Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d6ttagF0HkO02KdwopsAkSjMwY8.roa
File: d6ttagF0HkO02KdwopsAkSjMwY8.roa (raw, json)
Hash identifier: 3S2p8utskDThtCGfyCY6InK/q3W9BR5VJVUSrFEitY8=
Subject key identifier: 77:AB:6D:6A:01:74:1E:43:B4:D8:A7:70:A2:9B:00:91:28:CC:C1:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5371E89863EF7D15E14CFC837271815B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d6ttagF0HkO02KdwopsAkSjMwY8.roa
Signing time: Sat 21 Oct 2023 18:14:15 +0000
ROA not before: Sat 21 Oct 2023 18:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:71:e8:98:63:ef:7d:15:e1:4c:fc:83:72:71:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 18:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ab6d6a01741e43b4d8a770a29b009128ccc18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:69:2c:e5:2b:7e:4d:f8:60:fc:28:c9:8f:
a9:e5:f1:81:20:41:00:08:7e:4b:22:b1:8b:bd:0a:
7e:7b:35:ab:b4:55:3e:95:11:69:12:56:89:e0:b4:
cb:33:32:b7:3c:01:25:84:73:c6:54:47:00:ea:f6:
2d:cc:02:33:d5:05:35:97:5e:7d:7a:a2:7e:aa:35:
e0:a6:bc:e0:3d:77:a4:20:67:a4:ae:1e:63:c3:44:
1f:46:63:76:b8:f7:42:a2:1d:8a:0e:21:78:c9:28:
7e:51:b2:e8:cc:37:5c:3e:cc:dc:46:ba:8c:bb:68:
9e:87:0c:3b:9c:9b:13:76:9c:00:2b:84:d2:fc:14:
2d:e1:9e:fe:ff:72:de:53:4d:2e:59:1f:2d:e2:e6:
b9:d0:bf:c3:fd:c6:25:ac:44:fd:c7:eb:22:9b:4b:
62:af:29:a4:d0:08:c6:bd:e5:72:27:d3:ef:61:11:
72:53:cd:6f:a2:f2:50:91:ce:ab:e9:39:a1:cd:f5:
c8:e0:63:bf:4d:c1:11:25:ce:bb:38:3e:7d:10:f3:
97:13:35:1a:1c:19:a3:4c:76:4f:1b:4a:09:4b:ee:
cf:69:7d:0e:16:e4:92:3b:9c:f6:6c:3f:6b:6b:3a:
0f:63:fc:49:73:a8:a2:78:bb:5d:17:3c:2b:7a:f5:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:6D:6A:01:74:1E:43:B4:D8:A7:70:A2:9B:00:91:28:CC:C1:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d6ttagF0HkO02KdwopsAkSjMwY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:a9:2f:5f:7a:5d:7a:01:99:a3:84:ae:b6:8d:f1:50:73:50:
bf:3e:7f:97:f8:b2:3f:6c:45:a3:d1:45:fb:a1:74:2e:98:3a:
3b:05:fd:68:75:fc:72:bb:ed:d8:de:ac:de:3f:bd:a7:e4:ec:
ae:59:61:40:68:0b:90:ed:81:dd:de:58:d4:c5:8f:c2:64:ac:
85:82:40:95:43:71:0e:1a:ba:21:3f:60:16:43:b3:a6:92:6a:
14:c1:55:7e:49:29:cd:ad:40:b3:95:6a:f7:f8:20:89:21:37:
b0:ef:9e:0c:b9:02:51:6b:f2:77:f1:d7:7a:37:ea:5e:50:94:
64:f3:ca:4e:cf:2e:79:f8:9d:95:fe:72:c2:04:9b:47:a5:fb:
5e:9d:8d:00:1f:41:c7:82:91:1c:0d:2e:ee:75:c1:02:a5:92:
c5:72:64:1e:4f:c7:10:90:51:66:b0:14:22:4b:e8:82:49:c6:
5f:45:b4:a4:27:37:24:14:7d:88:3e:47:92:78:6f:8d:fe:a8:
27:6c:0a:60:a7:6e:43:ea:13:20:97:e4:82:24:4d:48:e4:7c:
a2:32:bf:89:61:42:13:6d:c3:77:e3:36:85:8d:1e:bd:58:1a:
1c:32:b7:f1:b4:23:b7:01:e9:af:14:52:5d:6b:6b:64:7a:be:
e9:c8:95:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtTceiYY+99FeFM/INycYFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMTgxNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2FiNmQ2YTAxNzQxZTQzYjRkOGE3NzBhMjliMDA5MTI4Y2NjMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOppLOUrfk34YPwoyY+p5fGBIEEA
CH5LIrGLvQp+ezWrtFU+lRFpElaJ4LTLMzK3PAElhHPGVEcA6vYtzAIz1QU1l159
eqJ+qjXgprzgPXekIGekrh5jw0QfRmN2uPdCoh2KDiF4ySh+UbLozDdcPszcRrqM
u2iehww7nJsTdpwAK4TS/BQt4Z7+/3LeU00uWR8t4ua50L/D/cYlrET9x+sim0ti
rymk0AjGveVyJ9PvYRFyU81vovJQkc6r6TmhzfXI4GO/TcERJc67OD59EPOXEzUa
HBmjTHZPG0oJS+7PaX0OFuSSO5z2bD9razoPY/xJc6iieLtdFzwrevWRGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHerbWoBdB5DtNincKKbAJEozMGPMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZDZ0dGFnRjBIa08wMktkd29wc0FrU2pNd1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAepL196XXoBmaOErraN
8VBzUL8+f5f4sj9sRaPRRfuhdC6YOjsF/Wh1/HK77djerN4/vafk7K5ZYUBoC5Dt
gd3eWNTFj8JkrIWCQJVDcQ4auiE/YBZDs6aSahTBVX5JKc2tQLOVavf4IIkhN7Dv
ngy5AlFr8nfx13o36l5QlGTzyk7PLnn4nZX+csIEm0el+16djQAfQceCkRwNLu51
wQKlksVyZB5PxxCQUWawFCJL6IJJxl9FtKQnNyQUfYg+R5J4b43+qCdsCmCnbkPq
EyCX5IIkTUjkfKIyv4lhQhNtw3fjNoWNHr1YGhwyt/G0I7cB6a8UUl1ra2R6vunI
lRw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:36 2025 by rpki-client