Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bo6P9OAIp66-43NDbReahQWLvEQ.roa
File: bo6P9OAIp66-43NDbReahQWLvEQ.roa (raw, json)
Hash identifier: mF/le//TbOlPg7Lcd21klYqyXYCgVplxcVDFEDoY8ZA=
Subject key identifier: 6E:8E:8F:F4:E0:08:A7:AE:BE:E3:73:43:6D:17:9A:85:05:8B:BC:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1793DDD33469F7F10BAF87F2685617E3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bo6P9OAIp66-43NDbReahQWLvEQ.roa
Signing time: Tue 28 Nov 2023 20:16:55 +0000
ROA not before: Tue 28 Nov 2023 20:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:93:dd:d3:34:69:f7:f1:0b:af:87:f2:68:56:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 20:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e8e8ff4e008a7aebee373436d179a85058bbc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:75:81:92:bd:c9:80:d4:c2:a2:d8:60:86:
81:6b:ae:4d:28:5c:26:0b:a2:dd:32:95:09:c4:ad:
29:90:d0:8a:91:16:ee:01:25:40:5d:6b:8b:63:46:
c6:fe:1e:18:df:f1:4c:a9:7b:cc:d4:12:f4:c2:d9:
cb:bd:58:f0:8a:75:09:84:ab:47:9a:6e:65:ea:bf:
93:3e:72:54:64:ee:9e:c6:28:d4:a3:c7:a5:74:57:
46:8b:5a:3b:f8:0a:f0:1c:18:4c:8b:f3:d3:0b:fa:
25:c1:18:1f:6e:48:63:1d:c9:68:25:79:b0:ad:e2:
be:ca:a7:8f:48:d7:81:99:c7:b6:17:fe:04:6d:31:
a2:df:f1:d7:c4:4d:61:bd:e1:12:8a:cb:2b:a8:c3:
f2:1a:bc:cb:e1:1e:b7:88:9f:29:49:ed:c4:b4:0d:
8a:8e:71:ee:02:42:4b:62:2d:07:d7:a7:2a:eb:ae:
3b:7b:0e:ba:02:31:78:4f:83:69:4c:82:80:44:08:
6b:a9:b1:b0:3d:23:ce:63:51:69:41:29:ac:98:92:
26:4d:5a:26:cf:77:d7:81:42:65:89:0d:b0:9c:ed:
29:a5:91:4a:43:8e:c6:9a:b7:e7:4d:73:f4:18:5d:
f8:fc:96:6c:a3:e2:2b:eb:bd:f0:bf:74:76:7a:8b:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:8F:F4:E0:08:A7:AE:BE:E3:73:43:6D:17:9A:85:05:8B:BC:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bo6P9OAIp66-43NDbReahQWLvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:e9:be:2a:5b:be:55:92:4e:fd:d2:7b:7f:fd:91:3c:8e:c3:
e2:e7:05:e2:a8:be:75:74:89:c4:c7:fe:bf:cd:7b:b2:82:9e:
40:79:48:2d:4d:3a:c3:fe:53:c2:d5:aa:4e:7d:9e:21:ad:85:
c5:b8:9b:93:08:74:75:a0:04:16:95:9d:98:4d:9f:54:90:b8:
b5:3b:4e:ba:cb:e5:2a:e7:6d:4e:17:e0:be:18:c3:35:88:f9:
7b:ec:a6:56:38:67:5a:0c:6a:5a:4e:6d:52:8f:e1:e7:28:92:
0d:f0:31:7c:66:95:b3:6e:2b:74:71:f4:dc:eb:5e:2c:0f:c7:
07:96:5b:20:15:b3:24:65:c8:e4:25:bf:f0:0d:76:db:9b:0b:
b4:82:2f:dc:fa:2c:6d:d4:00:a3:d1:54:93:60:60:7a:4a:d8:
c9:45:39:25:31:96:8a:70:79:af:b6:e4:14:68:d8:2d:07:99:
1b:fc:60:23:ba:a6:40:53:c4:f1:89:7a:9f:26:4b:40:b9:e1:
c5:ce:aa:e4:1e:c3:a8:c7:cd:48:b1:de:fe:1c:fc:ad:9c:15:
d5:9a:62:ac:28:45:0c:b4:d3:e7:ba:16:56:e1:4c:99:54:a6:
59:b7:fe:dd:b2:32:92:0e:3a:71:96:ce:5f:f6:05:bb:29:7a:
a6:63:95:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwXk93TNGn38Quvh/JoVhfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MjAxNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZThlOGZmNGUwMDhhN2FlYmVlMzczNDM2ZDE3OWE4NTA1OGJiYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq11gZK9yYDUwqLYYIaBa65NKFwm
C6LdMpUJxK0pkNCKkRbuASVAXWuLY0bG/h4Y3/FMqXvM1BL0wtnLvVjwinUJhKtH
mm5l6r+TPnJUZO6exijUo8eldFdGi1o7+ArwHBhMi/PTC/olwRgfbkhjHcloJXmw
reK+yqePSNeBmce2F/4EbTGi3/HXxE1hveESissrqMPyGrzL4R63iJ8pSe3EtA2K
jnHuAkJLYi0H16cq6647ew66AjF4T4NpTIKARAhrqbGwPSPOY1FpQSmsmJImTVom
z3fXgUJliQ2wnO0ppZFKQ47GmrfnTXP0GF34/JZso+Ir673wv3R2eovTfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG6Oj/TgCKeuvuNzQ20XmoUFi7xEMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYm82UDlPQUlwNjYtNDNORGJSZWFoUVdMdkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMrpvipbvlWSTv3Se3/9
kTyOw+LnBeKovnV0icTH/r/Ne7KCnkB5SC1NOsP+U8LVqk59niGthcW4m5MIdHWg
BBaVnZhNn1SQuLU7TrrL5SrnbU4X4L4YwzWI+XvsplY4Z1oMalpObVKP4ecokg3w
MXxmlbNuK3Rx9NzrXiwPxweWWyAVsyRlyOQlv/ANdtubC7SCL9z6LG3UAKPRVJNg
YHpK2MlFOSUxlopwea+25BRo2C0HmRv8YCO6pkBTxPGJep8mS0C54cXOquQew6jH
zUix3v4c/K2cFdWaYqwoRQy00+e6FlbhTJlUplm3/t2yMpIOOnGWzl/2BbspeqZj
lTs=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:43 2025 by rpki-client