Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/puZaAI0ng7IlED9HsBB_HI8_igs.roa
File: puZaAI0ng7IlED9HsBB_HI8_igs.roa (raw, json)
Hash identifier: rIM3QkuwWP/C/Gy36/uDaWQ/rFpLrY6dOA2BWUjgTEg=
Subject key identifier: A6:E6:5A:00:8D:27:83:B2:25:10:3F:47:B0:10:7F:1C:8F:3F:8A:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C69C019C01349FD8B8811BFE614C1B280
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/puZaAI0ng7IlED9HsBB_HI8_igs.roa
Signing time: Thu 14 Dec 2023 19:14:06 +0000
ROA not before: Thu 14 Dec 2023 19:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:c0:19:c0:13:49:fd:8b:88:11:bf:e6:14:c1:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 19:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e65a008d2783b225103f47b0107f1c8f3f8a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:78:48:97:6c:e5:3d:20:1f:bb:9d:01:39:
35:d1:f6:2d:95:87:1e:e8:dd:89:37:16:a3:6c:2d:
bf:94:42:f0:d0:ce:4e:ce:72:52:12:10:4b:e6:6a:
5d:ca:e8:07:d7:b1:10:e1:98:91:ec:ea:b1:4d:1d:
a6:c0:b6:e8:2f:20:d3:65:9f:c8:e5:db:38:a1:29:
fd:d9:f7:a4:45:e8:00:0a:24:4b:65:ac:2e:61:93:
11:57:32:7f:8e:85:a0:01:4f:ae:2d:78:9d:8b:40:
ea:67:a9:09:10:0f:f8:88:d6:c6:1b:a7:06:ca:c8:
19:71:b3:88:ee:20:98:6f:71:71:ca:10:d9:3b:da:
f9:3e:2f:a9:0e:d4:a2:32:6f:bb:3b:36:17:72:55:
17:ee:ab:a9:d5:c8:73:f1:7e:ff:3f:bb:be:b6:1c:
77:5d:3f:4d:72:eb:18:71:ec:f9:a7:2c:3b:3c:a2:
3f:83:23:1b:7f:3d:3c:86:37:f5:1a:6e:e5:b3:a2:
2c:a4:2c:d2:ed:75:3f:02:b7:3a:9b:02:42:21:ce:
d4:3c:a8:77:a2:db:43:3c:61:0a:60:1c:2d:c9:48:
26:7f:e5:1e:ae:27:d3:77:f6:14:3c:93:4f:e9:5d:
4c:4d:5a:bc:46:24:4e:71:fa:eb:d4:08:4d:5d:08:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:5A:00:8D:27:83:B2:25:10:3F:47:B0:10:7F:1C:8F:3F:8A:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/puZaAI0ng7IlED9HsBB_HI8_igs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:43:94:3c:e6:8c:81:b8:5e:4b:a2:f6:bf:97:c4:3c:83:54:
a3:0e:ff:7d:a6:cc:34:88:a8:29:7a:4e:de:ed:c0:5a:af:8d:
7b:80:29:9c:7b:3b:43:71:ed:08:90:05:96:ad:98:23:2d:6d:
e7:a3:80:3f:33:05:f2:ab:2c:07:17:87:27:c6:63:e6:f7:84:
f5:b1:29:a2:a8:24:10:ef:ce:a5:8b:81:4a:4b:3f:ba:e2:c1:
c2:9d:59:9b:f7:c2:f6:c3:91:ab:24:de:96:c9:3f:a9:ae:29:
24:51:d3:16:8e:e8:ba:16:44:53:5d:0d:fb:52:fb:38:1e:64:
23:40:d1:dd:e6:8a:54:b1:e2:56:6d:8c:23:5e:12:01:2c:8f:
b3:c3:ac:e9:30:f2:9e:27:76:24:9f:72:c9:4e:1d:b3:b1:1f:
53:98:79:1a:d0:d3:16:fa:09:12:d2:1c:e6:15:87:6b:9e:73:
de:f7:69:19:de:f4:f1:80:18:ad:81:0c:cf:ac:91:14:ec:ce:
1d:9a:78:dc:af:d7:c5:dc:bf:13:a3:96:54:ab:21:a0:30:59:
79:35:46:8d:fd:cf:1a:a6:03:b4:94:65:bb:13:0a:30:62:9f:
80:66:09:d8:e7:3e:b6:43:2e:f0:1a:4b:4a:d8:ba:c2:9b:4f:
61:01:d9:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxpwBnAE0n9i4gRv+YUwbKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MTkxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmU2NWEwMDhkMjc4M2IyMjUxMDNmNDdiMDEwN2YxYzhmM2Y4YTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsR4SJds5T0gH7udATk10fYtlYce
6N2JNxajbC2/lELw0M5OznJSEhBL5mpdyugH17EQ4ZiR7OqxTR2mwLboLyDTZZ/I
5ds4oSn92fekRegACiRLZawuYZMRVzJ/joWgAU+uLXidi0DqZ6kJEA/4iNbGG6cG
ysgZcbOI7iCYb3FxyhDZO9r5Pi+pDtSiMm+7OzYXclUX7qup1chz8X7/P7u+thx3
XT9NcusYcez5pyw7PKI/gyMbfz08hjf1Gm7ls6IspCzS7XU/Arc6mwJCIc7UPKh3
ottDPGEKYBwtyUgmf+UerifTd/YUPJNP6V1MTVq8RiROcfrr1AhNXQirawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKbmWgCNJ4OyJRA/R7AQfxyPP4oLMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcHVaYUFJMG5nN0lsRUQ5SHNCQl9ISThfaWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALBDlDzmjIG4Xkui9r+X
xDyDVKMO/32mzDSIqCl6Tt7twFqvjXuAKZx7O0Nx7QiQBZatmCMtbeejgD8zBfKr
LAcXhyfGY+b3hPWxKaKoJBDvzqWLgUpLP7riwcKdWZv3wvbDkask3pbJP6muKSRR
0xaO6LoWRFNdDftS+zgeZCNA0d3milSx4lZtjCNeEgEsj7PDrOkw8p4ndiSfcslO
HbOxH1OYeRrQ0xb6CRLSHOYVh2uec973aRne9PGAGK2BDM+skRTszh2aeNyv18Xc
vxOjllSrIaAwWXk1Ro39zxqmA7SUZbsTCjBin4BmCdjnPrZDLvAaS0rYusKbT2EB
2T8=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:28:16 2025 by rpki-client