Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mSQJBlqvVuew9ObyWoypyiy5mjY.roa
File: mSQJBlqvVuew9ObyWoypyiy5mjY.roa (raw, json)
Hash identifier: 8hj8W36NkcJ8gQI2Qn5DUuNKs0Kt6xDLvCFHWthlxEk=
Subject key identifier: 99:24:09:06:5A:AF:56:E7:B0:F4:E6:F2:5A:8C:A9:CA:2C:B9:9A:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C35934D38ABE9CA21BF52656BC261CE96
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mSQJBlqvVuew9ObyWoypyiy5mjY.roa
Signing time: Mon 04 Dec 2023 16:04:55 +0000
ROA not before: Mon 04 Dec 2023 16:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:3592:d736/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:93:4d:38:ab:e9:ca:21:bf:52:65:6b:c2:61:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 16:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=992409065aaf56e7b0f4e6f25a8ca9ca2cb99a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:66:f3:46:a4:44:94:85:90:82:da:db:62:
94:ae:f1:68:5d:4d:86:73:44:f5:fe:63:1e:ac:f6:
a3:16:3a:64:6e:57:ef:d6:e5:46:e9:45:3b:8c:66:
f4:d4:c1:fa:20:fb:9d:fc:89:4a:91:f4:2b:cd:ee:
d9:a6:53:99:26:3d:75:a2:27:e5:ee:ad:7b:f2:1d:
45:3b:e5:b5:94:a7:71:29:70:10:d8:f2:49:c0:97:
7a:83:5b:ec:31:95:e9:8e:fd:be:76:f7:3d:6a:0d:
24:48:80:27:1b:40:f8:a0:0f:b8:7f:c7:bf:c8:c7:
37:3e:0e:88:67:a5:b0:d8:4d:79:7d:b9:dd:cb:ed:
df:89:b2:6f:e2:3f:18:8d:3b:66:8c:e2:32:08:6d:
12:ab:bf:11:2f:df:0f:6d:bc:16:88:37:1b:81:af:
31:74:ff:2b:38:8a:02:0a:ad:15:2f:7e:00:d7:c7:
7f:85:e3:c1:01:a3:4d:50:ab:b4:9c:4f:cf:6d:a7:
fa:de:e7:21:39:e4:fa:f1:38:ec:ed:9f:ff:48:3a:
07:d5:dd:d5:03:44:29:bc:25:42:fd:4f:a5:f7:11:
c0:1f:d3:fc:38:1b:f9:6e:db:8d:0e:70:c7:4d:48:
b8:9d:d5:a6:8b:ee:a4:ba:17:37:a3:80:4b:b5:99:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:24:09:06:5A:AF:56:E7:B0:F4:E6:F2:5A:8C:A9:CA:2C:B9:9A:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mSQJBlqvVuew9ObyWoypyiy5mjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:b9:fc:df:f5:f4:bd:76:ac:aa:29:d6:a9:70:76:aa:db:3a:
61:2b:d1:fa:bc:26:0f:b7:29:c0:cb:f3:56:28:7e:00:ce:a4:
2f:bd:8f:83:1b:39:fd:1a:76:23:34:92:22:07:d1:15:59:1b:
7c:79:90:57:4d:18:5f:12:e5:a0:60:b1:6f:e1:4d:8f:80:d5:
9d:c8:ef:e6:48:4c:a8:f0:3c:5c:14:e5:f0:fc:c5:72:e7:30:
88:70:ad:09:de:c6:d8:40:4c:5e:c9:31:e9:56:ee:22:de:c5:
73:65:4f:30:7b:93:ce:35:9b:1f:54:1f:cf:9d:57:9c:cc:a5:
ad:bf:36:15:14:f5:c7:74:d8:19:7e:6c:7a:39:79:e9:01:a7:
84:ee:e1:d7:a0:4f:b4:06:62:48:1f:79:2f:e3:9f:48:9b:d2:
56:70:0a:77:44:19:0d:a6:ad:fa:89:5d:b1:73:a0:32:e1:5e:
0a:50:d8:3a:b1:a6:f0:e9:30:93:98:c5:2e:6e:c2:e0:e8:82:
60:4a:5c:88:58:d5:8d:e1:2c:be:48:98:bd:16:25:ec:0c:89:
b0:71:e7:1f:03:6f:1e:7f:69:49:c0:ce:5a:c4:4e:ed:9b:63:
4b:8e:d0:1b:4f:e7:5a:34:29:d3:b0:e9:c8:0e:01:82:9b:73:
00:f0:05:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw1k004q+nKIb9SZWvCYc6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA0MTYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTI0MDkwNjVhYWY1NmU3YjBmNGU2ZjI1YThjYTljYTJjYjk5YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3hm80akRJSFkILa22KUrvFoXU2G
c0T1/mMerPajFjpkblfv1uVG6UU7jGb01MH6IPud/IlKkfQrze7ZplOZJj11oifl
7q178h1FO+W1lKdxKXAQ2PJJwJd6g1vsMZXpjv2+dvc9ag0kSIAnG0D4oA+4f8e/
yMc3Pg6IZ6Ww2E15fbndy+3fibJv4j8YjTtmjOIyCG0Sq78RL98PbbwWiDcbga8x
dP8rOIoCCq0VL34A18d/hePBAaNNUKu0nE/Pbaf63uchOeT68Tjs7Z//SDoH1d3V
A0QpvCVC/U+l9xHAH9P8OBv5btuNDnDHTUi4ndWmi+6kuhc3o4BLtZl1uwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJkkCQZar1bnsPTm8lqMqcosuZo2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbVNRSkJscXZWdWV3OU9ieVdveXB5aXk1bWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABC5/N/19L12rKop1qlw
dqrbOmEr0fq8Jg+3KcDL81YofgDOpC+9j4MbOf0adiM0kiIH0RVZG3x5kFdNGF8S
5aBgsW/hTY+A1Z3I7+ZITKjwPFwU5fD8xXLnMIhwrQnexthATF7JMelW7iLexXNl
TzB7k841mx9UH8+dV5zMpa2/NhUU9cd02Bl+bHo5eekBp4Tu4degT7QGYkgfeS/j
n0ib0lZwCndEGQ2mrfqJXbFzoDLhXgpQ2DqxpvDpMJOYxS5uwuDogmBKXIhY1Y3h
LL5ImL0WJewMibBx5x8Dbx5/aUnAzlrETu2bY0uO0BtP51o0KdOw6cgOAYKbcwDw
BZE=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:29 2025 by rpki-client