Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNFr_eLrM0meAUe8EGdXeV7y6jY.roa
File: oNFr_eLrM0meAUe8EGdXeV7y6jY.roa (raw, json)
Hash identifier: OCAqTomr/I0N6q0qiu3iKXVXdr36zntg3kX2JoZqNwM=
Subject key identifier: A0:D1:6B:FD:E2:EB:33:49:9E:01:47:BC:10:67:57:79:5E:F2:EA:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6620A01B5E472FA278AC686597A6FFD4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNFr_eLrM0meAUe8EGdXeV7y6jY.roa
Signing time: Wed 25 Oct 2023 09:18:15 +0000
ROA not before: Wed 25 Oct 2023 09:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:20:a0:1b:5e:47:2f:a2:78:ac:68:65:97:a6:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 09:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0d16bfde2eb33499e0147bc106757795ef2ea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:2a:de:0d:ad:76:77:64:09:69:ef:3b:73:
0f:e5:f8:98:37:8a:93:1d:52:16:c8:50:82:44:26:
6d:f5:ca:56:31:7a:9d:24:7a:3d:0f:92:02:a3:63:
c5:c9:ed:3f:4d:80:55:b5:6a:cd:16:62:98:b3:72:
f0:05:63:ba:e8:8e:f8:12:ed:f6:e5:3c:79:d7:af:
f5:8b:ad:2b:51:c8:79:c2:fe:83:5a:06:1c:8d:10:
43:2e:c0:3b:ff:7d:58:0e:e2:f4:10:01:c6:96:c9:
39:d6:f1:df:38:07:f6:5b:f9:2b:af:85:88:77:79:
81:a0:45:e0:ed:6e:ec:6f:8b:a8:10:86:90:02:2d:
d8:9a:f7:57:bb:89:c9:34:ca:01:9f:90:5a:72:47:
d2:a1:a7:b8:d5:33:16:f5:3f:03:51:59:c3:41:7e:
fc:81:a7:a8:78:1e:ce:26:9d:ba:b1:aa:7d:70:62:
e9:07:3e:c6:3e:c4:7e:bb:10:fe:94:3f:2b:e4:98:
58:21:a6:50:1a:30:38:e0:33:ab:28:fc:b9:af:3b:
ba:23:34:49:2e:b6:af:9d:d2:ed:53:9a:07:de:e9:
73:7e:89:d1:54:ca:52:b7:e3:19:be:43:2c:b2:a8:
d9:0d:f1:ed:28:c9:0a:90:7a:07:17:78:0f:b6:97:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:6B:FD:E2:EB:33:49:9E:01:47:BC:10:67:57:79:5E:F2:EA:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNFr_eLrM0meAUe8EGdXeV7y6jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c4:c4:c2:43:22:d2:24:f3:f6:9c:e4:12:d6:bc:be:6a:cc:
05:05:0a:d9:fd:c3:cf:b5:19:48:dc:e0:32:38:bf:a1:1c:81:
03:29:ca:4a:bf:33:54:23:94:0d:4a:13:c2:ac:56:b8:38:b1:
b2:5d:7c:1f:f4:27:4f:58:d6:dd:87:ea:0d:a5:06:f4:00:38:
34:a0:8f:7b:be:a8:c7:f9:69:e8:bb:e7:4e:64:f8:d3:42:a1:
35:dc:3e:6e:7c:25:e5:8f:8a:c3:74:bd:a7:c3:9a:4b:02:95:
56:be:4d:4b:79:23:9b:6b:83:d0:3a:3f:31:19:05:e6:2c:aa:
85:7a:7f:a3:de:ed:10:59:ef:73:21:f9:b9:6e:bd:87:7a:0c:
63:21:cb:1c:3a:86:a1:d0:8b:0a:0f:b9:56:d9:61:1f:c8:77:
ff:a3:26:20:ac:3f:02:d2:93:89:f8:64:6c:6d:5e:60:9b:ee:
e3:bd:ec:24:d2:31:e4:8f:bf:fe:a7:94:57:2d:7a:d1:0e:b2:
38:c7:0e:5c:3f:61:23:2c:41:bf:7b:38:b2:d5:00:54:fd:c6:
f7:69:5d:eb:67:ae:0f:bc:5c:63:7d:22:b3:f1:4a:9b:58:72:
e7:33:7c:c4:de:2b:e9:c8:e3:f3:78:e6:1e:26:7f:d7:49:91:
4f:a5:2b:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtmIKAbXkcvonisaGWXpv/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI1MDkxODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGQxNmJmZGUyZWIzMzQ5OWUwMTQ3YmMxMDY3NTc3OTVlZjJlYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMkq3g2tdndkCWnvO3MP5fiYN4qT
HVIWyFCCRCZt9cpWMXqdJHo9D5ICo2PFye0/TYBVtWrNFmKYs3LwBWO66I74Eu32
5Tx516/1i60rUch5wv6DWgYcjRBDLsA7/31YDuL0EAHGlsk51vHfOAf2W/krr4WI
d3mBoEXg7W7sb4uoEIaQAi3YmvdXu4nJNMoBn5BackfSoae41TMW9T8DUVnDQX78
gaeoeB7OJp26sap9cGLpBz7GPsR+uxD+lD8r5JhYIaZQGjA44DOrKPy5rzu6IzRJ
LravndLtU5oH3ulzfonRVMpSt+MZvkMssqjZDfHtKMkKkHoHF3gPtpdH+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKDRa/3i6zNJngFHvBBnV3le8uo2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvb05Gcl9lTHJNMG1lQVVlOEVHZFhlVjd5NmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACvExMJDItIk8/ac5BLW
vL5qzAUFCtn9w8+1GUjc4DI4v6EcgQMpykq/M1QjlA1KE8KsVrg4sbJdfB/0J09Y
1t2H6g2lBvQAODSgj3u+qMf5aei7505k+NNCoTXcPm58JeWPisN0vafDmksClVa+
TUt5I5trg9A6PzEZBeYsqoV6f6Pe7RBZ73Mh+bluvYd6DGMhyxw6hqHQiwoPuVbZ
YR/Id/+jJiCsPwLSk4n4ZGxtXmCb7uO97CTSMeSPv/6nlFctetEOsjjHDlw/YSMs
Qb97OLLVAFT9xvdpXetnrg+8XGN9IrPxSptYcuczfMTeK+nI4/N45h4mf9dJkU+l
K1Y=
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:25 2025 by rpki-client