Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mjKcUBBr7HqfuT6Wlblq__ktVZA.roa
File: mjKcUBBr7HqfuT6Wlblq__ktVZA.roa (raw, json)
Hash identifier: yMGxmBQ6jLgyHMVPF+7ZBD9iPeDn/heURuwS97glFtQ=
Subject key identifier: 9A:32:9C:50:10:6B:EC:7A:9F:B9:3E:96:95:B9:6A:FF:F9:2D:55:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB1DAA238CC323DD133127B8475FB8AD9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mjKcUBBr7HqfuT6Wlblq__ktVZA.roa
Signing time: Thu 09 Nov 2023 02:12:57 +0000
ROA not before: Thu 09 Nov 2023 02:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:da:a2:38:cc:32:3d:d1:33:12:7b:84:75:fb:8a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 02:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a329c50106bec7a9fb93e9695b96afff92d5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:e5:d0:80:7e:b2:84:73:76:61:79:ba:fd:
42:09:c3:f8:54:00:fa:86:8e:a9:88:b1:38:bd:b7:
58:6f:f6:7e:a4:c5:32:3f:6e:73:5e:b3:b7:36:55:
f0:e8:2b:04:85:3f:10:4d:8b:49:0d:40:1f:a9:69:
ae:85:ef:f0:c4:25:f4:76:06:a6:db:13:a7:fb:d8:
cb:77:95:f1:59:dd:c6:7b:76:4c:33:78:5e:03:d3:
c6:62:cf:c3:5d:f7:4b:92:e5:18:1f:da:26:0d:63:
13:92:9e:7f:02:6a:1e:72:e1:23:b6:16:8f:ce:4d:
17:56:73:68:73:3b:8b:59:f9:67:31:06:33:fd:02:
0d:de:ce:be:2f:ad:eb:45:2d:2e:6d:23:18:e1:ab:
2b:4b:20:b2:f9:8b:b2:6d:7d:cb:62:2c:6b:fb:91:
d2:c6:1e:aa:6c:97:d3:a6:14:61:e0:d2:d3:7b:38:
d0:c3:5a:a2:8a:f6:7e:6e:6c:ef:eb:4a:81:5d:40:
b5:bd:72:51:6c:7f:cf:2e:81:e9:17:0b:6a:10:dc:
42:18:73:d1:b7:b7:f7:e8:c9:88:8e:38:8b:fc:8b:
c6:44:72:d5:88:94:9f:7b:15:9b:61:c8:34:93:93:
8f:c6:92:27:6f:0f:07:fa:d1:f7:f0:d3:f8:36:38:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:9C:50:10:6B:EC:7A:9F:B9:3E:96:95:B9:6A:FF:F9:2D:55:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mjKcUBBr7HqfuT6Wlblq__ktVZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:c2:28:ec:e9:49:30:63:69:32:fb:5b:34:72:16:1a:3e:58:
c2:b6:4b:4d:f2:a5:a1:73:c8:ab:eb:af:08:5b:ca:7e:c0:de:
dc:54:f4:65:e3:2b:53:4a:aa:da:16:2b:6e:04:fc:c7:91:7b:
d5:db:f9:6f:39:ec:58:a7:94:eb:2b:4a:7c:4c:a2:f7:75:2c:
ea:74:02:1b:86:e2:45:da:73:64:44:28:d1:10:1d:2e:d0:0d:
ba:74:1e:24:fd:26:3e:ad:50:21:d5:f2:85:8a:45:fb:7f:95:
2c:c2:cc:90:d3:42:64:cb:86:f2:8a:92:17:5f:90:7d:37:26:
16:1f:d5:10:40:73:94:ea:0d:d8:02:f7:62:26:2e:c3:ee:0f:
d4:53:49:ba:a9:e4:bb:48:05:88:ad:b3:42:87:05:2d:bc:b1:
e6:45:a5:60:39:a5:c0:05:c0:78:5e:39:61:9f:09:12:84:ff:
4a:8d:e2:d0:26:4d:70:98:04:eb:aa:d7:b2:c1:da:1d:7f:d5:
a3:21:b6:89:4d:ca:59:91:7e:bf:18:9b:ad:f8:10:b6:cd:88:
cf:ab:0c:48:b1:00:d3:c0:ba:4d:d7:82:75:03:d7:63:dc:04:
09:94:e9:6a:07:cd:eb:f2:7d:96:03:39:36:a1:35:a3:7b:2b:
09:4a:f3:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYux2qI4zDI90TMSe4R1+4rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA5MDIxMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTMyOWM1MDEwNmJlYzdhOWZiOTNlOTY5NWI5NmFmZmY5MmQ1NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDHl0IB+soRzdmF5uv1CCcP4VAD6
ho6piLE4vbdYb/Z+pMUyP25zXrO3NlXw6CsEhT8QTYtJDUAfqWmuhe/wxCX0dgam
2xOn+9jLd5XxWd3Ge3ZMM3heA9PGYs/DXfdLkuUYH9omDWMTkp5/AmoecuEjthaP
zk0XVnNoczuLWflnMQYz/QIN3s6+L63rRS0ubSMY4asrSyCy+YuybX3LYixr+5HS
xh6qbJfTphRh4NLTezjQw1qiivZ+bmzv60qBXUC1vXJRbH/PLoHpFwtqENxCGHPR
t7f36MmIjjiL/IvGRHLViJSfexWbYcg0k5OPxpInbw8H+tH38NP4Njg3GQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJoynFAQa+x6n7k+lpW5av/5LVWQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbWpLY1VCQnI3SHFmdVQ2V2xibHFfX2t0VlpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACLCKOzpSTBjaTL7WzRy
Fho+WMK2S03ypaFzyKvrrwhbyn7A3txU9GXjK1NKqtoWK24E/MeRe9Xb+W857Fin
lOsrSnxMovd1LOp0AhuG4kXac2REKNEQHS7QDbp0HiT9Jj6tUCHV8oWKRft/lSzC
zJDTQmTLhvKKkhdfkH03JhYf1RBAc5TqDdgC92ImLsPuD9RTSbqp5LtIBYits0KH
BS28seZFpWA5pcAFwHheOWGfCRKE/0qN4tAmTXCYBOuq17LB2h1/1aMhtolNylmR
fr8Ym634ELbNiM+rDEixANPAuk3XgnUD12PcBAmU6WoHzevyfZYDOTahNaN7KwlK
82A=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:44 2025 by rpki-client