Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qRJDP9asrTilPK0Gxc5bvtGvoyE.roa
File: qRJDP9asrTilPK0Gxc5bvtGvoyE.roa (raw, json)
Hash identifier: hG6478Er0MNjar1yJIvDf5aun/OQG4q5nTbkBFgTz5Y=
Subject key identifier: A9:12:43:3F:D6:AC:AD:38:A5:3C:AD:06:C5:CE:5B:BE:D1:AF:A3:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6B0C63F37FA26FE59ED6568EF2FFF60C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qRJDP9asrTilPK0Gxc5bvtGvoyE.roa
Signing time: Thu 26 Oct 2023 08:14:15 +0000
ROA not before: Thu 26 Oct 2023 08:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:0c:63:f3:7f:a2:6f:e5:9e:d6:56:8e:f2:ff:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 08:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a912433fd6acad38a53cad06c5ce5bbed1afa321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:db:95:02:e6:be:bd:32:b0:e5:11:ca:d1:
15:1c:d7:ac:c2:46:d3:40:33:7e:11:78:42:d0:45:
f9:75:b0:b2:9a:c7:ac:b2:67:58:6e:ed:89:b3:e3:
05:1a:d4:f7:14:ce:ba:44:b9:51:a9:77:b7:ff:9e:
5b:e8:7c:90:e3:61:e9:96:f7:15:53:06:94:b9:9a:
d5:d1:5e:9b:91:b8:d2:39:22:6c:29:66:b9:33:95:
e8:f2:72:e6:12:39:ca:d1:80:9f:5f:49:3c:e3:46:
b1:f3:c1:37:20:f4:df:62:3e:f6:c7:84:a1:48:50:
99:58:7c:40:af:db:a1:31:b8:8c:1d:8e:4d:4a:84:
07:1e:00:42:2d:c9:13:6d:66:4a:4c:ab:42:b6:bf:
19:ec:f1:b9:16:4f:05:62:0e:a8:17:74:17:7e:52:
1a:31:79:11:b1:de:62:3a:85:4d:77:36:0d:ed:a5:
b1:86:4f:61:77:03:31:4f:3a:c2:80:52:b9:60:36:
4b:92:f4:2f:1c:e4:a1:eb:9e:05:49:ad:5f:6f:25:
a3:a8:50:24:7b:5f:9f:9f:96:dd:89:50:bd:e1:cc:
f6:8d:38:3b:84:1b:f2:32:87:86:5e:7f:21:41:09:
29:57:ac:c2:58:cb:65:ce:50:7b:79:be:20:16:6b:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:43:3F:D6:AC:AD:38:A5:3C:AD:06:C5:CE:5B:BE:D1:AF:A3:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qRJDP9asrTilPK0Gxc5bvtGvoyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:35:8c:83:1d:38:04:13:b9:03:e3:b1:6c:df:6a:82:ff:ee:
8b:04:25:83:a6:2e:21:6b:1b:1f:75:c8:a0:dd:c7:d7:6a:85:
87:73:81:02:c8:57:66:11:c1:c4:ef:e1:f8:34:51:46:f7:ab:
b1:0a:23:d1:9a:59:c9:dd:dd:00:07:33:f7:1e:86:f0:4a:19:
19:25:f2:59:ca:05:09:a6:b6:2d:1d:19:2a:91:5c:b9:cb:7a:
cf:3d:60:99:c8:f2:41:9f:2c:ef:e7:6f:9b:0d:3e:19:0f:24:
9f:fd:f1:90:7c:bf:90:b6:dd:04:5d:c0:49:44:a6:74:99:5f:
fc:7a:bd:0e:0e:6f:80:d8:44:f0:52:e6:db:b9:e3:28:55:d4:
44:1d:09:27:c5:2f:90:72:43:10:96:9c:11:c6:3a:54:7e:e0:
5c:5f:32:65:e2:70:2a:88:19:b8:41:79:78:b4:ac:eb:e1:a1:
c8:23:6f:00:ea:93:a2:32:c7:a4:b1:b6:6f:5a:80:f9:64:59:
4f:ca:da:ff:3d:91:12:e5:86:60:ce:8a:9f:c1:3f:98:7e:d7:
9b:ac:1e:4c:90:88:02:18:3f:b3:b6:ae:c3:70:ed:18:72:32:
1c:ac:6c:60:a8:6b:80:bf:6d:a6:25:87:53:d1:f7:83:c6:30:
c8:86:0d:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtrDGPzf6Jv5Z7WVo7y//YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MDgxNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTEyNDMzZmQ2YWNhZDM4YTUzY2FkMDZjNWNlNWJiZWQxYWZhMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrbblQLmvr0ysOURytEVHNeswkbT
QDN+EXhC0EX5dbCymsessmdYbu2Js+MFGtT3FM66RLlRqXe3/55b6HyQ42HplvcV
UwaUuZrV0V6bkbjSOSJsKWa5M5Xo8nLmEjnK0YCfX0k840ax88E3IPTfYj72x4Sh
SFCZWHxAr9uhMbiMHY5NSoQHHgBCLckTbWZKTKtCtr8Z7PG5Fk8FYg6oF3QXflIa
MXkRsd5iOoVNdzYN7aWxhk9hdwMxTzrCgFK5YDZLkvQvHOSh654FSa1fbyWjqFAk
e1+fn5bdiVC94cz2jTg7hBvyMoeGXn8hQQkpV6zCWMtlzlB7eb4gFmsChQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKkSQz/WrK04pTytBsXOW77Rr6MhMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcVJKRFA5YXNyVGlsUEswR3hjNWJ2dEd2b3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACA1jIMdOAQTuQPjsWzf
aoL/7osEJYOmLiFrGx91yKDdx9dqhYdzgQLIV2YRwcTv4fg0UUb3q7EKI9GaWcnd
3QAHM/cehvBKGRkl8lnKBQmmti0dGSqRXLnLes89YJnI8kGfLO/nb5sNPhkPJJ/9
8ZB8v5C23QRdwElEpnSZX/x6vQ4Ob4DYRPBS5tu54yhV1EQdCSfFL5ByQxCWnBHG
OlR+4FxfMmXicCqIGbhBeXi0rOvhocgjbwDqk6Iyx6Sxtm9agPlkWU/K2v89kRLl
hmDOip/BP5h+15usHkyQiAIYP7O2rsNw7RhyMhysbGCoa4C/baYlh1PR94PGMMiG
DQA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:35 2025 by rpki-client