Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ovxI-VicDx4Q2qzgneAYPSpiM54.roa
File: ovxI-VicDx4Q2qzgneAYPSpiM54.roa (raw, json)
Hash identifier: S7k4qmBqT0UzxeQSMBC9g9pnYthDh3ukJUVb4KpUkeM=
Subject key identifier: A2:FC:48:F9:58:9C:0F:1E:10:DA:AC:E0:9D:E0:18:3D:2A:62:33:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE224D7E4DA525A89EF64758C8ED429E9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ovxI-VicDx4Q2qzgneAYPSpiM54.roa
Signing time: Fri 29 Sep 2023 18:12:59 +0000
ROA not before: Fri 29 Sep 2023 18:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:24:d7:e4:da:52:5a:89:ef:64:75:8c:8e:d4:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 18:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2fc48f9589c0f1e10daace09de0183d2a62339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:9a:30:06:4f:c9:e7:ee:b2:67:88:c9:e8:
c8:90:15:b5:84:b0:40:a1:72:79:6a:76:59:ae:13:
67:25:06:91:ef:c3:5d:f8:54:ea:20:02:a4:3d:c1:
5d:da:a9:c9:28:00:05:ef:54:ea:eb:68:d5:95:06:
07:0d:e3:3b:f5:75:bd:66:31:5f:23:9b:ea:4b:a6:
31:0d:2c:95:eb:07:55:e6:82:0d:9e:49:2f:86:7d:
85:71:19:27:b6:3a:ec:78:1d:12:a8:f8:94:da:a4:
dd:7a:18:50:b2:0e:68:e9:fd:2d:d5:b5:dc:e8:3a:
09:e0:18:ee:5a:33:e6:73:11:7e:7e:cb:e6:6a:8c:
6d:7e:e6:c5:f0:60:c4:4a:23:20:53:f0:ea:61:7e:
cf:c8:bd:5d:69:7a:67:19:21:91:7b:dd:b8:cd:47:
13:4b:e2:36:e3:21:18:0d:44:38:e8:74:89:53:1a:
cb:01:99:e6:e3:84:f7:9f:29:5b:33:38:97:bf:1f:
cc:5c:61:ee:d4:b2:51:d3:03:ac:52:11:0c:74:aa:
c5:7f:8d:1f:35:d6:11:77:86:39:1a:67:06:80:30:
c8:cc:f9:de:d6:f8:72:a1:0d:06:6f:74:df:52:3c:
46:63:8c:f4:60:66:37:02:e1:64:9a:7c:d5:d0:3e:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:48:F9:58:9C:0F:1E:10:DA:AC:E0:9D:E0:18:3D:2A:62:33:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ovxI-VicDx4Q2qzgneAYPSpiM54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:7b:cb:53:73:40:e8:f1:94:3f:ee:33:3c:e9:a2:72:9c:1b:
37:32:db:d1:42:fc:89:11:a5:3f:f3:61:31:90:35:4c:1b:97:
f7:bb:f6:bd:85:de:d7:62:58:6c:dd:0b:3a:44:44:db:f9:b4:
36:69:af:e2:31:0b:15:0a:03:00:a8:88:3a:76:56:0e:3c:02:
96:30:5b:78:f8:11:2d:f6:06:f5:d7:52:01:e4:a6:8d:64:da:
a1:95:51:07:4d:3a:8a:08:0b:1e:70:1a:5c:79:0e:05:3f:2d:
79:2b:5b:5a:2d:7c:c3:ce:94:40:90:7b:81:1a:85:e4:27:ba:
b3:4c:6b:55:26:59:3d:cc:18:ca:39:c9:cf:04:c7:e2:b0:7d:
24:ae:ca:ae:04:7b:d0:61:ac:93:46:3b:79:d0:2e:17:f8:d3:
ce:e5:ca:2e:3c:d2:b5:50:30:e4:09:27:87:b3:f6:28:81:3e:
8e:40:76:5b:1f:8a:d5:79:56:e2:05:e4:f6:ef:ee:2b:2e:2a:
14:f6:19:81:39:7b:7d:c3:41:52:e7:ef:40:c8:c5:b7:d7:c1:
5f:a5:07:78:b6:36:d0:78:ee:67:b2:f7:ca:3f:25:bf:b1:2b:
b6:bc:d1:a6:49:87:4b:1c:bd:e8:18:23:e0:45:41:3a:0e:22:
60:4d:c7:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYriJNfk2lJaie9kdYyO1CnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI5MTgxMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmZjNDhmOTU4OWMwZjFlMTBkYWFjZTA5ZGUwMTgzZDJhNjIzMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6aMAZPyefusmeIyejIkBW1hLBA
oXJ5anZZrhNnJQaR78Nd+FTqIAKkPcFd2qnJKAAF71Tq62jVlQYHDeM79XW9ZjFf
I5vqS6YxDSyV6wdV5oINnkkvhn2FcRkntjrseB0SqPiU2qTdehhQsg5o6f0t1bXc
6DoJ4BjuWjPmcxF+fsvmaoxtfubF8GDESiMgU/DqYX7PyL1daXpnGSGRe924zUcT
S+I24yEYDUQ46HSJUxrLAZnm44T3nylbMziXvx/MXGHu1LJR0wOsUhEMdKrFf40f
NdYRd4Y5GmcGgDDIzPne1vhyoQ0Gb3TfUjxGY4z0YGY3AuFkmnzV0D4lXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKL8SPlYnA8eENqs4J3gGD0qYjOeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvb3Z4SS1WaWNEeDRRMnF6Z25lQVlQU3BpTTU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAF7y1NzQOjxlD/uMzzp
onKcGzcy29FC/IkRpT/zYTGQNUwbl/e79r2F3tdiWGzdCzpERNv5tDZpr+IxCxUK
AwCoiDp2Vg48ApYwW3j4ES32BvXXUgHkpo1k2qGVUQdNOooICx5wGlx5DgU/LXkr
W1otfMPOlECQe4EaheQnurNMa1UmWT3MGMo5yc8Ex+KwfSSuyq4Ee9BhrJNGO3nQ
Lhf4087lyi480rVQMOQJJ4ez9iiBPo5AdlsfitV5VuIF5Pbv7isuKhT2GYE5e33D
QVLn70DIxbfXwV+lB3i2NtB47mey98o/Jb+xK7a80aZJh0scvegYI+BFQToOImBN
xyk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:07:17 2025 by rpki-client