Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/flPd5KpkHkp0cy-Ue6KCxwjEax4.roa
File: flPd5KpkHkp0cy-Ue6KCxwjEax4.roa (raw, json)
Hash identifier: PsM+BqBAGsvKuXIuUAm3/S2MMTR/QIxqtbXrld4Pfe4=
Subject key identifier: 7E:53:DD:E4:AA:64:1E:4A:74:73:2F:94:7B:A2:82:C7:08:C4:6B:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0A45E46B32F965C0D514E3A78E4E0933
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/flPd5KpkHkp0cy-Ue6KCxwjEax4.roa
Signing time: Sun 26 Nov 2023 06:16:41 +0000
ROA not before: Sun 26 Nov 2023 06:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:45:e4:6b:32:f9:65:c0:d5:14:e3:a7:8e:4e:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 06:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e53dde4aa641e4a74732f947ba282c708c46b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:94:a5:1d:57:5f:a4:e0:77:fa:fe:93:cd:
8e:f7:0d:fc:30:3f:86:1c:34:56:f2:ee:0e:c8:04:
cc:e0:17:e5:67:3d:84:0f:55:26:3f:39:03:7d:ab:
31:b1:f3:d7:76:f8:d9:fa:8b:5c:5f:a3:26:2d:5d:
35:d2:b9:25:e5:a0:5e:3b:15:e9:97:2e:8f:ca:aa:
a6:45:cf:d8:29:bf:5f:d3:7f:b3:b7:ed:ee:a4:36:
af:20:a7:d2:31:31:2c:65:68:9b:31:28:b3:88:93:
3f:96:04:ce:33:6b:11:4c:c3:46:47:88:d0:a5:0e:
aa:3f:4e:f1:83:2e:d0:59:bb:c5:51:c8:76:8c:9e:
26:52:8f:c1:87:70:6d:0b:4b:93:be:8e:72:c8:78:
25:75:62:32:b9:43:0c:2b:0b:99:59:8b:bf:ac:11:
17:f9:8e:97:bd:b2:6f:98:cf:35:21:67:7b:f8:22:
95:43:90:3b:5f:a6:9b:a1:79:ed:e9:fa:2f:09:bf:
f8:30:b4:3f:17:c2:9d:fe:9a:de:b3:3f:c5:be:84:
10:ae:e5:a1:b3:29:4a:a4:cc:51:1f:1d:45:88:0e:
d5:3b:40:63:4e:ee:c7:2d:8d:0d:f9:da:75:cf:54:
04:1a:f1:27:44:b2:1f:a9:0d:60:4a:e2:5d:32:79:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:DD:E4:AA:64:1E:4A:74:73:2F:94:7B:A2:82:C7:08:C4:6B:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/flPd5KpkHkp0cy-Ue6KCxwjEax4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:66:10:0c:32:e8:6a:92:42:7b:14:a5:76:38:eb:45:9d:39:
61:cd:4c:d1:40:d6:76:9a:23:f8:6e:37:6c:f2:6c:1d:4d:13:
d4:95:3e:7c:3c:70:01:1e:1f:e7:a2:b4:54:73:cb:65:08:5c:
95:37:a7:39:f5:d6:95:7d:9e:93:97:03:39:ef:c7:8b:b5:22:
1b:03:11:79:60:8d:55:b2:4f:cd:5e:52:a8:49:71:f5:89:b8:
32:5e:5e:01:dc:82:c7:c8:54:8d:f1:1e:45:ca:ea:93:c3:3c:
57:3c:71:f7:d0:95:28:07:2e:6f:8e:77:52:ef:3e:a4:41:3c:
2f:c4:d0:e1:90:39:a0:33:f7:6e:65:4f:2d:dc:e9:d8:d3:79:
26:25:db:af:e9:e0:17:72:e2:45:0d:13:6a:60:26:27:a2:18:
19:bc:21:99:37:01:2c:5f:dd:9c:12:60:52:c1:f8:e7:2f:11:
2b:d9:a3:12:10:21:4d:ef:0c:a0:4a:0d:53:e1:b5:3c:2a:31:
af:40:23:a4:26:04:54:c0:1d:81:a7:1c:36:44:26:c9:8f:31:
65:7a:25:cd:53:ba:23:7c:f6:86:b9:fe:23:39:87:72:b6:64:
47:bf:df:b3:48:cb:f9:40:85:ea:5c:a9:c6:56:19:c0:0c:ae:
32:42:ea:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwKReRrMvllwNUU46eOTgkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI2MDYxNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTUzZGRlNGFhNjQxZTRhNzQ3MzJmOTQ3YmEyODJjNzA4YzQ2YjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihWUpR1XX6Tgd/r+k82O9w38MD+G
HDRW8u4OyATM4BflZz2ED1UmPzkDfasxsfPXdvjZ+otcX6MmLV010rkl5aBeOxXp
ly6PyqqmRc/YKb9f03+zt+3upDavIKfSMTEsZWibMSiziJM/lgTOM2sRTMNGR4jQ
pQ6qP07xgy7QWbvFUch2jJ4mUo/Bh3BtC0uTvo5yyHgldWIyuUMMKwuZWYu/rBEX
+Y6XvbJvmM81IWd7+CKVQ5A7X6aboXnt6fovCb/4MLQ/F8Kd/presz/FvoQQruWh
sylKpMxRHx1FiA7VO0BjTu7HLY0N+dp1z1QEGvEnRLIfqQ1gSuJdMnm1SwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH5T3eSqZB5KdHMvlHuigscIxGseMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZmxQZDVLcGtIa3AwY3ktVWU2S0N4d2pFYXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACZmEAwy6GqSQnsUpXY4
60WdOWHNTNFA1naaI/huN2zybB1NE9SVPnw8cAEeH+eitFRzy2UIXJU3pzn11pV9
npOXAznvx4u1IhsDEXlgjVWyT81eUqhJcfWJuDJeXgHcgsfIVI3xHkXK6pPDPFc8
cffQlSgHLm+Od1LvPqRBPC/E0OGQOaAz925lTy3c6djTeSYl26/p4Bdy4kUNE2pg
JieiGBm8IZk3ASxf3ZwSYFLB+OcvESvZoxIQIU3vDKBKDVPhtTwqMa9AI6QmBFTA
HYGnHDZEJsmPMWV6Jc1TuiN89oa5/iM5h3K2ZEe/37NIy/lAhepcqcZWGcAMrjJC
6o0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:35 2025 by rpki-client