Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grXdnEiBETxd9KtG3KkXUXXXO68.roa
File: grXdnEiBETxd9KtG3KkXUXXXO68.roa (raw, json)
Hash identifier: d4WxiR/RGEpetWvRvWiYAs8onCYU6X1BX9HuwybNN/U=
Subject key identifier: 82:B5:DD:9C:48:81:11:3C:5D:F4:AB:46:DC:A9:17:51:75:D7:3B:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF460FDD786657EDE51B4B98A88CB5159
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grXdnEiBETxd9KtG3KkXUXXXO68.roa
Signing time: Tue 03 Oct 2023 07:11:51 +0000
ROA not before: Tue 03 Oct 2023 07:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:60:fd:d7:86:65:7e:de:51:b4:b9:8a:88:cb:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 07:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b5dd9c4881113c5df4ab46dca9175175d73baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:01:4d:f8:9d:03:2a:de:ec:68:bd:2a:c8:
c3:6d:9a:f0:fe:65:cd:9f:7d:41:76:45:54:0e:30:
56:7a:57:bd:50:e2:22:1c:0b:b4:fe:15:49:cf:8b:
d7:f0:91:1e:99:ba:4d:ce:09:16:6b:84:d1:a6:40:
91:d5:d3:a3:88:77:be:d2:87:91:9b:07:b1:7d:3e:
bc:f1:8a:2b:6f:d4:cf:4f:9f:49:60:eb:a4:39:17:
5c:0b:f0:fb:54:57:cc:b6:76:9c:8e:f4:02:9a:be:
62:34:3a:e4:4d:8a:22:b0:e6:33:c3:51:10:d3:f9:
86:d2:c6:87:68:9d:76:53:17:61:92:32:b6:34:ed:
34:52:ec:f5:13:3c:07:ac:b6:80:29:97:07:cc:1f:
e7:02:bc:c5:92:f8:db:36:d3:3c:13:1b:4e:8f:de:
3a:63:85:ca:10:59:7f:0e:70:f8:9e:3f:7e:2a:1e:
63:8e:82:d7:03:69:48:f9:14:92:ab:e6:fa:35:4b:
22:60:af:51:c8:d8:0a:3d:90:50:5f:5a:8f:05:52:
dd:0b:4d:69:df:74:ac:d0:e3:49:eb:b8:5b:e2:ed:
f9:cd:cc:64:dc:b2:2b:d5:37:23:27:a2:5a:56:80:
19:44:f6:70:bd:41:79:ac:ab:c4:80:22:a4:60:6b:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:DD:9C:48:81:11:3C:5D:F4:AB:46:DC:A9:17:51:75:D7:3B:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grXdnEiBETxd9KtG3KkXUXXXO68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:72:ec:c6:90:3d:f4:80:f0:2d:85:9d:89:3a:bd:ec:f9:ff:
a9:fb:b9:2e:04:86:57:2c:44:93:00:5b:9b:7b:9b:50:22:38:
cb:a0:c8:bf:fa:99:d4:d2:ad:3b:a9:a4:d8:d4:40:81:37:93:
24:ce:ee:af:95:d4:9c:ef:2c:52:d6:ab:cd:15:3a:3d:7b:07:
81:97:bc:f7:d1:16:37:d6:7e:f2:a3:12:6d:b1:9e:9a:54:14:
c6:d1:e4:63:24:9b:b9:5d:0e:44:a5:1e:fc:a7:07:f2:74:25:
40:25:b6:43:d0:77:76:c6:83:5d:66:4f:03:06:0a:2c:5b:77:
06:61:27:42:29:2e:0e:92:de:ce:15:78:ed:be:13:03:10:04:
47:53:64:9a:7e:a0:ab:cd:bb:0a:0a:71:25:65:c6:4f:2d:23:
04:9e:57:73:45:38:2b:b3:6a:07:f5:b8:e2:2b:82:16:34:a1:
05:7b:10:b6:81:99:23:f5:10:d9:15:69:c0:5a:da:c2:aa:c9:
e0:d9:e0:1d:c3:5c:c2:8f:63:93:28:fd:e0:14:ca:f2:44:ee:
be:b0:3e:6e:98:cc:f4:53:22:b9:47:a1:f1:7c:e9:c5:da:b1:
4b:99:40:9e:1f:9b:76:66:66:b8:a6:54:ef:d2:cb:54:56:cf:
12:22:f9:9a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr0YP3XhmV+3lG0uYqIy1FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAzMDcxMTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmI1ZGQ5YzQ4ODExMTNjNWRmNGFiNDZkY2E5MTc1MTc1ZDczYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6EBTfidAyre7Gi9KsjDbZrw/mXN
n31BdkVUDjBWele9UOIiHAu0/hVJz4vX8JEembpNzgkWa4TRpkCR1dOjiHe+0oeR
mwexfT688Yorb9TPT59JYOukORdcC/D7VFfMtnacjvQCmr5iNDrkTYoisOYzw1EQ
0/mG0saHaJ12UxdhkjK2NO00Uuz1EzwHrLaAKZcHzB/nArzFkvjbNtM8ExtOj946
Y4XKEFl/DnD4nj9+Kh5jjoLXA2lI+RSSq+b6NUsiYK9RyNgKPZBQX1qPBVLdC01p
33Ss0ONJ67hb4u35zcxk3LIr1TcjJ6JaVoAZRPZwvUF5rKvEgCKkYGu8qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIK13ZxIgRE8XfSrRtypF1F11zuvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZ3JYZG5FaUJFVHhkOUt0RzNLa1hVWFhYTzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH5y7MaQPfSA8C2FnYk6
vez5/6n7uS4EhlcsRJMAW5t7m1AiOMugyL/6mdTSrTuppNjUQIE3kyTO7q+V1Jzv
LFLWq80VOj17B4GXvPfRFjfWfvKjEm2xnppUFMbR5GMkm7ldDkSlHvynB/J0JUAl
tkPQd3bGg11mTwMGCixbdwZhJ0IpLg6S3s4VeO2+EwMQBEdTZJp+oKvNuwoKcSVl
xk8tIwSeV3NFOCuzagf1uOIrghY0oQV7ELaBmSP1ENkVacBa2sKqyeDZ4B3DXMKP
Y5Mo/eAUyvJE7r6wPm6YzPRTIrlHofF86cXasUuZQJ4fm3ZmZrimVO/Sy1RWzxIi
+Zo=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:25 2025 by rpki-client