Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o88uKiDPejMtnHGzsgEB_CYU8Eg.roa
File: o88uKiDPejMtnHGzsgEB_CYU8Eg.roa (raw, json)
Hash identifier: lue0yR7AQc0A2aPwmpgHEglC1bOPVKnBDpEYIyLoFRI=
Subject key identifier: A3:CF:2E:2A:20:CF:7A:33:2D:9C:71:B3:B2:01:01:FC:26:14:F0:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B69FD6465F8D3BAD7D990A7A38B437E4F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o88uKiDPejMtnHGzsgEB_CYU8Eg.roa
Signing time: Thu 26 Oct 2023 03:18:15 +0000
ROA not before: Thu 26 Oct 2023 03:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:fd:64:65:f8:d3:ba:d7:d9:90:a7:a3:8b:43:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 03:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3cf2e2a20cf7a332d9c71b3b20101fc2614f048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:55:6d:aa:62:aa:73:30:06:15:df:e7:ec:
a2:4e:8f:c1:a1:47:4a:54:af:2a:9a:8b:37:52:ba:
cd:c8:c0:7e:c4:5a:5c:53:71:4a:52:3c:1f:de:70:
d3:29:4f:74:e2:ec:a1:49:fb:ba:62:52:46:29:29:
da:30:fd:8f:fa:9f:88:7e:a7:b8:ed:ce:db:97:e5:
0f:85:98:8e:ec:7c:0c:4d:18:4f:37:46:f1:f7:9d:
49:0d:c7:53:3e:01:71:63:65:1a:16:b2:1e:7a:ef:
d8:27:68:07:a3:39:af:6f:cb:d7:63:71:53:a8:5c:
fa:e5:d4:c1:eb:21:62:31:58:ca:5c:ab:7c:dc:bd:
70:bf:32:6b:6c:fd:f6:2e:7b:1d:c2:7a:51:c2:82:
bf:7a:aa:da:b8:3e:09:11:d0:30:92:a2:b4:66:4d:
2c:99:d3:6c:96:f3:30:1e:53:7b:f6:d4:0d:2e:73:
8a:ab:67:97:c0:f7:3d:ba:5c:86:97:b1:e0:69:9c:
2c:26:c9:d0:04:fa:60:e7:7f:30:04:2e:f4:e8:c9:
c3:d7:5a:da:e1:57:b5:c0:41:d5:2c:f1:4a:87:12:
59:4b:5d:8e:85:14:97:ec:28:f8:1e:b7:15:07:1a:
89:76:4a:ad:32:a2:41:97:63:2d:94:f8:fb:13:23:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CF:2E:2A:20:CF:7A:33:2D:9C:71:B3:B2:01:01:FC:26:14:F0:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o88uKiDPejMtnHGzsgEB_CYU8Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b3:72:d9:11:cf:78:25:6d:bc:a1:ae:c7:59:65:f3:1f:a1:
df:48:44:70:fd:26:1b:aa:7d:cb:37:53:43:f6:fb:28:7e:0f:
86:00:ee:b8:af:7f:54:50:fc:9f:ba:9e:d7:3c:95:81:16:46:
bd:05:69:e7:a9:ef:f1:af:5e:f4:57:44:0f:33:56:41:0a:0e:
80:cb:19:08:d0:15:b8:1c:0c:11:62:4b:6c:da:17:5b:99:8d:
a1:7f:7a:76:1d:09:43:2d:10:e9:9e:66:b9:b5:61:4e:31:2c:
dd:be:36:b9:63:ad:09:81:aa:e5:b1:48:3d:e7:58:00:aa:36:
94:d8:3c:66:af:be:93:f1:78:cf:a3:69:c6:dd:4b:cb:2f:8f:
33:ca:ff:12:3f:c4:b0:e3:14:1d:21:f8:2a:65:95:57:c7:4c:
8a:97:de:ca:ef:64:fd:85:35:98:43:a9:b3:1a:7f:ae:97:0f:
50:0c:d0:8f:15:ce:2c:c0:22:4d:05:ef:e4:f6:53:19:7e:e6:
0a:d6:79:55:c8:50:4e:84:ea:77:61:c3:f4:93:47:18:af:87:
57:41:f7:67:8b:c3:7e:2d:14:66:d6:0e:94:7d:03:9b:97:02:
c5:1d:a6:0c:03:42:9f:9e:db:f7:24:85:bc:c4:e4:41:6b:6f:
02:61:55:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtp/WRl+NO619mQp6OLQ35PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MDMxODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2NmMmUyYTIwY2Y3YTMzMmQ5YzcxYjNiMjAxMDFmYzI2MTRmMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUdVbapiqnMwBhXf5+yiTo/BoUdK
VK8qmos3UrrNyMB+xFpcU3FKUjwf3nDTKU904uyhSfu6YlJGKSnaMP2P+p+Ifqe4
7c7bl+UPhZiO7HwMTRhPN0bx951JDcdTPgFxY2UaFrIeeu/YJ2gHozmvb8vXY3FT
qFz65dTB6yFiMVjKXKt83L1wvzJrbP32LnsdwnpRwoK/eqrauD4JEdAwkqK0Zk0s
mdNslvMwHlN79tQNLnOKq2eXwPc9ulyGl7HgaZwsJsnQBPpg538wBC706MnD11ra
4Ve1wEHVLPFKhxJZS12OhRSX7Cj4HrcVBxqJdkqtMqJBl2MtlPj7EyPGqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKPPLiogz3ozLZxxs7IBAfwmFPBIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbzg4dUtpRFBlak10bkhHenNnRUJfQ1lVOEVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI+zctkRz3glbbyhrsdZ
ZfMfod9IRHD9Jhuqfcs3U0P2+yh+D4YA7rivf1RQ/J+6ntc8lYEWRr0Faeep7/Gv
XvRXRA8zVkEKDoDLGQjQFbgcDBFiS2zaF1uZjaF/enYdCUMtEOmeZrm1YU4xLN2+
NrljrQmBquWxSD3nWACqNpTYPGavvpPxeM+jacbdS8svjzPK/xI/xLDjFB0h+Cpl
lVfHTIqX3srvZP2FNZhDqbMaf66XD1AM0I8VzizAIk0F7+T2Uxl+5grWeVXIUE6E
6ndhw/STRxivh1dB92eLw34tFGbWDpR9A5uXAsUdpgwDQp+e2/ckhbzE5EFrbwJh
VT4=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:55:19 2025 by rpki-client