Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPrBaQIBjK2EeYFbLmyWtByA_eE.roa
File: gPrBaQIBjK2EeYFbLmyWtByA_eE.roa (raw, json)
Hash identifier: XY6/4jlbAuIahTjReW2VWNCUWYqAeX+vHsIN6DpIs2w=
Subject key identifier: 80:FA:C1:69:02:01:8C:AD:84:79:81:5B:2E:6C:96:B4:1C:80:FD:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C231EAAD228F3793DE711B36920F5CF46
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPrBaQIBjK2EeYFbLmyWtByA_eE.roa
Signing time: Fri 01 Dec 2023 02:04:21 +0000
ROA not before: Fri 01 Dec 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:231e:85a7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:23:1e:aa:d2:28:f3:79:3d:e7:11:b3:69:20:f5:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80fac16902018cad8479815b2e6c96b41c80fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:67:99:a3:af:68:a1:90:62:dd:9f:47:ce:
00:8f:9b:d2:3e:77:4c:17:af:60:c7:cd:ab:47:bd:
63:40:54:6c:be:3f:46:96:ef:5c:f5:52:2a:31:98:
fc:64:fc:04:6f:16:a0:42:c0:48:bb:a8:a3:c6:44:
10:a3:f3:b7:d7:03:b6:e9:e7:d8:e9:ea:67:fa:d9:
5d:66:35:8a:3e:57:3f:0f:e8:f6:2a:93:9a:19:7c:
8c:87:a2:82:09:6a:dd:10:0a:f1:ed:0c:54:b2:74:
c4:da:de:91:97:b7:a2:81:a7:70:21:5d:22:fe:a0:
4e:4a:9c:7c:cd:0d:fa:89:24:29:3e:7a:95:5f:84:
01:84:88:21:3d:dd:e4:4b:b4:36:ad:b9:cd:37:28:
73:96:1a:23:6e:34:97:9d:54:c1:0f:05:4f:4b:4d:
21:db:ee:33:15:98:db:16:32:aa:0b:e9:7d:d2:e2:
51:d7:2f:9b:f1:14:15:eb:60:a1:ab:2c:ee:e9:b9:
56:57:a0:d3:7b:be:44:e7:5b:6a:fa:e9:16:16:6c:
a5:8a:90:a3:d8:5f:41:b0:c8:88:66:95:7e:a9:18:
4a:79:21:ae:c1:6d:22:f3:23:0f:d5:0b:b7:e3:13:
b5:4f:a6:8a:6b:e0:31:ad:cc:b4:8c:01:d9:2c:b8:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:C1:69:02:01:8C:AD:84:79:81:5B:2E:6C:96:B4:1C:80:FD:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPrBaQIBjK2EeYFbLmyWtByA_eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:ec:12:e2:b5:9d:b0:8c:a4:21:05:4f:c7:e9:00:a5:8b:8b:
1e:4d:5b:1d:2e:c6:d3:e3:2f:eb:38:59:5e:d8:5f:72:6f:df:
39:7f:91:d5:fe:99:aa:30:cc:4a:3e:72:b0:28:ba:47:cb:62:
35:29:04:85:6f:7d:a2:ea:a4:c8:75:06:7b:d2:55:68:11:62:
61:c7:98:d6:38:37:67:cd:ca:de:27:fd:32:3a:fc:d5:09:54:
dc:c9:24:af:f0:d8:c0:1b:71:76:e0:c4:22:af:93:19:98:90:
40:36:d3:31:93:65:f0:dc:16:6c:2a:16:23:f4:94:a8:04:9d:
02:f5:a1:84:7a:89:9c:02:c2:2e:67:dc:f4:62:08:fe:72:8e:
96:e3:e9:e8:3f:31:fb:5e:76:10:72:0c:14:20:c6:ea:de:49:
ec:bc:c6:7d:bc:28:7a:37:54:d3:e2:b8:48:59:56:5d:f1:65:
7f:91:58:40:69:78:c6:fd:23:b8:0a:f9:0d:4f:52:6c:d7:07:
55:06:07:a0:46:13:06:ab:96:39:f8:9e:de:c8:32:b2:15:53:
fa:bc:08:3c:82:ea:6a:e5:fe:7f:b1:da:0f:d9:c8:5d:0a:b2:
bc:0f:94:31:82:53:34:b4:e6:75:9b:9d:7e:2b:3d:22:5d:e1:
90:86:b9:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwjHqrSKPN5PecRs2kg9c9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAxMDIwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGZhYzE2OTAyMDE4Y2FkODQ3OTgxNWIyZTZjOTZiNDFjODBmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHlnmaOvaKGQYt2fR84Aj5vSPndM
F69gx82rR71jQFRsvj9Glu9c9VIqMZj8ZPwEbxagQsBIu6ijxkQQo/O31wO26efY
6epn+tldZjWKPlc/D+j2KpOaGXyMh6KCCWrdEArx7QxUsnTE2t6Rl7eigadwIV0i
/qBOSpx8zQ36iSQpPnqVX4QBhIghPd3kS7Q2rbnNNyhzlhojbjSXnVTBDwVPS00h
2+4zFZjbFjKqC+l90uJR1y+b8RQV62Chqyzu6blWV6DTe75E51tq+ukWFmylipCj
2F9BsMiIZpV+qRhKeSGuwW0i8yMP1Qu34xO1T6aKa+Axrcy0jAHZLLhzQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFID6wWkCAYythHmBWy5slrQcgP3hMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZ1ByQmFRSUJqSzJFZVlGYkxteVd0QnlBX2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEDsEuK1nbCMpCEFT8fp
AKWLix5NWx0uxtPjL+s4WV7YX3Jv3zl/kdX+maowzEo+crAoukfLYjUpBIVvfaLq
pMh1BnvSVWgRYmHHmNY4N2fNyt4n/TI6/NUJVNzJJK/w2MAbcXbgxCKvkxmYkEA2
0zGTZfDcFmwqFiP0lKgEnQL1oYR6iZwCwi5n3PRiCP5yjpbj6eg/MftedhByDBQg
xureSey8xn28KHo3VNPiuEhZVl3xZX+RWEBpeMb9I7gK+Q1PUmzXB1UGB6BGEwar
ljn4nt7IMrIVU/q8CDyC6mrl/n+x2g/ZyF0KsrwPlDGCUzS05nWbnX4rPSJd4ZCG
uWU=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:33:15 2025 by rpki-client