Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pHjRDWgCfuzx_QJv87mAdj0AgzI.roa
File: pHjRDWgCfuzx_QJv87mAdj0AgzI.roa (raw, json)
Hash identifier: Gc1YvksoxUMy1oiewM6ek7azxHPYc6Lw+RPWLmtZb3I=
Subject key identifier: A4:78:D1:0D:68:02:7E:EC:F1:FD:02:6F:F3:B9:80:76:3D:00:83:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C66F5FCEED9FE5ADCF86412EFA4157671
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pHjRDWgCfuzx_QJv87mAdj0AgzI.roa
Signing time: Thu 14 Dec 2023 06:14:06 +0000
ROA not before: Thu 14 Dec 2023 06:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:f5:fc:ee:d9:fe:5a:dc:f8:64:12:ef:a4:15:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 06:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a478d10d68027eecf1fd026ff3b980763d008332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:97:78:8f:6d:2c:c9:61:2e:e7:0b:f6:05:
04:56:4c:d4:cf:91:58:67:ed:62:5c:f2:05:6d:5b:
32:83:e5:4e:0d:c5:02:a6:5b:e9:9d:9e:5a:da:00:
c7:ea:9f:6c:50:a3:7c:00:d6:8b:3c:2c:37:13:06:
c9:fd:d2:6d:20:f8:17:7b:42:71:6e:bb:af:ee:f8:
62:b2:a9:74:6c:c3:c0:2b:39:b7:7f:7b:8b:a8:42:
ae:1e:89:2c:01:83:d0:b5:77:e7:26:9f:41:a6:e7:
a8:f7:b9:6b:4e:8d:aa:fa:b7:82:4b:af:60:3f:41:
cb:f2:e4:2f:a9:ef:36:05:b5:5a:38:1b:17:fe:be:
4d:84:fc:43:6b:9f:44:d4:8b:46:39:d7:81:c2:20:
3a:f7:7c:c9:d5:f4:cd:c2:0f:e3:6d:d8:80:f2:ff:
fd:4c:f2:3d:48:a9:32:42:cf:6c:7a:2b:6e:4b:f1:
1c:73:a2:c1:95:ca:91:eb:c8:57:92:d9:22:30:1a:
a5:fe:63:e1:ed:3c:4d:8d:d8:ae:2a:bb:99:7b:4b:
7b:3e:78:fb:f6:a8:33:b4:12:d9:3e:c5:70:23:f0:
41:70:43:c7:93:8b:96:5b:7a:a2:b0:6b:0d:df:cb:
a7:c0:c7:c3:e5:e2:af:4b:9b:af:86:e5:20:af:f2:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:D1:0D:68:02:7E:EC:F1:FD:02:6F:F3:B9:80:76:3D:00:83:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pHjRDWgCfuzx_QJv87mAdj0AgzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c4:8f:20:7a:69:a7:a2:07:0d:87:6b:02:88:82:a8:5b:9a:
4c:0a:b9:9e:a9:b3:37:07:d6:9c:a7:b8:9f:26:b8:9f:2a:b4:
73:aa:9a:9a:39:08:2f:ef:ea:8d:f8:29:0a:71:1c:a0:06:c5:
f7:f9:13:35:ca:b7:6c:8c:5c:a4:48:43:7b:30:b9:d4:41:b7:
b8:47:f6:25:ba:ac:55:9d:71:54:b2:65:be:ae:4b:51:32:eb:
18:ed:cb:c1:56:a1:86:d9:06:65:1b:97:6e:b2:08:93:a0:38:
9d:ea:dc:d7:4f:97:b3:98:80:eb:1e:50:e7:9b:11:fd:c5:5c:
61:07:a4:72:b8:e8:3f:80:2e:c8:bc:d9:95:d3:b5:f8:ed:16:
e0:13:06:37:51:c4:67:0b:7b:ec:af:fd:3a:4f:4f:56:f0:63:
68:73:31:f6:33:8c:90:4c:80:d5:e3:e1:d8:dd:8e:c6:85:f6:
2b:99:6a:74:89:a3:df:20:42:78:e5:90:bb:08:cf:4e:40:85:
08:bb:2b:3b:cf:bc:b1:fe:d7:b2:3f:81:44:18:9e:7b:18:46:
9d:e4:fa:b3:00:ca:f5:a0:41:7b:69:cf:43:2c:a5:dc:e4:75:
40:1e:07:33:f8:5b:ed:63:a5:4c:e1:df:f5:53:8c:db:5b:18:
93:0b:e5:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxm9fzu2f5a3PhkEu+kFXZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MDYxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDc4ZDEwZDY4MDI3ZWVjZjFmZDAyNmZmM2I5ODA3NjNkMDA4MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz12XeI9tLMlhLucL9gUEVkzUz5FY
Z+1iXPIFbVsyg+VODcUCplvpnZ5a2gDH6p9sUKN8ANaLPCw3EwbJ/dJtIPgXe0Jx
bruv7vhisql0bMPAKzm3f3uLqEKuHoksAYPQtXfnJp9Bpueo97lrTo2q+reCS69g
P0HL8uQvqe82BbVaOBsX/r5NhPxDa59E1ItGOdeBwiA693zJ1fTNwg/jbdiA8v/9
TPI9SKkyQs9seituS/Ecc6LBlcqR68hXktkiMBql/mPh7TxNjdiuKruZe0t7Pnj7
9qgztBLZPsVwI/BBcEPHk4uWW3qisGsN38unwMfD5eKvS5uvhuUgr/K3KwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKR40Q1oAn7s8f0Cb/O5gHY9AIMyMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcEhqUkRXZ0NmdXp4X1FKdjg3bUFkajBBZ3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKvEjyB6aaeiBw2HawKI
gqhbmkwKuZ6pszcH1pynuJ8muJ8qtHOqmpo5CC/v6o34KQpxHKAGxff5EzXKt2yM
XKRIQ3swudRBt7hH9iW6rFWdcVSyZb6uS1Ey6xjty8FWoYbZBmUbl26yCJOgOJ3q
3NdPl7OYgOseUOebEf3FXGEHpHK46D+ALsi82ZXTtfjtFuATBjdRxGcLe+yv/TpP
T1bwY2hzMfYzjJBMgNXj4djdjsaF9iuZanSJo98gQnjlkLsIz05AhQi7KzvPvLH+
17I/gUQYnnsYRp3k+rMAyvWgQXtpz0MspdzkdUAeBzP4W+1jpUzh3/VTjNtbGJML
5bA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:19 2025 by rpki-client