Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lyQOXSr-M_0vqkjtlqqxVtMmIJc.roa
File: lyQOXSr-M_0vqkjtlqqxVtMmIJc.roa (raw, json)
Hash identifier: ksfqp1oooTEIuF10sdyu9zLdr73cVltZT2KIDY8KbWQ=
Subject key identifier: 97:24:0E:5D:2A:FE:33:FD:2F:AA:48:ED:96:AA:B1:56:D3:26:20:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE4133A1769B76A6BF59FEC08106B655E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lyQOXSr-M_0vqkjtlqqxVtMmIJc.roa
Signing time: Sat 30 Sep 2023 03:12:59 +0000
ROA not before: Sat 30 Sep 2023 03:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e4:13:3a:17:69:b7:6a:6b:f5:9f:ec:08:10:6b:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 03:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97240e5d2afe33fd2faa48ed96aab156d3262097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:d8:dc:ca:01:a4:e7:8c:90:c6:14:17:95:
16:3a:9a:e4:f3:b4:11:cc:90:ad:73:fc:4d:4d:b5:
20:43:7f:e4:67:88:ad:30:84:74:a4:38:54:28:99:
36:09:5c:81:24:14:8a:c9:db:56:85:d1:0a:f4:19:
b4:11:f4:a1:7f:02:d8:f8:ed:35:e8:a1:87:39:d3:
f1:dc:c5:3a:b2:dc:c7:11:20:de:0e:e4:82:e1:49:
36:1c:92:be:a4:28:6b:43:6f:5d:7a:dc:09:89:3c:
85:1c:d2:d8:47:03:cf:c7:48:81:ed:d7:a2:b6:8c:
1f:ab:39:b2:4f:db:57:fb:c2:ff:67:5a:1a:87:e5:
21:44:19:58:b0:14:24:07:f2:b3:18:5c:54:7d:af:
03:38:9c:78:a5:5d:99:0b:47:a2:b5:5c:9a:90:5f:
40:da:6d:1b:30:29:74:a5:fd:a8:5f:f6:c4:19:af:
7d:41:b0:a9:79:d3:26:99:a6:ba:0e:2c:01:33:4a:
36:2a:74:c5:ee:ca:fe:11:28:dc:56:53:37:21:d2:
13:e0:1d:02:e5:a3:c2:10:57:d2:f5:d7:9c:53:e3:
5c:4d:4a:e2:ba:bd:6e:e2:d9:10:72:b8:99:23:25:
30:8b:8d:b1:fc:72:e6:f7:87:95:d8:c9:4b:08:8c:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:0E:5D:2A:FE:33:FD:2F:AA:48:ED:96:AA:B1:56:D3:26:20:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lyQOXSr-M_0vqkjtlqqxVtMmIJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ad:a7:9c:77:09:48:30:a5:2e:87:a5:b6:9c:4e:53:9e:e4:
d8:08:67:4d:6f:65:47:43:10:a3:69:39:58:1b:af:ca:2e:f9:
ac:8c:b3:a3:72:62:3f:02:b1:c7:1d:b9:9f:7d:c8:01:10:63:
1e:a8:af:8c:c3:8b:22:65:97:46:e4:06:1b:b3:30:49:35:e0:
c7:59:72:8f:99:01:9b:6d:5f:14:d1:3d:d2:c1:af:d9:44:ef:
1f:9e:f0:11:55:6e:46:f9:95:6c:72:65:ce:81:40:62:46:cc:
57:a1:ff:bd:27:b4:1f:4d:af:28:c4:d5:bb:9a:7a:45:16:e3:
7c:0f:2d:e8:f6:82:01:6c:db:d3:3f:a3:3c:39:69:87:5a:69:
63:d1:5d:1c:cb:98:7f:71:d4:d4:dd:80:c4:bd:2b:06:d8:41:
5c:e9:78:ec:38:ae:70:a0:31:e0:dc:9e:1f:cf:97:97:76:b9:
ac:c5:fa:bf:21:af:d0:b8:35:b2:ec:be:32:fc:09:eb:24:64:
3a:b1:d3:7b:e9:c8:a5:7f:c3:c4:f4:b2:81:f7:a0:30:a4:3a:
42:ab:32:e5:2b:27:af:42:1a:4f:b4:ce:9d:22:94:20:e6:b2:
22:0c:99:84:7d:dd:9e:fe:b6:38:c8:ca:5b:46:42:11:4b:04:
c3:4b:a6:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrkEzoXabdqa/Wf7AgQa2VeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTMwMDMxMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzI0MGU1ZDJhZmUzM2ZkMmZhYTQ4ZWQ5NmFhYjE1NmQzMjYyMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitXY3MoBpOeMkMYUF5UWOprk87QR
zJCtc/xNTbUgQ3/kZ4itMIR0pDhUKJk2CVyBJBSKydtWhdEK9Bm0EfShfwLY+O01
6KGHOdPx3MU6stzHESDeDuSC4Uk2HJK+pChrQ29detwJiTyFHNLYRwPPx0iB7dei
towfqzmyT9tX+8L/Z1oah+UhRBlYsBQkB/KzGFxUfa8DOJx4pV2ZC0eitVyakF9A
2m0bMCl0pf2oX/bEGa99QbCpedMmmaa6DiwBM0o2KnTF7sr+ESjcVlM3IdIT4B0C
5aPCEFfS9decU+NcTUriur1u4tkQcriZIyUwi42x/HLm94eV2MlLCIxlfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJckDl0q/jP9L6pI7ZaqsVbTJiCXMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbHlRT1hTci1NXzB2cWtqdGxxcXhWdE1tSUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACGtp5x3CUgwpS6Hpbac
TlOe5NgIZ01vZUdDEKNpOVgbr8ou+ayMs6NyYj8CsccduZ99yAEQYx6or4zDiyJl
l0bkBhuzMEk14MdZco+ZAZttXxTRPdLBr9lE7x+e8BFVbkb5lWxyZc6BQGJGzFeh
/70ntB9NryjE1buaekUW43wPLej2ggFs29M/ozw5aYdaaWPRXRzLmH9x1NTdgMS9
KwbYQVzpeOw4rnCgMeDcnh/Pl5d2uazF+r8hr9C4NbLsvjL8CeskZDqx03vpyKV/
w8T0soH3oDCkOkKrMuUrJ69CGk+0zp0ilCDmsiIMmYR93Z7+tjjIyltGQhFLBMNL
pnQ=
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:49:53 2025 by rpki-client