSy63ubDQ.roa (raw, json)
Hash identifier: FRJinwCFHhYl7/zSY71ZEl3WknunxX9oK1k4kXle7VQ=
Subject key identifier: FC:DB:CB:85:C8:FD:90:3C:A9:4C:1F:2C:19:B6:D2:CB:AD:EE:6C:34
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C71E86ADCE0DA00E70CA90B795F664D38
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_NvLhcj9kDypTB8sGbbSy63ubDQ.roa
Signing time: Sat 16 Dec 2023 09:15:06 +0000
ROA not before: Sat 16 Dec 2023 09:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:e8:6a:dc:e0:da:00:e7:0c:a9:0b:79:5f:66:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 09:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcdbcb85c8fd903ca94c1f2c19b6d2cbadee6c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:01:00:1d:2f:60:99:fd:db:42:1c:0d:b6:
ad:d6:3b:60:b8:90:6c:ec:70:39:f1:57:d1:cd:96:
b5:4c:33:89:26:d9:2b:52:34:22:5d:f9:71:6c:77:
e6:7f:56:11:c2:09:ae:42:fa:a9:34:bb:75:75:f8:
7b:00:b5:ac:65:a7:b8:cc:84:d8:64:53:b5:c6:e7:
c4:3f:43:b1:55:7d:e8:9d:bf:f7:07:98:8c:42:03:
f5:08:03:5a:fa:e8:a6:ca:8e:38:9c:22:89:08:9a:
f6:e5:29:1c:15:65:65:e3:1b:80:99:5d:4a:a2:95:
d6:bd:6d:78:23:ca:83:34:c1:07:82:7d:29:d7:8b:
43:eb:fb:2c:83:04:06:9b:27:70:f0:7e:9f:b6:25:
04:e3:56:b2:69:54:3b:ea:b2:96:34:60:48:ff:cd:
69:05:6f:62:41:ba:49:6f:3b:f5:7d:7c:93:e9:cd:
3f:9d:d9:74:6c:9c:3d:34:70:ee:e9:13:64:e6:cf:
76:c2:3b:5f:85:89:98:77:f1:a1:26:ed:c8:26:70:
8b:0f:10:d4:6d:71:f9:80:bd:24:f0:80:00:23:87:
67:e7:3c:3a:27:fb:41:42:59:d0:e6:d2:ee:02:92:
06:4e:f3:75:7e:f8:a0:2f:cd:a3:08:be:da:08:75:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:CB:85:C8:FD:90:3C:A9:4C:1F:2C:19:B6:D2:CB:AD:EE:6C:34
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_NvLhcj9kDypTB8sGbbSy63ubDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:86:18:e2:bf:1d:c9:1d:01:37:96:71:f1:f3:da:88:2a:37:
58:bb:98:b5:28:1f:11:b1:4b:f8:2a:fc:94:2b:c7:14:53:95:
0d:b5:d1:f2:21:c1:a5:cf:93:eb:ed:a4:04:d5:f6:7e:84:7c:
82:49:d3:80:e9:6a:b5:f4:b3:7f:08:f1:b0:f5:22:b3:0a:43:
b0:0a:45:2d:0d:04:a1:6c:0c:22:df:ea:12:09:c5:0f:58:00:
4c:70:3b:a5:c6:1d:da:ea:9c:b9:5a:57:b3:37:f9:3f:5c:af:
fa:05:17:79:1b:5b:01:56:51:88:c1:16:10:a5:4e:63:ef:23:
cd:91:19:36:8b:79:a5:37:b6:42:25:9a:ab:2a:25:2e:8a:91:
86:a3:e3:07:01:a2:02:e2:62:51:40:d9:10:c2:ea:1a:9e:f0:
25:a3:d9:eb:ca:22:c9:1d:bc:08:7a:2e:02:cc:44:aa:75:60:
9a:4b:9e:d7:07:44:b5:6d:6d:ac:1b:4e:52:ab:38:44:79:0c:
70:50:92:70:c6:04:ec:ce:96:95:90:c9:85:b2:66:fc:48:5b:
04:4c:c2:9b:68:7a:fb:e7:f9:85:69:84:85:51:0c:00:d9:46:
d9:85:b6:02:ae:f9:6f:92:81:ab:96:35:a8:c9:79:bf:6a:5d:
77:61:c5:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxx6Grc4NoA5wypC3lfZk04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE2MDkxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RiY2I4NWM4ZmQ5MDNjYTk0YzFmMmMxOWI2ZDJjYmFkZWU2YzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizYBAB0vYJn920IcDbat1jtguJBs
7HA58VfRzZa1TDOJJtkrUjQiXflxbHfmf1YRwgmuQvqpNLt1dfh7ALWsZae4zITY
ZFO1xufEP0OxVX3onb/3B5iMQgP1CANa+uimyo44nCKJCJr25SkcFWVl4xuAmV1K
opXWvW14I8qDNMEHgn0p14tD6/ssgwQGmydw8H6ftiUE41ayaVQ76rKWNGBI/81p
BW9iQbpJbzv1fXyT6c0/ndl0bJw9NHDu6RNk5s92wjtfhYmYd/GhJu3IJnCLDxDU
bXH5gL0k8IAAI4dn5zw6J/tBQlnQ5tLuApIGTvN1fvigL82jCL7aCHV7MQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPzby4XI/ZA8qUwfLBm20sut7mw0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvX052TGhjajlrRHlwVEI4c0diYlN5NjN1YkRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJWGGOK/HckdATeWcfHz
2ogqN1i7mLUoHxGxS/gq/JQrxxRTlQ210fIhwaXPk+vtpATV9n6EfIJJ04DparX0
s38I8bD1IrMKQ7AKRS0NBKFsDCLf6hIJxQ9YAExwO6XGHdrqnLlaV7M3+T9cr/oF
F3kbWwFWUYjBFhClTmPvI82RGTaLeaU3tkIlmqsqJS6KkYaj4wcBogLiYlFA2RDC
6hqe8CWj2evKIskdvAh6LgLMRKp1YJpLntcHRLVtbawbTlKrOER5DHBQknDGBOzO
lpWQyYWyZvxIWwRMwptoevvn+YVphIVRDADZRtmFtgKu+W+SgauWNajJeb9qXXdh
xXI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:37 2025 by rpki-client