Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f8K63eZA9ytDsV-NNSnj4-1lWCE.roa
File: f8K63eZA9ytDsV-NNSnj4-1lWCE.roa (raw, json)
Hash identifier: 9zqsG5rlP7AGe++lHKwN1VvgErSl0GGjeqMWS6kcesg=
Subject key identifier: 7F:C2:BA:DD:E6:40:F7:2B:43:B1:5F:8D:35:29:E3:E3:ED:65:58:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0A478FF816BE6AD2E1F34860BB6F2305
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f8K63eZA9ytDsV-NNSnj4-1lWCE.roa
Signing time: Sat 07 Oct 2023 13:15:43 +0000
ROA not before: Sat 07 Oct 2023 13:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:47:8f:f8:16:be:6a:d2:e1:f3:48:60:bb:6f:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 13:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc2badde640f72b43b15f8d3529e3e3ed655821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:cb:27:b1:45:ce:59:5a:16:ad:95:8c:5f:
a3:68:94:97:ef:bd:45:a1:b7:64:d2:ff:52:4e:42:
7c:f1:34:e1:f8:9b:9f:fc:fd:77:f1:11:6f:75:6d:
1e:9a:5d:d0:88:73:c7:e8:2c:52:e8:cb:8c:d0:aa:
86:21:ae:b6:39:1a:1c:97:29:f9:77:18:6c:1b:3a:
95:f7:74:b8:c2:24:6c:08:1f:13:b2:fe:7f:ca:95:
0f:3a:71:7d:f5:cb:17:b6:7a:2c:58:63:3c:8e:ee:
0d:7b:51:68:84:a9:d8:d8:81:7d:16:24:70:97:c2:
33:af:9b:f9:b4:c7:32:70:4a:02:c0:ee:ba:8e:15:
c0:b4:f6:ed:14:8f:e8:4f:18:04:81:56:bc:16:e3:
b4:a6:06:9f:99:3b:bf:54:ab:e6:55:86:ad:80:9b:
90:6e:f7:a6:5e:93:ab:c5:3a:eb:0a:d7:43:30:be:
65:89:ec:14:76:8a:9c:61:e3:9b:16:96:a4:5b:e2:
d8:6f:ba:29:49:01:f3:d9:ca:e3:ea:65:17:0a:f5:
3e:19:e2:cf:b3:3f:fd:a7:3e:d8:f1:c0:6c:fd:b8:
b4:59:cb:5b:3f:09:e2:e2:60:22:f3:d0:85:f8:73:
b0:9c:a9:88:d5:49:e0:a4:f6:c1:26:62:c8:02:4a:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:BA:DD:E6:40:F7:2B:43:B1:5F:8D:35:29:E3:E3:ED:65:58:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f8K63eZA9ytDsV-NNSnj4-1lWCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:ba:89:a2:5e:7d:ae:b0:5a:37:22:bd:37:2c:4a:c0:d3:85:
b2:f1:74:e2:fe:de:3b:93:c2:11:a5:6e:e8:5d:2c:c9:92:00:
bf:a6:bf:09:c3:bb:d8:a5:57:1b:d8:d9:2b:66:96:66:e6:f5:
a2:e9:36:0d:a5:7a:88:a5:29:97:69:2f:89:bc:80:38:65:13:
0e:f4:ad:84:b0:c0:5c:7c:36:f0:e5:bc:da:01:b4:f6:68:b5:
c6:ad:12:da:1a:00:78:d0:9b:43:8c:06:c1:6e:57:8c:e4:58:
11:40:02:9a:d4:dd:91:25:f2:d9:c5:42:a4:20:6b:d4:b1:8a:
02:33:8f:2b:9d:1f:ac:63:45:96:b8:48:23:81:94:ec:15:5f:
2f:39:78:c2:24:d6:9e:62:14:20:38:49:0b:e3:0e:26:74:32:
a8:20:22:55:91:d9:10:26:4d:1c:b8:a2:63:92:91:0e:00:82:
50:21:7f:d0:a4:7f:fd:60:69:38:51:33:b8:3f:61:e6:56:9e:
50:ad:44:91:a1:1a:db:c8:89:9d:e8:1a:95:01:12:fa:a5:cb:
4e:8f:ff:17:12:15:b2:76:c9:f7:9a:b5:c0:8e:9a:17:7f:27:
5c:c3:16:4d:5b:18:fc:36:1a:4d:ab:9e:49:14:60:45:6a:98:
a8:d4:02:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsKR4/4Fr5q0uHzSGC7byMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA3MTMxNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmMyYmFkZGU2NDBmNzJiNDNiMTVmOGQzNTI5ZTNlM2VkNjU1ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPLJ7FFzllaFq2VjF+jaJSX771F
obdk0v9STkJ88TTh+Juf/P138RFvdW0eml3QiHPH6CxS6MuM0KqGIa62ORoclyn5
dxhsGzqV93S4wiRsCB8Tsv5/ypUPOnF99csXtnosWGM8ju4Ne1FohKnY2IF9FiRw
l8Izr5v5tMcycEoCwO66jhXAtPbtFI/oTxgEgVa8FuO0pgafmTu/VKvmVYatgJuQ
bvemXpOrxTrrCtdDML5liewUdoqcYeObFpakW+LYb7opSQHz2crj6mUXCvU+GeLP
sz/9pz7Y8cBs/bi0WctbPwni4mAi89CF+HOwnKmI1UngpPbBJmLIAkpHSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH/Cut3mQPcrQ7FfjTUp4+PtZVghMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZjhLNjNlWkE5eXREc1YtTk5Tbmo0LTFsV0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABG6iaJefa6wWjcivTcs
SsDThbLxdOL+3juTwhGlbuhdLMmSAL+mvwnDu9ilVxvY2Stmlmbm9aLpNg2leoil
KZdpL4m8gDhlEw70rYSwwFx8NvDlvNoBtPZotcatEtoaAHjQm0OMBsFuV4zkWBFA
AprU3ZEl8tnFQqQga9SxigIzjyudH6xjRZa4SCOBlOwVXy85eMIk1p5iFCA4SQvj
DiZ0MqggIlWR2RAmTRy4omOSkQ4AglAhf9Ckf/1gaThRM7g/YeZWnlCtRJGhGtvI
iZ3oGpUBEvqly06P/xcSFbJ2yfeatcCOmhd/J1zDFk1bGPw2Gk2rnkkUYEVqmKjU
Ajw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:29 2025 by rpki-client