Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qUvjO-yJv0fIu64Apqj8zWaP7zI.roa
File: qUvjO-yJv0fIu64Apqj8zWaP7zI.roa (raw, json)
Hash identifier: P8Ox5kv6x5z8qogHEM5I6IeM7GJUEPCQayjSToP+498=
Subject key identifier: A9:4B:E3:3B:EC:89:BF:47:C8:BB:AE:00:A6:A8:FC:CD:66:8F:EF:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3CAFA779E5DB4D64688A9C218F7FC91A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qUvjO-yJv0fIu64Apqj8zWaP7zI.roa
Signing time: Wed 06 Dec 2023 01:13:13 +0000
ROA not before: Wed 06 Dec 2023 01:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3c:af:a7:79:e5:db:4d:64:68:8a:9c:21:8f:7f:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 01:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94be33bec89bf47c8bbae00a6a8fccd668fef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:7d:bd:39:44:b2:d9:b2:18:22:61:4e:e3:
76:f2:b3:b0:c7:e7:8b:25:3a:61:1d:ba:25:b9:35:
74:0c:fa:b5:ec:da:31:14:ff:de:02:c9:aa:6d:b1:
2a:e2:17:c4:1e:c9:09:2c:6f:7a:57:be:57:2c:82:
1d:29:fd:6a:53:94:d1:44:4e:5a:ed:a4:35:5e:e0:
ad:a3:d2:9b:ed:d3:61:0b:34:0e:d2:ca:36:95:77:
33:6c:df:db:82:b4:a2:bd:69:98:ce:d1:a3:4e:5a:
ec:15:ec:af:57:f3:d6:6f:af:32:d6:f2:a7:f2:da:
56:37:45:7e:18:c9:48:02:d9:d8:8b:ca:1a:6f:41:
c1:5b:4e:3f:56:f0:6f:32:d4:26:8e:5d:54:5d:30:
8f:26:02:e6:53:b0:c2:c5:95:4b:19:56:66:7a:fa:
50:09:01:77:ad:71:48:a0:33:db:6a:03:fe:9c:a7:
1b:6b:49:0f:3d:17:61:1e:10:2d:b9:e0:24:45:33:
34:e5:91:94:9e:c2:c2:57:32:5f:12:32:94:c4:2e:
ec:9d:62:8d:23:27:ef:a2:b0:da:de:81:48:74:42:
01:09:e7:e0:9b:e4:67:f3:e1:00:fa:c8:90:c1:a3:
a9:11:a6:fb:4f:b3:e4:0c:70:65:4c:d6:28:43:e7:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:E3:3B:EC:89:BF:47:C8:BB:AE:00:A6:A8:FC:CD:66:8F:EF:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qUvjO-yJv0fIu64Apqj8zWaP7zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:28:14:d6:35:bf:e0:1f:6e:90:1a:5a:75:24:a9:7e:06:cf:
c8:a0:4a:0a:36:95:d5:44:8a:25:39:01:34:3a:18:af:bc:c9:
43:54:6f:1e:90:e4:99:a9:a9:ba:e1:a3:72:eb:43:f3:45:2b:
77:1f:b4:68:37:ed:6c:80:78:b1:85:0e:5d:77:e2:69:8b:44:
51:18:50:a4:ad:c0:34:99:4f:41:53:4e:1d:1f:74:3d:3d:2d:
6e:6e:ce:9f:b4:28:c2:7d:73:bd:3b:01:e3:95:39:12:a7:14:
96:1f:6c:ca:33:0d:fe:71:46:c5:99:07:e0:e1:97:78:8c:9e:
ee:85:32:93:2a:f9:46:b8:63:c6:ca:e9:f9:1b:39:20:99:6e:
bf:c0:3f:ca:cb:e0:9d:bd:72:ec:7e:61:30:e6:f1:4e:eb:1c:
c9:e2:4b:a9:63:f6:05:e6:e8:11:be:0d:61:f0:78:53:78:ce:
7e:90:3d:4e:1f:fa:b3:1c:50:9e:8e:a8:dc:66:2d:5a:71:ef:
28:6b:16:ce:1b:cd:56:8a:e6:ed:4c:ed:fc:c7:32:5e:c3:aa:
1a:3b:47:14:7f:bb:13:25:42:43:71:62:41:55:ba:6f:51:77:
00:d9:7a:f0:db:40:0c:69:e2:c1:42:f4:c4:52:f9:c2:3b:dc:
f1:df:7f:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw8r6d55dtNZGiKnCGPf8kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MDExMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTRiZTMzYmVjODliZjQ3YzhiYmFlMDBhNmE4ZmNjZDY2OGZlZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbd9vTlEstmyGCJhTuN28rOwx+eL
JTphHboluTV0DPq17NoxFP/eAsmqbbEq4hfEHskJLG96V75XLIIdKf1qU5TRRE5a
7aQ1XuCto9Kb7dNhCzQO0so2lXczbN/bgrSivWmYztGjTlrsFeyvV/PWb68y1vKn
8tpWN0V+GMlIAtnYi8oab0HBW04/VvBvMtQmjl1UXTCPJgLmU7DCxZVLGVZmevpQ
CQF3rXFIoDPbagP+nKcba0kPPRdhHhAtueAkRTM05ZGUnsLCVzJfEjKUxC7snWKN
IyfvorDa3oFIdEIBCefgm+Rn8+EA+siQwaOpEab7T7PkDHBlTNYoQ+fwEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKlL4zvsib9HyLuuAKao/M1mj+8yMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcVV2ak8teUp2MGZJdTY0QXBxajh6V2FQN3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABgoFNY1v+AfbpAaWnUk
qX4Gz8igSgo2ldVEiiU5ATQ6GK+8yUNUbx6Q5Jmpqbrho3LrQ/NFK3cftGg37WyA
eLGFDl134mmLRFEYUKStwDSZT0FTTh0fdD09LW5uzp+0KMJ9c707AeOVORKnFJYf
bMozDf5xRsWZB+Dhl3iMnu6FMpMq+Ua4Y8bK6fkbOSCZbr/AP8rL4J29cux+YTDm
8U7rHMniS6lj9gXm6BG+DWHweFN4zn6QPU4f+rMcUJ6OqNxmLVpx7yhrFs4bzVaK
5u1M7fzHMl7Dqho7RxR/uxMlQkNxYkFVum9RdwDZevDbQAxp4sFC9MRS+cI73PHf
f5M=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:37:25 2025 by rpki-client