Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l-1YPiEoskMb9u-hzsvycMjeXmU.roa
File: l-1YPiEoskMb9u-hzsvycMjeXmU.roa (raw, json)
Hash identifier: 3PLeSt6PqGW5H4vgqA3QDq0Rwpo9LkL8TIXD7EnRi0s=
Subject key identifier: 97:ED:58:3E:21:28:B2:43:1B:F6:EF:A1:CE:CB:F2:70:C8:DE:5E:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3FA9157CAEDB24A2401DF10609C9887A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l-1YPiEoskMb9u-hzsvycMjeXmU.roa
Signing time: Wed 06 Dec 2023 15:04:54 +0000
ROA not before: Wed 06 Dec 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:3fa8:7af7/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:a9:15:7c:ae:db:24:a2:40:1d:f1:06:09:c9:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ed583e2128b2431bf6efa1cecbf270c8de5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:3a:fd:1e:e7:06:b5:e7:5e:6d:7e:d2:bf:
15:f7:ce:a1:66:ed:fa:cb:f5:b3:12:76:0e:a1:7f:
e4:1c:2f:21:0f:bf:22:a4:2e:a7:5d:68:8d:b0:7d:
ab:fd:cc:cf:bb:d3:06:3e:35:be:3c:b1:18:8d:ce:
57:b6:79:28:d3:df:0f:c9:81:59:16:cf:3d:f9:48:
dd:3a:e7:ee:d4:f7:09:3c:35:7a:04:f5:43:1e:76:
52:17:c8:43:fe:b2:d1:d6:d3:35:62:44:35:b8:c6:
b3:81:53:64:48:20:f2:05:0a:62:7c:ba:3d:50:a0:
63:fc:a9:d7:f3:a5:1f:c4:d5:62:cd:e0:12:2d:ae:
63:01:86:b2:e5:d2:5e:3d:36:07:fa:54:2b:9b:f7:
fb:e7:ab:f4:94:2b:0b:42:89:fe:ed:b0:60:e3:c8:
61:1c:02:b8:6f:fc:fc:96:86:9c:bd:4e:f9:ed:d6:
e6:7a:03:5f:90:32:6b:13:e2:4a:a9:d7:2e:a1:0a:
2e:7d:7e:b6:9c:b1:b4:7b:e9:d0:00:63:0d:77:6c:
19:43:2b:d2:cc:7c:ae:48:bb:f5:dc:2c:85:20:0d:
12:62:d4:9d:a9:bd:49:58:65:75:30:bb:ef:44:84:
e1:33:4a:01:aa:18:c3:9a:92:4d:a4:01:f3:53:17:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:58:3E:21:28:B2:43:1B:F6:EF:A1:CE:CB:F2:70:C8:DE:5E:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l-1YPiEoskMb9u-hzsvycMjeXmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bb:34:d3:9e:3f:3b:8e:42:dc:90:dd:7e:65:1d:55:da:86:82:
37:50:3a:ec:08:11:24:d5:c6:5b:e2:be:5e:09:ad:56:99:d7:
8e:1d:8c:8d:f9:79:52:4d:b8:65:66:cf:2e:ac:bb:b8:45:ef:
95:93:c7:95:95:85:65:05:c7:b1:63:6e:b7:60:9a:8e:94:69:
a6:bf:6c:77:36:02:b9:e8:65:8b:28:75:4a:75:11:ba:de:c3:
a4:d4:3f:bf:dc:af:ee:23:53:d1:09:fa:ec:ed:c6:03:bd:a3:
e5:34:91:d6:9b:e9:3c:5a:64:91:e3:2e:f7:11:95:1c:a9:7b:
7c:e7:cc:81:5c:0a:0b:e8:81:b4:f9:c7:76:42:a2:0a:23:74:
3d:3d:f9:7f:19:70:da:84:00:b1:ce:b2:49:ff:d3:fa:fe:86:
d3:83:4d:c4:7b:b6:8a:da:be:12:d6:b0:ee:45:8c:d3:8e:45:
e1:cd:93:d0:ee:8e:ba:2a:63:18:6f:ec:94:e2:63:73:5b:9b:
f1:8b:48:ef:d8:e2:fb:7d:ea:cb:61:c5:63:d1:d6:28:07:22:
b7:b6:88:22:63:df:38:a9:a0:2d:17:b3:b1:e6:08:ce:e6:22:
5c:75:29:ea:d2:6a:39:f6:fd:60:31:84:61:35:b3:91:ba:df:
13:0d:a3:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw/qRV8rtskokAd8QYJyYh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTUwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2VkNTgzZTIxMjhiMjQzMWJmNmVmYTFjZWNiZjI3MGM4ZGU1ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPI6/R7nBrXnXm1+0r8V986hZu36
y/WzEnYOoX/kHC8hD78ipC6nXWiNsH2r/czPu9MGPjW+PLEYjc5Xtnko098PyYFZ
Fs89+UjdOufu1PcJPDV6BPVDHnZSF8hD/rLR1tM1YkQ1uMazgVNkSCDyBQpifLo9
UKBj/KnX86UfxNVizeASLa5jAYay5dJePTYH+lQrm/f756v0lCsLQon+7bBg48hh
HAK4b/z8loacvU757dbmegNfkDJrE+JKqdcuoQoufX62nLG0e+nQAGMNd2wZQyvS
zHyuSLv13CyFIA0SYtSdqb1JWGV1MLvvRIThM0oBqhjDmpJNpAHzUxcvoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJftWD4hKLJDG/bvoc7L8nDI3l5lMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbC0xWVBpRW9za01iOXUtaHpzdnljTWplWG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALs0054/O45C3JDdfmUd
VdqGgjdQOuwIESTVxlvivl4JrVaZ144djI35eVJNuGVmzy6su7hF75WTx5WVhWUF
x7Fjbrdgmo6Uaaa/bHc2ArnoZYsodUp1Ebrew6TUP7/cr+4jU9EJ+uztxgO9o+U0
kdab6TxaZJHjLvcRlRype3znzIFcCgvogbT5x3ZCogojdD09+X8ZcNqEALHOskn/
0/r+htODTcR7toravhLWsO5FjNOOReHNk9DujroqYxhv7JTiY3Nbm/GLSO/Y4vt9
6sthxWPR1igHIre2iCJj3zipoC0Xs7HmCM7mIlx1KerSajn2/WAxhGE1s5G63xMN
o/8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:23:43 2025 by rpki-client