Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iqVx1EGn1Ln6M8z64Dg7P_hQNB4.roa
File: iqVx1EGn1Ln6M8z64Dg7P_hQNB4.roa (raw, json)
Hash identifier: IcRmHEV0/wKlNOo/XrcQlqjX2A1QQ/mVDfi7Mx0GYc4=
Subject key identifier: 8A:A5:71:D4:41:A7:D4:B9:FA:33:CC:FA:E0:38:3B:3F:F8:50:34:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B75565D0963268BA6FCF724DA694FD41F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iqVx1EGn1Ln6M8z64Dg7P_hQNB4.roa
Signing time: Sat 28 Oct 2023 08:11:15 +0000
ROA not before: Sat 28 Oct 2023 08:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:56:5d:09:63:26:8b:a6:fc:f7:24:da:69:4f:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 08:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aa571d441a7d4b9fa33ccfae0383b3ff850341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:a5:11:1a:a3:f0:e7:cc:9d:f8:91:32:ae:
22:77:bb:46:97:d5:ca:f4:73:20:72:b9:55:47:1d:
07:bb:8c:31:0d:e2:c4:c9:a2:73:b0:1f:70:bc:95:
06:c8:0a:8c:aa:aa:bd:09:93:dc:fa:2c:3c:24:76:
2a:00:8d:11:b3:a3:9a:77:47:2b:3b:96:d2:19:89:
ff:1f:e8:6c:2e:fc:22:0d:b7:ed:f5:a6:cb:93:db:
ab:a4:57:27:e5:09:fb:4b:4a:40:d2:bf:be:73:19:
97:23:d5:fe:79:ae:b5:a3:9e:26:6e:b7:ae:8e:d1:
23:da:08:a4:6b:29:d6:ad:d1:f4:6e:63:7a:e6:3d:
93:01:85:ba:c7:ec:aa:ea:a3:bb:09:7a:99:12:1a:
79:d7:9b:89:f7:78:be:35:03:ef:52:20:a4:3f:bc:
fe:2d:e4:62:6d:a5:6c:32:81:37:53:04:da:58:95:
e7:4f:7d:c3:f0:b6:94:62:aa:05:11:59:ec:fc:21:
26:8b:2b:c8:e7:11:0f:b5:be:20:b8:7d:8a:d4:ff:
10:d9:dc:a3:ab:e1:4d:d5:9a:32:33:c0:23:be:4c:
2e:73:dd:4c:4f:54:cc:23:d1:24:41:11:8b:cc:89:
69:e4:fb:82:2b:79:6c:5e:71:c9:d9:13:cb:48:5f:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:71:D4:41:A7:D4:B9:FA:33:CC:FA:E0:38:3B:3F:F8:50:34:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iqVx1EGn1Ln6M8z64Dg7P_hQNB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:23:58:62:38:fa:f6:5b:59:7f:9a:b3:3a:11:54:21:f0:62:
fe:aa:5f:18:ea:5d:5e:f5:c4:95:5f:49:8b:7a:d2:55:8e:32:
ac:3b:54:f7:0b:67:95:15:64:34:1f:35:8c:4a:aa:1a:2b:31:
fb:40:04:3f:b7:82:b1:74:4b:73:5d:30:cc:d7:67:5f:0e:f7:
50:a6:27:7c:0b:c4:a4:a8:a5:50:78:2f:9b:ca:9e:b6:51:89:
1e:0e:ce:4b:aa:d9:3b:97:95:8c:bb:62:4b:e2:78:5a:b5:b4:
a5:74:3a:20:f3:1a:cc:c1:89:b1:85:77:50:87:fa:93:9c:e0:
c7:42:75:9c:08:83:7a:54:fd:9f:18:42:65:93:df:46:be:f8:
56:76:a2:9e:ac:e6:f0:4e:5f:e0:e5:f5:2e:21:27:dd:a9:b0:
f5:81:ee:5d:31:30:bf:08:57:0b:cb:8c:e4:64:fd:e6:dd:37:
0c:8c:cc:aa:02:42:c8:00:fc:be:82:3d:54:3e:f5:24:59:d5:
b4:b7:eb:9d:9b:4d:e0:56:b8:41:70:35:89:ce:75:05:90:96:
17:95:04:3f:3f:7c:cd:da:ce:1d:7d:4f:34:41:0e:80:2c:cd:
0d:4a:0b:ab:9f:df:e1:3a:4c:db:be:67:7f:7a:17:2f:18:b0:
56:a7:bb:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt1Vl0JYyaLpvz3JNppT9QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI4MDgxMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWE1NzFkNDQxYTdkNGI5ZmEzM2NjZmFlMDM4M2IzZmY4NTAzNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQGlERqj8OfMnfiRMq4id7tGl9XK
9HMgcrlVRx0Hu4wxDeLEyaJzsB9wvJUGyAqMqqq9CZPc+iw8JHYqAI0Rs6Oad0cr
O5bSGYn/H+hsLvwiDbft9abLk9urpFcn5Qn7S0pA0r++cxmXI9X+ea61o54mbreu
jtEj2gikaynWrdH0bmN65j2TAYW6x+yq6qO7CXqZEhp515uJ93i+NQPvUiCkP7z+
LeRibaVsMoE3UwTaWJXnT33D8LaUYqoFEVns/CEmiyvI5xEPtb4guH2K1P8Q2dyj
q+FN1ZoyM8Ajvkwuc91MT1TMI9EkQRGLzIlp5PuCK3lsXnHJ2RPLSF+0OQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIqlcdRBp9S5+jPM+uA4Oz/4UDQeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaXFWeDFFR24xTG42TTh6NjREZzdQX2hRTkI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJsjWGI4+vZbWX+aszoR
VCHwYv6qXxjqXV71xJVfSYt60lWOMqw7VPcLZ5UVZDQfNYxKqhorMftABD+3grF0
S3NdMMzXZ18O91CmJ3wLxKSopVB4L5vKnrZRiR4Ozkuq2TuXlYy7YkvieFq1tKV0
OiDzGszBibGFd1CH+pOc4MdCdZwIg3pU/Z8YQmWT30a++FZ2op6s5vBOX+Dl9S4h
J92psPWB7l0xML8IVwvLjORk/ebdNwyMzKoCQsgA/L6CPVQ+9SRZ1bS3652bTeBW
uEFwNYnOdQWQlheVBD8/fM3azh19TzRBDoAszQ1KC6uf3+E6TNu+Z396Fy8YsFan
u4k=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:10 2025 by rpki-client