Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzFqwfYmt_8_lUZyIo9VUYJT2rc.roa
File: bzFqwfYmt_8_lUZyIo9VUYJT2rc.roa (raw, json)
Hash identifier: vdJ+HvvAIpfspTL3FidehWn/eGzwMRgaEzgP+gFdQDE=
Subject key identifier: 6F:31:6A:C1:F6:26:B7:FF:3F:95:46:72:22:8F:55:51:82:53:DA:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB57EA2AACB3F45600D4981A4CB49CAB1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzFqwfYmt_8_lUZyIo9VUYJT2rc.roa
Signing time: Thu 09 Nov 2023 19:10:57 +0000
ROA not before: Thu 09 Nov 2023 19:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:7e:a2:aa:cb:3f:45:60:0d:49:81:a4:cb:49:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 19:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f316ac1f626b7ff3f954672228f55518253dab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:27:43:ef:c7:33:ba:c6:57:08:71:02:4b:
d7:ca:19:af:cb:26:fd:66:c5:44:f4:f3:7f:91:61:
02:75:9c:f1:ec:ad:6b:80:65:7c:19:81:b3:27:71:
aa:4f:5c:b7:f0:ca:47:01:44:da:4b:33:16:15:55:
b5:b6:43:30:9a:c5:e3:31:2e:bd:2e:16:0f:7b:2e:
18:88:02:6f:18:69:6f:31:7f:3d:fa:7e:75:21:39:
1f:48:fd:18:b8:38:11:a4:0f:b0:c4:c8:44:42:b4:
1c:1d:06:17:1e:e0:ef:21:f3:92:29:45:84:91:3b:
3d:71:f1:2d:ff:00:18:d2:16:b4:d4:fb:e8:d6:38:
c4:52:51:05:43:35:e1:76:3f:9d:29:08:a8:f2:22:
86:00:fc:85:c1:c4:5f:e7:ce:9a:a3:51:c2:59:f4:
1a:32:80:fc:4c:7b:82:28:63:14:8d:a1:16:e9:10:
5b:80:32:6b:07:3c:0b:64:d8:d1:e6:1f:99:be:04:
6e:2c:e9:a2:38:3a:68:85:01:dc:b8:21:d0:60:f2:
35:dc:42:8a:60:50:eb:34:bb:81:6d:50:49:69:29:
e9:8d:21:71:46:8c:cf:2a:0a:c9:1b:7f:16:af:f6:
86:a8:9e:7f:8c:6b:21:b0:ae:e2:96:18:43:ea:29:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:6A:C1:F6:26:B7:FF:3F:95:46:72:22:8F:55:51:82:53:DA:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzFqwfYmt_8_lUZyIo9VUYJT2rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:17:da:01:74:75:9c:d9:6c:08:b1:4d:06:51:8d:2b:a5:b5:
ba:ed:25:9d:1d:8e:ed:7e:b0:13:b1:1f:26:52:c1:ba:5b:6e:
1a:26:61:5d:e5:71:a7:9b:1c:2d:06:5c:1b:aa:f7:ca:79:55:
eb:e3:62:67:d1:2f:6b:bd:ca:9d:54:a0:1f:0e:8d:6a:16:4d:
a0:9d:f6:fd:83:09:e6:62:e1:24:2b:13:81:d7:5e:ad:1b:73:
c6:09:db:ee:b8:26:b7:16:24:83:4e:7a:90:0f:1f:00:2a:ac:
14:74:1b:c7:70:f0:fc:1f:05:a5:cc:23:45:5e:d8:7c:e3:30:
c9:a5:ec:96:43:0b:2c:24:44:87:ea:29:7b:66:16:15:54:a6:
0b:bf:03:8e:4d:38:4c:61:1a:ae:41:aa:59:c0:a5:21:b5:8e:
bc:7a:bb:40:5d:8d:61:d8:3b:f3:fd:ca:ef:f0:66:a8:42:f2:
8d:f4:4e:50:84:73:4a:ab:54:50:44:a3:a3:e1:c0:47:72:e2:
df:a5:f2:1c:89:81:14:12:85:b0:a9:ee:77:f3:da:54:45:1c:
22:6b:42:c9:be:e8:1f:cf:c6:49:98:08:0b:55:8b:20:be:57:
f6:ca:d6:56:48:cb:c9:e6:2f:64:6b:30:62:29:e3:41:cf:7f:
a5:30:41:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu1fqKqyz9FYA1JgaTLScqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA5MTkxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjMxNmFjMWY2MjZiN2ZmM2Y5NTQ2NzIyMjhmNTU1MTgyNTNkYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cUnQ+/HM7rGVwhxAkvXyhmvyyb9
ZsVE9PN/kWECdZzx7K1rgGV8GYGzJ3GqT1y38MpHAUTaSzMWFVW1tkMwmsXjMS69
LhYPey4YiAJvGGlvMX89+n51ITkfSP0YuDgRpA+wxMhEQrQcHQYXHuDvIfOSKUWE
kTs9cfEt/wAY0ha01Pvo1jjEUlEFQzXhdj+dKQio8iKGAPyFwcRf586ao1HCWfQa
MoD8THuCKGMUjaEW6RBbgDJrBzwLZNjR5h+ZvgRuLOmiODpohQHcuCHQYPI13EKK
YFDrNLuBbVBJaSnpjSFxRozPKgrJG38Wr/aGqJ5/jGshsK7ilhhD6imp5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG8xasH2Jrf/P5VGciKPVVGCU9q3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYnpGcXdmWW10XzhfbFVaeUlvOVZVWUpUMnJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ0X2gF0dZzZbAixTQZR
jSultbrtJZ0dju1+sBOxHyZSwbpbbhomYV3lcaebHC0GXBuq98p5VevjYmfRL2u9
yp1UoB8OjWoWTaCd9v2DCeZi4SQrE4HXXq0bc8YJ2+64JrcWJINOepAPHwAqrBR0
G8dw8PwfBaXMI0Ve2HzjMMml7JZDCywkRIfqKXtmFhVUpgu/A45NOExhGq5BqlnA
pSG1jrx6u0BdjWHYO/P9yu/wZqhC8o30TlCEc0qrVFBEo6PhwEdy4t+l8hyJgRQS
hbCp7nfz2lRFHCJrQsm+6B/PxkmYCAtViyC+V/bK1lZIy8nmL2RrMGIp40HPf6Uw
QZs=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:49:01 2025 by rpki-client