Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2FQ87q-NoAkzbXP2k4MC3EZBFY.roa
File: m2FQ87q-NoAkzbXP2k4MC3EZBFY.roa (raw, json)
Hash identifier: mRxbV4rp9gUJC751A2jUR0sYX8C/4bBd0K0TdTWrfXQ=
Subject key identifier: 9B:61:50:F3:BA:BE:36:80:24:CD:B5:CF:DA:4E:0C:0B:71:19:04:56
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABF9880C251A45EA512D904920BD33BF1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2FQ87q-NoAkzbXP2k4MC3EZBFY.roa
Signing time: Sat 23 Sep 2023 01:12:37 +0000
ROA not before: Sat 23 Sep 2023 01:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bf:98:80:c2:51:a4:5e:a5:12:d9:04:92:0b:d3:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 01:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b6150f3babe368024cdb5cfda4e0c0b71190456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:5f:8b:95:6d:c4:39:60:6a:04:d0:e6:cc:
44:c9:d4:91:fa:8a:23:94:b5:22:1d:92:59:20:15:
68:99:1e:d5:28:d0:e9:91:24:11:ce:90:5b:ab:35:
02:8b:18:c5:5d:e3:46:54:0d:69:e4:64:d4:bb:dc:
fe:cd:76:f7:b0:a3:53:70:01:16:84:77:b6:88:dc:
c9:27:79:79:fe:09:20:d8:64:70:cc:06:85:f1:4f:
54:cd:b8:ba:a5:02:46:05:6f:b1:79:48:c7:5e:2b:
ec:65:e7:ee:34:7e:97:94:8c:d8:fa:28:b6:e5:78:
da:e3:8b:cf:67:77:14:f7:33:e6:0b:bf:da:c9:10:
58:8f:cc:7b:4f:72:4a:26:c8:d7:4d:7a:d2:d7:e6:
70:9c:0c:ba:59:f4:8b:c8:3e:5e:55:d5:d6:d4:07:
20:54:45:1f:34:03:99:70:b6:a6:a6:98:56:0b:be:
10:59:ed:59:89:2f:66:0f:1b:4e:7c:8e:54:ba:ea:
02:d3:01:0e:ed:f1:c5:b9:23:f4:a9:fd:67:7f:f2:
10:ad:d5:b3:e8:68:35:ab:63:f8:a4:ae:7e:85:92:
d5:e9:71:18:86:a8:89:28:34:97:70:5c:67:43:d6:
b1:be:8d:f6:4b:ea:03:e6:a3:7d:51:6c:26:cb:6c:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:50:F3:BA:BE:36:80:24:CD:B5:CF:DA:4E:0C:0B:71:19:04:56
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2FQ87q-NoAkzbXP2k4MC3EZBFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:aa:ae:ab:e4:88:6b:52:51:14:c7:fd:bd:33:fe:f5:e2:57:
d4:e9:b5:f3:3b:f9:f0:c2:36:45:7d:61:e1:e6:90:54:8c:4b:
26:8f:e6:1b:7f:6d:42:7c:11:b8:bb:48:31:8f:ab:a1:c3:e0:
43:ce:40:30:b5:f2:c4:66:22:ba:d9:cf:18:a2:08:60:ab:3e:
f5:49:6e:4f:8e:ca:ab:c5:12:75:be:6e:30:31:ee:86:b3:bc:
04:6e:da:07:b2:29:37:75:d9:e4:a0:82:c1:36:e6:4b:38:b1:
0b:9d:ba:13:2d:94:f6:cf:a1:3d:31:b8:46:86:e8:cf:73:84:
da:3b:60:77:22:07:92:86:96:0f:38:b5:fd:1b:0c:ff:00:ef:
f2:54:98:df:04:1d:1c:a5:fd:40:8e:d0:d6:80:e6:37:5c:b7:
b6:4c:a5:85:fb:ea:c3:2a:6e:d8:2f:fb:c9:2a:04:61:78:81:
dc:8e:ae:87:af:8c:ad:52:e6:3c:e9:ef:5d:b2:64:63:f9:e5:
28:d4:12:99:7b:1c:96:3c:51:e0:c9:09:d1:ba:17:05:d4:c8:
6a:32:11:ec:18:73:dc:68:b5:a9:50:a4:da:e7:e1:a8:b3:60:
81:0f:b7:f5:56:4a:b2:af:b9:a7:e7:55:25:68:46:2f:fb:17:
e7:74:9c:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq/mIDCUaRepRLZBJIL0zvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIzMDExMjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjYxNTBmM2JhYmUzNjgwMjRjZGI1Y2ZkYTRlMGMwYjcxMTkwNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3dfi5VtxDlgagTQ5sxEydSR+ooj
lLUiHZJZIBVomR7VKNDpkSQRzpBbqzUCixjFXeNGVA1p5GTUu9z+zXb3sKNTcAEW
hHe2iNzJJ3l5/gkg2GRwzAaF8U9Uzbi6pQJGBW+xeUjHXivsZefuNH6XlIzY+ii2
5Xja44vPZ3cU9zPmC7/ayRBYj8x7T3JKJsjXTXrS1+ZwnAy6WfSLyD5eVdXW1Acg
VEUfNAOZcLampphWC74QWe1ZiS9mDxtOfI5UuuoC0wEO7fHFuSP0qf1nf/IQrdWz
6Gg1q2P4pK5+hZLV6XEYhqiJKDSXcFxnQ9axvo32S+oD5qN9UWwmy2xBMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJthUPO6vjaAJM21z9pODAtxGQRWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbTJGUTg3cS1Ob0FremJYUDJrNE1DM0VaQkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB6qrqvkiGtSURTH/b0z
/vXiV9TptfM7+fDCNkV9YeHmkFSMSyaP5ht/bUJ8Ebi7SDGPq6HD4EPOQDC18sRm
IrrZzxiiCGCrPvVJbk+OyqvFEnW+bjAx7oazvARu2geyKTd12eSggsE25ks4sQud
uhMtlPbPoT0xuEaG6M9zhNo7YHciB5KGlg84tf0bDP8A7/JUmN8EHRyl/UCO0NaA
5jdct7ZMpYX76sMqbtgv+8kqBGF4gdyOroevjK1S5jzp712yZGP55SjUEpl7HJY8
UeDJCdG6FwXUyGoyEewYc9xotalQpNrn4aizYIEPt/VWSrKvuafnVSVoRi/7F+d0
nOU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:48 2025 by rpki-client