Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwEFyl68u93rMrL3okhyCnYpha4.roa
File: fwEFyl68u93rMrL3okhyCnYpha4.roa (raw, json)
Hash identifier: iSUblDveIzFlg9pQ37Y1nLmpTFe8zYVaflr+Ida8vYs=
Subject key identifier: 7F:01:05:CA:5E:BC:BB:DD:EB:32:B2:F7:A2:48:72:0A:76:29:85:AE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B45EFD154334A13AB47560853B6E3DDCC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwEFyl68u93rMrL3okhyCnYpha4.roa
Signing time: Thu 19 Oct 2023 03:17:06 +0000
ROA not before: Thu 19 Oct 2023 03:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:ef:d1:54:33:4a:13:ab:47:56:08:53:b6:e3:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 03:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0105ca5ebcbbddeb32b2f7a248720a762985ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:f0:77:e6:c3:c6:95:97:27:81:d4:06:e2:
95:b5:ad:14:e5:1e:ec:20:fb:c9:4f:6f:f4:65:eb:
e2:92:aa:77:ec:29:4e:1d:b5:f7:7d:0c:76:2b:86:
40:fa:af:4a:50:e8:23:8b:1c:9c:d9:ff:3a:7c:5e:
40:ab:e6:99:78:81:58:0b:36:9a:c1:c9:14:62:ca:
50:84:7d:a7:9a:78:9b:8e:66:81:78:35:57:ca:1a:
ac:a7:d7:2d:14:28:ab:65:6b:9b:8b:a4:86:0a:01:
1b:ef:ac:f2:7d:0e:65:83:d0:5e:b1:65:f5:31:d5:
e5:4d:0f:8d:d2:23:68:90:fe:c6:e0:db:d9:8b:a9:
15:77:84:cc:9b:16:4e:e4:ab:f5:27:23:87:31:b4:
69:f2:8d:ee:f5:7d:2e:ab:bd:34:d2:06:2f:34:8e:
4b:bd:e4:6f:29:d9:fd:04:bc:ab:36:ed:ed:b0:33:
ed:6a:ce:ff:f0:5c:8a:c3:89:1d:3e:3a:60:2d:27:
c7:1d:fa:80:91:4d:c9:68:6a:90:f4:65:40:bc:fb:
d7:f7:0d:ac:1d:b4:8d:8c:21:43:b4:bb:fb:f6:14:
4c:c8:02:fd:f6:1d:9e:38:3a:9f:9a:bc:18:be:15:
1f:55:75:ac:92:ef:1b:06:ab:59:bc:96:28:27:3e:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:05:CA:5E:BC:BB:DD:EB:32:B2:F7:A2:48:72:0A:76:29:85:AE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwEFyl68u93rMrL3okhyCnYpha4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:c6:dc:c5:5f:33:99:1e:3a:79:b6:27:68:24:f6:74:10:c3:
fd:10:18:4c:d5:5f:77:bb:8f:01:17:47:a3:0e:0f:71:b2:94:
7c:6f:88:b9:c7:f9:17:ae:3c:8a:77:13:4f:c0:c8:3e:63:ad:
13:d8:0d:dd:ea:03:be:58:ff:8e:e2:14:e8:02:dc:95:a4:bf:
65:84:0a:b4:47:5d:4d:15:6a:79:f3:ac:da:98:cf:43:3c:d6:
35:1e:d4:99:6a:7b:3b:f1:24:71:9f:eb:09:13:12:11:29:19:
c2:6e:e1:f5:a5:8a:ab:57:fb:4a:55:66:6d:56:99:4f:9f:32:
71:34:e8:3f:8c:9e:ed:f9:29:95:0c:b5:ea:cc:47:4e:76:ec:
50:13:8b:b2:f0:5b:2b:5a:95:72:d7:cc:a0:4a:7d:63:44:ef:
cf:8e:4b:5b:c6:87:c8:99:d3:c5:f9:fa:8d:90:e9:ca:3e:84:
2e:3d:4a:65:b9:20:d5:85:0c:f3:83:c0:54:4c:08:8b:af:d0:
59:08:e1:e6:ed:50:7b:ca:a0:e7:e5:51:11:81:13:48:50:43:
93:43:f1:11:4b:10:15:f1:7f:59:b6:b5:81:9e:8e:90:b0:ec:
79:45:f1:11:aa:b8:a2:cc:8a:aa:09:84:82:ce:e6:e6:67:de:
7b:9c:20:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtF79FUM0oTq0dWCFO2493MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDMxNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjAxMDVjYTVlYmNiYmRkZWIzMmIyZjdhMjQ4NzIwYTc2Mjk4NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLXwd+bDxpWXJ4HUBuKVta0U5R7s
IPvJT2/0Zevikqp37ClOHbX3fQx2K4ZA+q9KUOgjixyc2f86fF5Aq+aZeIFYCzaa
wckUYspQhH2nmnibjmaBeDVXyhqsp9ctFCirZWubi6SGCgEb76zyfQ5lg9BesWX1
MdXlTQ+N0iNokP7G4NvZi6kVd4TMmxZO5Kv1JyOHMbRp8o3u9X0uq7000gYvNI5L
veRvKdn9BLyrNu3tsDPtas7/8FyKw4kdPjpgLSfHHfqAkU3JaGqQ9GVAvPvX9w2s
HbSNjCFDtLv79hRMyAL99h2eODqfmrwYvhUfVXWsku8bBqtZvJYoJz77EQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH8BBcpevLvd6zKy96JIcgp2KYWuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZndFRnlsNjh1OTNyTXJMM29raHlDbllwaGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKHG3MVfM5keOnm2J2gk
9nQQw/0QGEzVX3e7jwEXR6MOD3GylHxviLnH+ReuPIp3E0/AyD5jrRPYDd3qA75Y
/47iFOgC3JWkv2WECrRHXU0VannzrNqYz0M81jUe1JlqezvxJHGf6wkTEhEpGcJu
4fWliqtX+0pVZm1WmU+fMnE06D+Mnu35KZUMterMR0527FATi7LwWytalXLXzKBK
fWNE78+OS1vGh8iZ08X5+o2Q6co+hC49SmW5INWFDPODwFRMCIuv0FkI4ebtUHvK
oOflURGBE0hQQ5ND8RFLEBXxf1m2tYGejpCw7HlF8RGquKLMiqoJhILO5uZn3nuc
IEY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:09 2025 by rpki-client