Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l4IMU2oQAQMTQOPjd2tLG99eCPo.roa
File: l4IMU2oQAQMTQOPjd2tLG99eCPo.roa (raw, json)
Hash identifier: wZ9+FSp5aL3/deKC6BrOjD9JmEiKWLjj9MrOCO24WVY=
Subject key identifier: 97:82:0C:53:6A:10:01:03:13:40:E3:E3:77:6B:4B:1B:DF:5E:08:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C38D2F3D7D5765D7A86A70BFB14220260
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l4IMU2oQAQMTQOPjd2tLG99eCPo.roa
Signing time: Tue 05 Dec 2023 07:13:18 +0000
ROA not before: Tue 05 Dec 2023 07:13:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:d2:f3:d7:d5:76:5d:7a:86:a7:0b:fb:14:22:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 07:13:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97820c536a1001031340e3e3776b4b1bdf5e08fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:d9:48:59:f1:1a:a4:78:1f:d3:9d:19:01:
9c:4e:68:a7:1e:cc:4a:39:3e:ec:68:9e:96:4a:80:
58:11:87:bf:0f:4a:d2:de:58:93:1c:3c:de:0b:d0:
df:f8:64:e5:5a:4d:71:60:87:08:85:33:46:ab:03:
45:75:10:dd:40:78:4f:81:d7:43:64:05:bd:74:fe:
5c:1a:8a:10:6f:88:fb:ae:92:53:47:0d:5a:5a:66:
66:88:0d:a4:4c:91:d0:cc:27:b6:07:f2:b4:09:6a:
29:4d:fc:aa:5f:35:50:6f:33:3f:b4:21:2c:99:16:
5d:80:67:c9:28:50:ce:e6:79:eb:f3:eb:84:79:48:
7c:cb:22:d1:0a:cb:f1:db:66:77:cc:fc:e7:1b:08:
14:22:aa:53:ca:85:ff:79:73:45:62:e8:de:d0:b9:
89:23:0a:9d:4d:c5:f1:b7:1f:20:dd:75:74:ad:f8:
9d:1d:2c:29:e0:53:b0:0e:01:10:45:98:a7:31:6b:
ca:33:84:9a:2b:53:24:62:74:c9:3e:78:c2:36:7a:
34:c5:a6:fb:14:10:d5:4a:8c:44:02:86:03:f5:22:
4c:8d:e4:81:c5:f8:b7:51:14:e6:b3:ff:89:39:b7:
70:ca:7e:ad:d9:ee:88:b0:ad:68:2c:ef:4b:d9:07:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:0C:53:6A:10:01:03:13:40:E3:E3:77:6B:4B:1B:DF:5E:08:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l4IMU2oQAQMTQOPjd2tLG99eCPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:70:14:6a:34:08:ad:9e:35:c0:63:a6:2b:e9:bd:3d:07:d8:
20:5f:17:e3:bf:08:c0:e2:26:76:fb:69:2e:3b:4c:68:1b:b8:
7c:03:34:76:d3:85:34:ac:54:d8:36:3f:86:46:79:f6:31:80:
4e:f7:bd:11:19:6a:2b:45:ac:3f:6e:44:8b:7a:c1:0b:9e:5d:
31:cf:6c:5f:37:d8:e0:2b:36:85:e8:d0:49:0e:55:18:5d:a1:
82:bb:cc:b5:03:be:01:09:a9:35:91:4f:1d:3b:3c:03:fa:58:
ca:61:5b:76:b0:c7:2e:c5:b9:67:34:b0:5c:2e:d5:ed:8c:5d:
56:91:0a:78:b5:aa:52:9d:73:11:1f:94:c0:43:85:de:94:bd:
ca:64:5c:a9:3c:80:e6:80:02:1d:6c:1a:79:7f:64:23:4a:a0:
74:2c:47:c4:3b:65:1b:e2:4e:02:95:66:69:c7:0a:f9:f9:22:
90:48:fe:99:66:34:21:a1:7d:80:d3:50:94:a3:f1:c8:7e:a6:
02:37:d8:8c:5c:e9:e8:dc:fa:35:26:02:a3:5e:b4:84:a0:ee:
1e:2a:e9:be:13:d6:3a:f7:8e:87:26:67:f9:97:59:af:38:11:
a6:55:ea:23:9c:c7:a4:15:b1:38:d1:2c:51:58:7d:af:f2:89:
3a:97:30:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw40vPX1XZdeoanC/sUIgJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA1MDcxMzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzgyMGM1MzZhMTAwMTAzMTM0MGUzZTM3NzZiNGIxYmRmNWUwOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bjZSFnxGqR4H9OdGQGcTminHsxK
OT7saJ6WSoBYEYe/D0rS3liTHDzeC9Df+GTlWk1xYIcIhTNGqwNFdRDdQHhPgddD
ZAW9dP5cGooQb4j7rpJTRw1aWmZmiA2kTJHQzCe2B/K0CWopTfyqXzVQbzM/tCEs
mRZdgGfJKFDO5nnr8+uEeUh8yyLRCsvx22Z3zPznGwgUIqpTyoX/eXNFYuje0LmJ
IwqdTcXxtx8g3XV0rfidHSwp4FOwDgEQRZinMWvKM4SaK1MkYnTJPnjCNno0xab7
FBDVSoxEAoYD9SJMjeSBxfi3URTms/+JObdwyn6t2e6IsK1oLO9L2QcljQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJeCDFNqEAEDE0Dj43drSxvfXgj6MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbDRJTVUyb1FBUU1UUU9QamQydExHOTllQ1BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABlwFGo0CK2eNcBjpivp
vT0H2CBfF+O/CMDiJnb7aS47TGgbuHwDNHbThTSsVNg2P4ZGefYxgE73vREZaitF
rD9uRIt6wQueXTHPbF832OArNoXo0EkOVRhdoYK7zLUDvgEJqTWRTx07PAP6WMph
W3awxy7FuWc0sFwu1e2MXVaRCni1qlKdcxEflMBDhd6UvcpkXKk8gOaAAh1sGnl/
ZCNKoHQsR8Q7ZRviTgKVZmnHCvn5IpBI/plmNCGhfYDTUJSj8ch+pgI32Ixc6ejc
+jUmAqNetISg7h4q6b4T1jr3jocmZ/mXWa84EaZV6iOcx6QVsTjRLFFYfa/yiTqX
MJI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:37 2025 by rpki-client