Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kV_CK6BQLmkBVh57t2ShlSluOh0.roa
File: kV_CK6BQLmkBVh57t2ShlSluOh0.roa (raw, json)
Hash identifier: 9QWmCstknaC0NDZ5/lW16CX1CJKaKWLlv9OLLVlf9LU=
Subject key identifier: 91:5F:C2:2B:A0:50:2E:69:01:56:1E:7B:B7:64:A1:95:29:6E:3A:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1F4C4BDBB7BF5B562E1B520F00E464BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kV_CK6BQLmkBVh57t2ShlSluOh0.roa
Signing time: Wed 11 Oct 2023 15:12:55 +0000
ROA not before: Wed 11 Oct 2023 15:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:4c:4b:db:b7:bf:5b:56:2e:1b:52:0f:00:e4:64:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 15:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=915fc22ba0502e6901561e7bb764a195296e3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:95:bd:9e:55:84:78:a3:20:13:81:c0:6b:
0b:b6:f4:b8:93:57:77:4b:5c:23:a6:60:69:6e:38:
3e:dd:f5:d9:4a:7a:7b:86:21:68:b7:ab:51:25:e6:
ba:4f:6a:03:c0:9a:98:32:d5:c0:57:d2:2d:13:be:
a9:12:3f:09:6e:d1:5b:8b:c0:0a:1d:a1:31:af:d1:
d5:b6:00:87:61:d7:b9:48:97:2e:95:78:3c:de:a4:
80:29:ff:df:d1:e7:4b:de:fd:42:d5:0a:4b:de:7b:
07:0b:72:10:07:e5:58:48:90:6b:fb:cd:b6:8c:c9:
52:8c:20:8c:f6:e7:77:20:3c:bf:5e:b3:59:d4:f7:
cb:cb:0b:e7:14:5f:c9:ad:13:c7:0d:e0:14:2b:e7:
b3:aa:17:45:4f:52:fb:ef:d5:ef:b6:9c:27:2e:cb:
8a:c0:3b:ac:9b:c6:31:c7:26:4d:ee:20:85:27:3f:
6e:98:30:86:ee:78:e3:f7:4f:22:a1:11:79:eb:b5:
5d:15:ba:e4:56:6f:ed:7f:59:c9:bf:45:95:cd:27:
c0:d0:b6:03:05:e7:bd:97:f2:2e:6c:4d:c5:18:d1:
7a:96:f3:b9:35:1d:b9:85:97:a6:82:eb:2f:0e:59:
6e:9f:e1:47:9a:82:89:d0:a4:1a:63:55:92:78:80:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:C2:2B:A0:50:2E:69:01:56:1E:7B:B7:64:A1:95:29:6E:3A:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kV_CK6BQLmkBVh57t2ShlSluOh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:7d:cb:dc:a7:f5:25:99:19:f7:19:84:ec:27:50:c3:ef:b7:
f1:9c:44:03:7d:4d:52:e0:1a:e8:63:3a:59:45:8a:02:9d:27:
6b:c2:7a:02:f6:20:f7:4b:e4:cc:12:e9:46:1a:d4:3d:54:65:
77:17:21:93:9f:6e:5b:cb:e6:15:cb:c7:91:6a:ad:9d:9a:3b:
8e:13:14:c8:2b:5c:b5:db:33:71:dd:2f:63:ff:3b:6e:dd:f0:
a8:38:9e:e9:08:94:a7:30:99:14:e9:2f:11:fe:43:27:8c:58:
be:a3:c2:f9:f4:60:f2:dc:7f:e4:4c:0f:ea:cc:56:0d:e8:9d:
6a:26:e5:57:56:a4:d2:42:3b:54:fc:7e:60:f0:42:f9:78:8b:
f8:ef:50:e2:7b:cb:0b:f1:d6:23:4c:53:33:38:1f:bf:e1:0a:
29:c8:ac:35:60:32:56:e3:24:30:78:8a:a7:ec:87:40:b4:85:
0c:48:49:01:51:29:93:bf:de:8b:43:23:42:37:8e:d6:45:1e:
f6:69:37:3e:08:12:e1:b5:1f:05:b3:e2:4f:fb:03:b9:92:10:
87:c0:31:6a:86:c6:3c:a4:f6:8b:c4:ad:31:63:98:cc:c8:86:
6b:5d:2d:7a:12:5b:30:bf:b1:8f:34:00:5f:24:df:11:a7:c6:
b7:c6:5a:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsfTEvbt79bVi4bUg8A5GS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMTUxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVmYzIyYmEwNTAyZTY5MDE1NjFlN2JiNzY0YTE5NTI5NmUzYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKeVvZ5VhHijIBOBwGsLtvS4k1d3
S1wjpmBpbjg+3fXZSnp7hiFot6tRJea6T2oDwJqYMtXAV9ItE76pEj8JbtFbi8AK
HaExr9HVtgCHYde5SJculXg83qSAKf/f0edL3v1C1QpL3nsHC3IQB+VYSJBr+822
jMlSjCCM9ud3IDy/XrNZ1PfLywvnFF/JrRPHDeAUK+ezqhdFT1L779XvtpwnLsuK
wDusm8YxxyZN7iCFJz9umDCG7njj908ioRF567VdFbrkVm/tf1nJv0WVzSfA0LYD
Bee9l/IubE3FGNF6lvO5NR25hZemgusvDllun+FHmoKJ0KQaY1WSeICnMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJFfwiugUC5pAVYee7dkoZUpbjodMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEva1ZfQ0s2QlFMbWtCVmg1N3QyU2hsU2x1T2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGl9y9yn9SWZGfcZhOwn
UMPvt/GcRAN9TVLgGuhjOllFigKdJ2vCegL2IPdL5MwS6UYa1D1UZXcXIZOfblvL
5hXLx5FqrZ2aO44TFMgrXLXbM3HdL2P/O27d8Kg4nukIlKcwmRTpLxH+QyeMWL6j
wvn0YPLcf+RMD+rMVg3onWom5VdWpNJCO1T8fmDwQvl4i/jvUOJ7ywvx1iNMUzM4
H7/hCinIrDVgMlbjJDB4iqfsh0C0hQxISQFRKZO/3otDI0I3jtZFHvZpNz4IEuG1
HwWz4k/7A7mSEIfAMWqGxjyk9ovErTFjmMzIhmtdLXoSWzC/sY80AF8k3xGnxrfG
Woc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:27 2025 by rpki-client