Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNYk1TXcES_xr4F6vI765aL5PlU.roa
File: fNYk1TXcES_xr4F6vI765aL5PlU.roa (raw, json)
Hash identifier: Yy6CJXYPnTwyXx49DPQw9sCpBvjucDXSlKC4xSjTnao=
Subject key identifier: 7C:D6:24:D5:35:DC:11:2F:F1:AF:81:7A:BC:8E:FA:E5:A2:F9:3E:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B81C866227609B8D6023A1E4BF8122EC4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNYk1TXcES_xr4F6vI765aL5PlU.roa
Signing time: Mon 30 Oct 2023 18:11:16 +0000
ROA not before: Mon 30 Oct 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:c8:66:22:76:09:b8:d6:02:3a:1e:4b:f8:12:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd624d535dc112ff1af817abc8efae5a2f93e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:a8:fc:ae:9d:73:e5:f8:86:70:3b:fb:45:
2b:62:5c:13:31:98:75:2f:38:42:78:90:46:1c:a3:
88:94:06:57:92:01:95:68:29:f3:05:eb:c4:48:fd:
4f:e2:6d:77:2a:b2:91:d0:3b:ce:66:fa:55:9d:a3:
9d:fe:a8:14:21:e1:ef:c8:4e:ea:88:74:7c:82:c0:
2a:67:82:2b:8b:7e:ac:e0:cc:4a:c2:6e:dc:43:4f:
2f:dc:b1:7c:76:8f:a0:cb:a5:26:7d:44:5e:fb:9e:
5e:c4:2d:cc:fb:20:5d:f8:b5:e6:0e:ca:f5:58:f3:
b3:11:41:ce:4e:b3:5f:93:e0:44:ac:4d:62:9b:0c:
7d:fc:b2:36:67:d5:c9:72:9b:20:dd:36:ff:a8:c7:
fa:d9:39:b1:09:75:35:7a:7b:e2:51:53:ba:0f:b4:
ea:9c:8c:b3:bb:00:5b:67:0d:65:1d:b9:88:1e:c1:
b4:a3:dd:78:b5:39:68:27:4c:93:40:35:a5:06:e0:
2f:56:2e:07:75:fb:43:80:af:3c:08:57:a4:a8:3a:
26:1e:99:d5:62:a3:44:a4:73:18:12:70:73:54:c3:
77:bd:d4:7f:50:a2:ea:99:36:b9:48:cf:fd:f5:04:
24:4b:73:f4:d8:91:4a:97:af:7b:90:28:a2:52:ee:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:24:D5:35:DC:11:2F:F1:AF:81:7A:BC:8E:FA:E5:A2:F9:3E:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNYk1TXcES_xr4F6vI765aL5PlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:6d:f5:b9:f2:79:75:44:7f:e2:04:41:97:8e:a2:c1:1f:d0:
33:07:7d:0c:87:78:49:0c:f0:10:76:eb:44:14:8e:3f:87:fe:
d5:3d:35:70:d6:b2:3b:fe:e0:eb:66:18:c5:54:9e:e6:79:08:
bb:86:00:5a:7c:b4:27:40:50:8e:92:ed:2a:2b:be:2b:8e:92:
99:45:71:b7:ed:e5:4a:db:71:b4:e6:f3:aa:65:f8:06:58:58:
85:24:4a:d7:33:73:75:3a:07:15:73:f2:4f:80:12:3b:e7:2e:
14:eb:7e:7a:15:02:a0:a0:1a:23:40:14:2d:7f:ff:db:b5:e8:
15:30:4e:65:dd:85:24:0d:ad:54:16:6c:ae:e6:14:fa:42:c2:
69:67:21:5b:d5:ca:35:09:a4:41:b6:27:18:f9:0b:03:1e:66:
7d:89:70:7a:03:e6:dd:14:5f:2a:d4:55:54:b5:6e:ac:b3:67:
63:7d:06:d1:eb:e2:fe:39:ea:12:84:a1:08:f5:c6:52:2f:dc:
1d:ab:31:b5:73:db:46:0d:3d:73:22:a9:e4:79:67:db:db:72:
08:b1:8c:fe:a4:4e:5f:d3:57:5c:44:3d:a1:f0:cb:2e:fa:d3:
d7:36:35:09:65:b2:fe:8c:72:cf:50:62:65:ff:bf:56:80:eb:
66:71:cf:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuByGYidgm41gI6Hkv4Ei7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMwMTgxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Q2MjRkNTM1ZGMxMTJmZjFhZjgxN2FiYzhlZmFlNWEyZjkzZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXKo/K6dc+X4hnA7+0UrYlwTMZh1
LzhCeJBGHKOIlAZXkgGVaCnzBevESP1P4m13KrKR0DvOZvpVnaOd/qgUIeHvyE7q
iHR8gsAqZ4Iri36s4MxKwm7cQ08v3LF8do+gy6UmfURe+55exC3M+yBd+LXmDsr1
WPOzEUHOTrNfk+BErE1imwx9/LI2Z9XJcpsg3Tb/qMf62TmxCXU1enviUVO6D7Tq
nIyzuwBbZw1lHbmIHsG0o914tTloJ0yTQDWlBuAvVi4HdftDgK88CFekqDomHpnV
YqNEpHMYEnBzVMN3vdR/UKLqmTa5SM/99QQkS3P02JFKl697kCiiUu6TbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHzWJNU13BEv8a+BeryO+uWi+T5VMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZk5ZazFUWGNFU194cjRGNnZJNzY1YUw1UGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKpt9bnyeXVEf+IEQZeO
osEf0DMHfQyHeEkM8BB260QUjj+H/tU9NXDWsjv+4OtmGMVUnuZ5CLuGAFp8tCdA
UI6S7SorviuOkplFcbft5UrbcbTm86pl+AZYWIUkStczc3U6BxVz8k+AEjvnLhTr
fnoVAqCgGiNAFC1//9u16BUwTmXdhSQNrVQWbK7mFPpCwmlnIVvVyjUJpEG2Jxj5
CwMeZn2JcHoD5t0UXyrUVVS1bqyzZ2N9BtHr4v456hKEoQj1xlIv3B2rMbVz20YN
PXMiqeR5Z9vbcgixjP6kTl/TV1xEPaHwyy7609c2NQllsv6Mcs9QYmX/v1aA62Zx
zxE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:25:53 2025 by rpki-client