Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p43Lr37hKLejh0c-8JxF_CS5SWM.roa
File: p43Lr37hKLejh0c-8JxF_CS5SWM.roa (raw, json)
Hash identifier: zDMsmkjilvENqEtndfuQdT6jp2DaZV8uMsWkEB+HY94=
Subject key identifier: A7:8D:CB:AF:7E:E1:28:B7:A3:87:47:3E:F0:9C:45:FC:24:B9:49:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3AFD63B0A713A8578E898474374E7FCB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p43Lr37hKLejh0c-8JxF_CS5SWM.roa
Signing time: Tue 17 Oct 2023 00:16:06 +0000
ROA not before: Tue 17 Oct 2023 00:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:fd:63:b0:a7:13:a8:57:8e:89:84:74:37:4e:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 00:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78dcbaf7ee128b7a387473ef09c45fc24b94963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:e5:f6:f7:17:72:94:e1:a0:99:b2:38:18:
52:45:44:76:78:1c:a3:56:34:e1:cf:f2:f1:ee:87:
48:2c:c7:1d:d5:7a:c1:5b:06:5c:31:e3:f3:a0:e2:
8c:1e:97:49:90:b1:66:da:70:12:13:90:95:8a:12:
5d:82:f1:7f:ee:59:ae:ea:b9:37:11:eb:28:ef:23:
61:de:76:8d:85:a2:b7:77:ac:33:6e:cd:06:b2:68:
47:3f:7b:a0:3e:93:84:d0:c8:3f:9c:11:3b:07:4b:
5b:50:59:63:44:21:8c:ef:1f:71:e3:5d:56:b3:b1:
63:aa:f6:cc:72:8d:1a:55:1f:c9:a8:97:f2:cc:6d:
72:aa:54:73:b1:52:e3:d6:3b:6d:66:7b:69:f6:f4:
96:a2:7c:52:b5:a2:fb:a2:a7:c5:e3:65:62:66:fa:
22:12:c9:84:d5:37:aa:41:84:73:74:a8:b9:9d:b5:
89:a4:19:9f:74:e6:ac:88:bb:62:71:83:3d:89:d2:
be:1c:70:4c:7e:b3:29:85:a2:22:62:1a:e8:45:3b:
dd:73:0d:f6:1d:97:e2:1e:5c:a7:86:c6:1f:61:cc:
c1:ac:68:d8:85:96:15:61:3c:31:cf:f0:31:e8:d3:
c6:c6:aa:71:99:ee:e1:d6:21:9b:97:5f:02:7e:57:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8D:CB:AF:7E:E1:28:B7:A3:87:47:3E:F0:9C:45:FC:24:B9:49:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p43Lr37hKLejh0c-8JxF_CS5SWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:bf:a0:d7:76:67:f2:08:c8:ba:b3:2f:2f:68:7c:98:79:1c:
55:9a:38:c6:1a:ec:84:53:7e:de:a6:05:df:73:f6:42:5e:6b:
02:20:80:1e:b8:ac:dd:bb:49:7c:3d:d3:63:e0:b9:d3:98:4a:
31:ae:e0:c0:0d:e1:37:8e:cd:3b:f4:db:ef:45:f4:74:7d:82:
7e:96:5e:ab:2f:8b:61:f4:a3:47:0a:e7:24:b0:a9:fa:c7:2b:
7f:51:8a:90:66:43:7b:c5:cc:43:80:53:cc:4b:8e:ef:73:d1:
bc:73:80:9a:2a:3e:65:7c:ef:9c:74:3b:79:fd:3b:ff:b2:f4:
00:8b:03:c8:75:dc:40:49:71:ad:8d:51:ba:0a:c3:5a:82:8e:
31:b8:f2:97:fe:a0:b2:f9:08:0c:e3:b2:3f:49:ed:f8:ae:3b:
70:bf:0a:a4:59:76:c7:9f:13:4a:80:36:94:11:eb:a9:50:9b:
32:c1:f9:62:57:26:1b:e3:61:bc:a2:01:32:1c:f0:f8:25:64:
09:c8:42:de:ec:ca:b3:7e:9a:61:60:64:04:ed:c3:42:f3:99:
13:b4:6c:c9:a8:8b:3c:b2:7a:92:25:cf:14:d7:3c:14:00:82:
95:4f:e5:fe:21:d9:4d:84:ed:de:0f:24:44:4e:d1:7b:d2:59:
49:7d:8a:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs6/WOwpxOoV46JhHQ3Tn/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE3MDAxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzhkY2JhZjdlZTEyOGI3YTM4NzQ3M2VmMDljNDVmYzI0Yjk0OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU3l9vcXcpThoJmyOBhSRUR2eByj
VjThz/Lx7odILMcd1XrBWwZcMePzoOKMHpdJkLFm2nASE5CVihJdgvF/7lmu6rk3
Eeso7yNh3naNhaK3d6wzbs0GsmhHP3ugPpOE0Mg/nBE7B0tbUFljRCGM7x9x411W
s7FjqvbMco0aVR/JqJfyzG1yqlRzsVLj1jttZntp9vSWonxStaL7oqfF42ViZvoi
EsmE1TeqQYRzdKi5nbWJpBmfdOasiLticYM9idK+HHBMfrMphaIiYhroRTvdcw32
HZfiHlynhsYfYczBrGjYhZYVYTwxz/Ax6NPGxqpxme7h1iGbl18CfleVDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKeNy69+4Si3o4dHPvCcRfwkuUljMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcDQzTHIzN2hLTGVqaDBjLThKeEZfQ1M1U1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHC/oNd2Z/IIyLqzLy9o
fJh5HFWaOMYa7IRTft6mBd9z9kJeawIggB64rN27SXw902PgudOYSjGu4MAN4TeO
zTv02+9F9HR9gn6WXqsvi2H0o0cK5ySwqfrHK39RipBmQ3vFzEOAU8xLju9z0bxz
gJoqPmV875x0O3n9O/+y9ACLA8h13EBJca2NUboKw1qCjjG48pf+oLL5CAzjsj9J
7fiuO3C/CqRZdsefE0qANpQR66lQmzLB+WJXJhvjYbyiATIc8PglZAnIQt7syrN+
mmFgZATtw0LzmRO0bMmoizyyepIlzxTXPBQAgpVP5f4h2U2E7d4PJERO0XvSWUl9
ipI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:29:35 2025 by rpki-client