Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dvDmCQaKZEu7ku2-xkvQkCQERso.roa
File: dvDmCQaKZEu7ku2-xkvQkCQERso.roa (raw, json)
Hash identifier: kDGWFk0B1InSvJzVWmt4zbRrUIKEbdir1v90NHfX1Wg=
Subject key identifier: 76:F0:E6:09:06:8A:64:4B:BB:92:ED:BE:C6:4B:D0:90:24:04:46:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B30E77006B59A6E82F6EEE6D3ACDB577A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dvDmCQaKZEu7ku2-xkvQkCQERso.roa
Signing time: Sun 15 Oct 2023 01:15:55 +0000
ROA not before: Sun 15 Oct 2023 01:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:30:e7:70:06:b5:9a:6e:82:f6:ee:e6:d3:ac:db:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 01:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76f0e609068a644bbb92edbec64bd090240446ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:c8:28:79:39:8a:93:2d:02:d5:9e:db:96:
92:7b:22:40:1d:9c:aa:9f:96:84:96:ff:75:8f:9e:
85:43:40:a3:dc:63:1e:ca:65:dc:fb:04:fa:37:85:
11:9e:fe:8a:1a:ed:4b:51:93:a5:67:64:e6:08:ed:
bc:45:2e:1c:1b:07:f9:f2:b2:02:a8:df:35:0a:e4:
a0:57:1e:ae:48:14:07:8b:e8:8b:95:1c:1d:c1:b2:
43:e6:3c:ab:31:00:28:33:f7:61:44:e2:52:8e:7c:
df:62:92:32:c9:48:02:a6:8a:d7:38:19:1e:d2:0d:
6d:26:26:4b:80:d3:a4:89:54:38:cd:b8:0b:dc:ec:
0f:33:d5:33:e0:77:34:61:02:8b:69:7f:c2:24:a9:
95:61:85:81:3a:05:13:9b:42:b0:64:78:07:73:2d:
9a:aa:76:4b:f4:bf:d4:77:53:13:a3:d9:47:86:3a:
37:a6:1d:0c:30:d9:37:09:48:a4:e5:5d:13:d6:0b:
25:4d:03:b0:a1:a1:eb:d8:02:0f:83:87:19:90:36:
28:e9:e5:aa:92:6e:a4:92:b9:87:c5:8e:a0:2c:db:
6a:43:53:59:2e:62:98:6d:36:87:c2:33:5d:c3:3d:
de:f5:ee:34:15:1a:ef:97:65:1a:ef:b4:43:be:c0:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:E6:09:06:8A:64:4B:BB:92:ED:BE:C6:4B:D0:90:24:04:46:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dvDmCQaKZEu7ku2-xkvQkCQERso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:8b:f1:06:e1:84:7e:3a:0b:1a:09:72:82:dd:de:e5:12:f4:
d1:06:45:d7:38:1a:db:0c:ac:39:5f:d6:1d:f1:ed:f5:87:d4:
05:a1:6f:6f:c7:b5:29:7f:27:ed:55:56:ef:06:5a:bb:a1:22:
bc:69:85:de:fd:84:08:f3:1d:73:c1:24:21:7f:04:21:51:0c:
30:61:36:70:34:11:64:e0:f5:a3:ab:38:c3:05:60:55:e2:4e:
49:82:3d:33:a4:94:8d:29:8a:3c:e9:10:6e:0d:25:d8:19:aa:
58:82:7e:3b:53:6e:8a:b9:21:11:a3:0e:81:ce:86:50:7b:99:
15:19:c3:a1:af:b1:61:ef:ab:4f:6a:da:c2:7f:93:32:3a:70:
8e:55:46:49:96:f5:20:d5:a8:a6:da:25:bf:11:cd:ab:64:3a:
fe:e0:9c:84:5a:a4:1e:d3:c5:fd:35:43:1f:e2:7d:24:02:7b:
b6:f2:68:55:5c:ac:8e:56:ae:fb:1a:79:49:e1:5e:1f:e4:cb:
1e:4e:d5:5f:11:ee:26:08:81:54:fc:e9:31:3d:f7:45:20:93:
91:8b:c3:cf:54:e4:5b:14:60:0d:12:5d:b0:86:5a:85:b1:c6:
e2:a7:aa:44:f8:d8:4a:a0:c4:3f:99:2b:af:de:e4:19:85:3d:
1b:63:8a:07
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsw53AGtZpugvbu5tOs21d6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE1MDExNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmYwZTYwOTA2OGE2NDRiYmI5MmVkYmVjNjRiZDA5MDI0MDQ0NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLbIKHk5ipMtAtWe25aSeyJAHZyq
n5aElv91j56FQ0Cj3GMeymXc+wT6N4URnv6KGu1LUZOlZ2TmCO28RS4cGwf58rIC
qN81CuSgVx6uSBQHi+iLlRwdwbJD5jyrMQAoM/dhROJSjnzfYpIyyUgCporXOBke
0g1tJiZLgNOkiVQ4zbgL3OwPM9Uz4Hc0YQKLaX/CJKmVYYWBOgUTm0KwZHgHcy2a
qnZL9L/Ud1MTo9lHhjo3ph0MMNk3CUik5V0T1gslTQOwoaHr2AIPg4cZkDYo6eWq
km6kkrmHxY6gLNtqQ1NZLmKYbTaHwjNdwz3e9e40FRrvl2Ua77RDvsCLRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHbw5gkGimRLu5LtvsZL0JAkBEbKMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZHZEbUNRYUtaRXU3a3UyLXhrdlFrQ1FFUnNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC6L8QbhhH46CxoJcoLd
3uUS9NEGRdc4GtsMrDlf1h3x7fWH1AWhb2/HtSl/J+1VVu8GWruhIrxphd79hAjz
HXPBJCF/BCFRDDBhNnA0EWTg9aOrOMMFYFXiTkmCPTOklI0pijzpEG4NJdgZqliC
fjtTboq5IRGjDoHOhlB7mRUZw6GvsWHvq09q2sJ/kzI6cI5VRkmW9SDVqKbaJb8R
zatkOv7gnIRapB7Txf01Qx/ifSQCe7byaFVcrI5WrvsaeUnhXh/kyx5O1V8R7iYI
gVT86TE990Ugk5GLw89U5FsUYA0SXbCGWoWxxuKnqkT42EqgxD+ZK6/e5BmFPRtj
igc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:10:55 2025 by rpki-client