Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lauWWYsQs-Q7uJ1T_aNjd3W5Kls.roa
File: lauWWYsQs-Q7uJ1T_aNjd3W5Kls.roa (raw, json)
Hash identifier: Z7ygI1Rh5+PlhlTrrEb7dD166JvBG1tnSBnuvkPABEw=
Subject key identifier: 95:AB:96:59:8B:10:B3:E4:3B:B8:9D:53:FD:A3:63:77:75:B9:2A:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBE12FEAB9422C34CE2A34A9C5A3FD341
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lauWWYsQs-Q7uJ1T_aNjd3W5Kls.roa
Signing time: Sat 11 Nov 2023 11:09:57 +0000
ROA not before: Sat 11 Nov 2023 11:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:12:fe:ab:94:22:c3:4c:e2:a3:4a:9c:5a:3f:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 11:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ab96598b10b3e43bb89d53fda3637775b92a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:de:79:9c:59:2f:85:39:e4:79:fe:2a:d7:
46:2a:82:d9:c6:7c:e6:52:bc:34:b1:bc:ac:32:a0:
f9:f1:7e:6d:06:37:e0:66:3e:20:90:0e:f0:37:36:
56:d8:99:68:50:a2:c0:df:4e:23:e9:0b:4e:b4:62:
41:3a:28:ea:66:91:da:00:1c:d4:75:54:cb:42:31:
b1:ba:d9:a4:50:73:36:37:f2:6a:95:c9:7b:5c:be:
5e:ab:99:2d:7b:c5:1c:17:85:06:7d:30:ef:97:78:
c0:f8:3e:58:75:ff:f7:62:44:de:4f:f7:dd:22:1c:
5c:68:a2:03:d9:d5:06:d1:82:21:ad:d8:4f:18:2a:
be:c6:4e:02:de:cf:e9:d1:d8:27:12:8f:0b:84:37:
d8:bb:6c:28:43:b2:69:49:d5:d1:5d:b8:64:14:be:
e5:42:53:45:c8:0b:c0:06:04:0f:44:c4:ab:a7:0b:
0b:96:47:0f:bd:82:3e:a0:1b:84:31:96:85:71:ff:
dc:84:8b:3d:09:5a:62:b2:df:03:68:e7:b9:85:28:
75:58:81:40:dd:72:d4:3e:0e:3d:ed:ee:46:23:25:
6f:fe:48:f1:cc:06:8a:7e:20:a5:9d:c4:e8:98:10:
aa:17:1f:2e:ee:64:bc:a2:9d:10:13:51:c2:3a:8a:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:96:59:8B:10:B3:E4:3B:B8:9D:53:FD:A3:63:77:75:B9:2A:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lauWWYsQs-Q7uJ1T_aNjd3W5Kls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:bd:4b:44:7d:2f:20:d4:c2:25:cc:64:bf:a0:cb:7f:60:5e:
47:57:ff:ea:d2:9e:65:2a:f6:8a:be:71:1f:58:ed:55:e3:ab:
4f:f4:c0:81:e3:8d:12:74:f2:41:21:6a:0c:59:6b:4b:5c:f6:
79:35:01:00:2e:96:8e:07:ab:f4:5a:b5:c9:2b:15:89:17:e1:
f5:6b:55:2b:37:66:fb:52:c8:2d:61:3f:5a:2c:33:77:f8:53:
3a:49:0d:9d:68:8e:3e:01:bb:d0:9f:ea:0c:ed:da:92:77:b6:
77:25:f5:d2:8e:e4:d6:69:78:1b:02:65:2a:d6:90:7e:e0:41:
04:e5:3a:fe:05:db:0c:2b:db:f5:2a:4a:11:cf:36:d0:ce:e7:
7e:bd:6a:52:ad:43:f5:17:7e:69:99:17:34:e0:92:1d:cd:81:
33:52:54:7c:59:30:af:35:fa:d7:7b:82:82:48:87:bb:53:93:
b2:87:e3:50:6c:fd:2b:11:66:3a:b6:7e:32:76:b1:5e:ee:c0:
6b:12:61:85:bf:a6:4e:09:a3:38:9a:8e:49:7b:70:6b:b6:0b:
16:c3:49:a9:02:31:b1:bc:d4:5c:af:fc:bb:b2:8e:88:68:2a:
57:80:d0:90:b6:bd:c3:c7:9b:20:84:8a:f5:cb:f0:ee:0e:d4:
c3:ab:00:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu+Ev6rlCLDTOKjSpxaP9NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTExMTEwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWFiOTY1OThiMTBiM2U0M2JiODlkNTNmZGEzNjM3Nzc1YjkyYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA/eeZxZL4U55Hn+KtdGKoLZxnzm
Urw0sbysMqD58X5tBjfgZj4gkA7wNzZW2JloUKLA304j6QtOtGJBOijqZpHaABzU
dVTLQjGxutmkUHM2N/Jqlcl7XL5eq5kte8UcF4UGfTDvl3jA+D5Ydf/3YkTeT/fd
IhxcaKID2dUG0YIhrdhPGCq+xk4C3s/p0dgnEo8LhDfYu2woQ7JpSdXRXbhkFL7l
QlNFyAvABgQPRMSrpwsLlkcPvYI+oBuEMZaFcf/chIs9CVpist8DaOe5hSh1WIFA
3XLUPg497e5GIyVv/kjxzAaKfiClncTomBCqFx8u7mS8op0QE1HCOoqNDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWrllmLELPkO7idU/2jY3d1uSpbMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbGF1V1dZc1FzLVE3dUoxVF9hTmpkM1c1S2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHu9S0R9LyDUwiXMZL+g
y39gXkdX/+rSnmUq9oq+cR9Y7VXjq0/0wIHjjRJ08kEhagxZa0tc9nk1AQAulo4H
q/RatckrFYkX4fVrVSs3ZvtSyC1hP1osM3f4UzpJDZ1ojj4Bu9Cf6gzt2pJ3tncl
9dKO5NZpeBsCZSrWkH7gQQTlOv4F2wwr2/UqShHPNtDO5369alKtQ/UXfmmZFzTg
kh3NgTNSVHxZMK81+td7goJIh7tTk7KH41Bs/SsRZjq2fjJ2sV7uwGsSYYW/pk4J
oziajkl7cGu2CxbDSakCMbG81Fyv/LuyjohoKleA0JC2vcPHmyCEivXL8O4O1MOr
AGw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:30:19 2025 by rpki-client