Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lQ_QmgQt8FTl9iMMllZB-zLbR3A.roa
File: lQ_QmgQt8FTl9iMMllZB-zLbR3A.roa (raw, json)
Hash identifier: jqc9VtO2H3R02oxhWLDy1drkgML3hlK0tVETbB8N3p0=
Subject key identifier: 95:0F:D0:9A:04:2D:F0:54:E5:F6:23:0C:96:56:41:FB:32:DB:47:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2E887153515C80995863F4A65AE6B6F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lQ_QmgQt8FTl9iMMllZB-zLbR3A.roa
Signing time: Sat 14 Oct 2023 14:12:55 +0000
ROA not before: Sat 14 Oct 2023 14:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:88:71:53:51:5c:80:99:58:63:f4:a6:5a:e6:b6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 14:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=950fd09a042df054e5f6230c965641fb32db4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:18:55:0b:0c:48:34:05:15:2f:ed:5b:bb:
7f:99:60:a5:c8:25:97:ea:79:67:f2:7d:05:97:64:
c7:a5:52:0b:70:d7:1d:8a:6b:82:f4:fc:e9:fc:65:
b5:7a:54:2a:ae:b7:b6:18:86:6f:a9:0d:b0:cd:24:
a6:8a:b5:39:e3:af:95:4a:e2:9d:3a:9b:5e:6d:64:
7c:12:00:69:fc:eb:e5:a6:8b:a2:a3:a4:b5:79:1a:
0f:17:7e:33:99:20:8c:9c:05:04:6d:c2:28:fd:ff:
1a:9b:0c:10:e9:9e:c0:46:19:a3:a3:d6:9c:b6:56:
af:c8:66:1e:a9:5e:68:78:e3:54:1e:5f:bd:6b:77:
37:15:61:ec:09:ea:eb:3f:94:18:ec:2b:6d:82:5e:
5c:bb:42:76:d6:01:39:09:4f:cb:3b:50:88:12:dd:
02:43:fa:cd:0f:9a:30:a8:15:1e:3c:90:4d:38:c0:
a6:c0:ef:11:2e:77:83:11:24:a3:10:d7:d4:ef:8f:
b4:66:91:10:fc:c8:ac:ee:d5:3d:14:be:6e:e2:72:
b7:72:97:98:dd:14:94:a7:bf:97:d9:e6:a3:9b:f8:
7a:66:c0:64:4c:f3:c8:a8:7c:5a:3d:da:00:70:35:
a6:45:55:27:ef:87:fd:b8:7e:44:10:fc:12:a8:05:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:D0:9A:04:2D:F0:54:E5:F6:23:0C:96:56:41:FB:32:DB:47:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lQ_QmgQt8FTl9iMMllZB-zLbR3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:13:72:f9:25:b2:83:56:da:01:9a:a3:71:48:56:bf:a9:e6:
71:29:ae:40:fa:94:ce:e1:66:03:8e:e4:2f:0d:98:49:25:02:
de:63:9d:d5:5d:54:4b:83:0a:2e:d6:47:89:4b:1e:c3:14:32:
bc:18:62:8e:1d:4d:ec:08:aa:49:63:ca:8a:07:81:1c:e8:eb:
a4:d1:f8:a4:a3:04:98:f8:0d:8f:61:64:d8:bc:ed:70:4c:69:
43:c4:2d:d8:28:8e:08:2e:1c:ad:6a:9b:6e:77:85:5a:b8:cb:
ed:3a:91:8a:b1:ba:17:d2:71:14:e7:39:5b:52:2a:4a:0f:44:
5b:31:8e:82:7a:f7:5f:00:85:83:69:72:7a:1a:9e:7a:28:de:
6d:df:0d:45:07:2f:c6:07:4a:7b:91:cb:00:09:e5:bf:c1:a0:
fd:f4:d7:11:9a:e8:11:64:cf:be:58:b8:67:2f:3c:0c:13:a2:
68:ad:0b:1f:6e:d7:91:24:09:ba:b7:b1:48:e5:da:5d:a3:a5:
35:31:eb:1e:2d:29:71:5d:ac:f0:d6:c6:35:74:51:74:1b:22:
15:74:e6:db:8e:de:2e:ca:7a:07:c7:48:31:07:f9:89:88:2f:
00:45:b3:a0:9a:ab:95:a2:f1:a4:8d:7d:09:46:f3:3f:2c:92:
9e:1e:5e:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsuiHFTUVyAmVhj9KZa5rb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTQxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTBmZDA5YTA0MmRmMDU0ZTVmNjIzMGM5NjU2NDFmYjMyZGI0NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25EYVQsMSDQFFS/tW7t/mWClyCWX
6nln8n0Fl2THpVILcNcdimuC9Pzp/GW1elQqrre2GIZvqQ2wzSSmirU546+VSuKd
OptebWR8EgBp/Ovlpouio6S1eRoPF34zmSCMnAUEbcIo/f8amwwQ6Z7ARhmjo9ac
tlavyGYeqV5oeONUHl+9a3c3FWHsCerrP5QY7Cttgl5cu0J21gE5CU/LO1CIEt0C
Q/rND5owqBUePJBNOMCmwO8RLneDESSjENfU74+0ZpEQ/Mis7tU9FL5u4nK3cpeY
3RSUp7+X2eajm/h6ZsBkTPPIqHxaPdoAcDWmRVUn74f9uH5EEPwSqAWjLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJUP0JoELfBU5fYjDJZWQfsy20dwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbFFfUW1nUXQ4RlRsOWlNTWxsWkItekxiUjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGkTcvklsoNW2gGao3FI
Vr+p5nEprkD6lM7hZgOO5C8NmEklAt5jndVdVEuDCi7WR4lLHsMUMrwYYo4dTewI
qkljyooHgRzo66TR+KSjBJj4DY9hZNi87XBMaUPELdgojgguHK1qm253hVq4y+06
kYqxuhfScRTnOVtSKkoPRFsxjoJ6918AhYNpcnoannoo3m3fDUUHL8YHSnuRywAJ
5b/BoP301xGa6BFkz75YuGcvPAwTomitCx9u15EkCbq3sUjl2l2jpTUx6x4tKXFd
rPDWxjV0UXQbIhV05tuO3i7KegfHSDEH+YmILwBFs6Caq5Wi8aSNfQlG8z8skp4e
Xm0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:50:41 2025 by rpki-client