Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ1flG27oijuHKzvra7fB9Onz8A.roa
File: fJ1flG27oijuHKzvra7fB9Onz8A.roa (raw, json)
Hash identifier: GLU35C74SETeFYcX3sjoffk2S8gpk8wEmcQowdlOZgA=
Subject key identifier: 7C:9D:5F:94:6D:BB:A2:28:EE:1C:AC:EF:AD:AE:DF:07:D3:A7:CF:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C054B2B6E72DAA0745DF1EAFE5CC85C16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ1flG27oijuHKzvra7fB9Onz8A.roa
Signing time: Sat 25 Nov 2023 07:04:21 +0000
ROA not before: Sat 25 Nov 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:54a:d93d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:4b:2b:6e:72:da:a0:74:5d:f1:ea:fe:5c:c8:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9d5f946dbba228ee1cacefadaedf07d3a7cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:1b:69:d4:04:4d:1a:61:5e:f1:0c:fa:93:
ce:26:51:47:d8:3e:57:72:4c:be:67:73:5f:61:65:
17:c0:ac:be:77:99:6e:ee:91:ee:7c:1e:c3:75:da:
4f:50:74:35:33:62:9c:bc:d5:23:c7:6c:3c:5e:f6:
18:20:93:0c:5c:cf:41:db:66:a7:55:f0:ef:75:a9:
ce:53:40:68:42:de:aa:9c:54:4e:63:7a:62:40:de:
88:a5:37:79:13:c7:64:d1:5d:4c:63:27:06:ce:b3:
01:54:ee:1c:7a:ef:4f:fd:97:7a:2a:6c:23:3a:2f:
48:ba:aa:a6:4b:b2:ff:b3:d2:30:0f:99:cd:d7:09:
5e:75:31:79:cb:90:f5:76:a0:6a:66:95:a1:c6:b9:
24:c0:af:38:2c:24:e1:c2:11:0e:f9:c0:ae:5e:45:
63:96:b2:69:19:01:c5:d9:32:8c:56:f3:39:9c:b4:
9a:b9:7c:1a:d9:c1:e9:f9:76:bb:8f:34:26:ed:dd:
35:8c:2b:86:eb:a0:1b:4e:29:96:dd:7b:bd:36:1d:
58:fe:b6:ce:ec:1d:2d:9e:a0:12:3f:eb:20:f1:01:
c1:f0:ea:fd:e0:46:ba:6b:3a:f1:ce:2f:58:24:2c:
ac:b1:78:7a:f1:e0:ce:0e:ee:fa:d3:dc:d4:ac:68:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:5F:94:6D:BB:A2:28:EE:1C:AC:EF:AD:AE:DF:07:D3:A7:CF:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ1flG27oijuHKzvra7fB9Onz8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:6f:c2:6f:01:c1:d5:6c:b2:eb:f8:96:1b:d2:47:ee:e5:f6:
3f:21:d1:29:ac:ba:67:98:ab:50:91:2f:8c:f4:e4:92:ce:41:
28:88:ea:7b:32:f6:ed:88:b0:9f:30:1c:c1:4c:24:47:99:39:
6c:35:a0:55:cd:34:6c:68:80:b5:46:bc:19:c8:9b:41:98:0e:
2d:48:e0:3d:8c:cf:f3:b9:08:01:77:e7:6b:64:1a:46:16:da:
cd:4c:b5:05:f6:98:6c:ae:74:07:01:97:f8:b8:88:6f:4e:30:
c6:6a:db:dc:76:e7:54:86:b4:b9:8f:10:9a:cf:08:83:58:fe:
bb:d3:b2:48:82:11:d6:42:42:92:2b:c4:8f:bd:5e:db:9d:06:
a6:0f:ad:91:3d:90:bd:19:2c:4b:5b:d5:a9:dd:af:dd:cf:58:
e8:4a:51:8d:35:1f:05:7b:47:01:1f:53:b3:c2:2a:c9:ba:5d:
c6:80:d1:02:0d:c4:ab:3a:a1:5e:85:38:c5:29:cb:cd:41:49:
d8:49:06:ed:6f:76:aa:ab:75:62:c7:1a:61:60:c6:e8:a8:3c:
fb:b6:ed:90:ca:63:7a:c3:eb:e4:9f:67:29:fd:76:42:0f:69:
11:23:90:fe:c6:42:b6:68:de:0f:cc:52:8a:a9:5f:58:fc:99:
e4:85:f5:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwFSytuctqgdF3x6v5cyFwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI1MDcwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzlkNWY5NDZkYmJhMjI4ZWUxY2FjZWZhZGFlZGYwN2QzYTdjZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4MbadQETRphXvEM+pPOJlFH2D5X
cky+Z3NfYWUXwKy+d5lu7pHufB7DddpPUHQ1M2KcvNUjx2w8XvYYIJMMXM9B22an
VfDvdanOU0BoQt6qnFROY3piQN6IpTd5E8dk0V1MYycGzrMBVO4ceu9P/Zd6Kmwj
Oi9IuqqmS7L/s9IwD5nN1wledTF5y5D1dqBqZpWhxrkkwK84LCThwhEO+cCuXkVj
lrJpGQHF2TKMVvM5nLSauXwa2cHp+Xa7jzQm7d01jCuG66AbTimW3Xu9Nh1Y/rbO
7B0tnqASP+sg8QHB8Or94Ea6azrxzi9YJCyssXh68eDODu7609zUrGh29QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHydX5Rtu6Io7hys762u3wfTp8/AMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZkoxZmxHMjdvaWp1SEt6dnJhN2ZCOU9uejhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMFvwm8BwdVssuv4lhvS
R+7l9j8h0SmsumeYq1CRL4z05JLOQSiI6nsy9u2IsJ8wHMFMJEeZOWw1oFXNNGxo
gLVGvBnIm0GYDi1I4D2Mz/O5CAF352tkGkYW2s1MtQX2mGyudAcBl/i4iG9OMMZq
29x251SGtLmPEJrPCINY/rvTskiCEdZCQpIrxI+9XtudBqYPrZE9kL0ZLEtb1and
r93PWOhKUY01HwV7RwEfU7PCKsm6XcaA0QINxKs6oV6FOMUpy81BSdhJBu1vdqqr
dWLHGmFgxuioPPu27ZDKY3rD6+SfZyn9dkIPaREjkP7GQrZo3g/MUoqpX1j8meSF
9f0=
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:09:18 2025 by rpki-client