Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rAbHOGCXovZqN05UBxAImRZSl0Y.roa
File: rAbHOGCXovZqN05UBxAImRZSl0Y.roa (raw, json)
Hash identifier: hzk/faDFsnOCtMI6RJVAorQszqdNK3NeNze31VIVLrU=
Subject key identifier: AC:06:C7:38:60:97:A2:F6:6A:37:4E:54:07:10:08:99:16:52:97:46
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4EB9FB9C7C7ED78A389289C284FA60B7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rAbHOGCXovZqN05UBxAImRZSl0Y.roa
Signing time: Sat 09 Dec 2023 13:17:40 +0000
ROA not before: Sat 09 Dec 2023 13:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:b9:fb:9c:7c:7e:d7:8a:38:92:89:c2:84:fa:60:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 13:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac06c7386097a2f66a374e540710089916529746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:66:a3:a0:cb:2f:06:1c:cd:09:5d:55:6b:
32:4e:55:8d:4f:0d:67:0c:1b:03:c8:8f:f2:26:7c:
d6:72:fb:a2:c9:34:f1:cd:8d:af:e6:86:d8:c9:ab:
f4:02:76:98:51:3d:7e:08:e3:ae:78:94:28:70:20:
55:e9:18:ba:54:ec:51:1e:14:f4:24:e0:51:28:52:
aa:38:95:d0:6d:a8:99:a9:c2:04:8c:37:b2:3e:45:
5a:9f:3a:f5:de:c0:70:2b:ec:88:3c:60:77:fe:41:
d6:3b:17:78:dd:27:85:2f:22:bc:e3:1b:48:ab:03:
3e:7c:2e:e4:e8:20:5d:0b:4f:fa:8b:b6:c7:d6:3e:
a7:5a:d6:a4:4c:b0:37:47:66:e1:7b:f2:7a:4e:0c:
6d:6e:fd:31:43:3a:15:fb:bb:ae:44:cf:c2:0a:69:
b7:f6:89:af:2e:14:6f:3c:a1:19:9b:34:ba:3a:32:
f8:5b:19:30:d7:52:5e:ec:73:89:7d:e4:0d:a3:60:
cd:a5:57:3c:05:dc:02:06:f2:24:a3:ed:08:67:df:
63:1d:b1:a8:fb:2f:ae:a7:c2:f2:6a:7b:db:60:37:
1d:d4:6a:e2:5f:c2:71:03:f9:96:ca:4d:d8:08:d0:
ea:1c:f7:20:d3:bd:6d:a9:ed:86:7e:77:6b:8e:69:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:C7:38:60:97:A2:F6:6A:37:4E:54:07:10:08:99:16:52:97:46
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rAbHOGCXovZqN05UBxAImRZSl0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:b4:ef:5f:e2:91:6b:fe:27:29:a0:39:67:19:ce:1f:81:e6:
23:a6:bf:19:96:02:97:07:be:65:c9:22:fc:ec:b4:28:98:c5:
fd:47:e5:2d:f4:50:2e:37:e8:4e:c3:f2:3b:ca:88:9a:b9:3a:
7d:13:99:85:5c:42:c3:d2:8e:87:69:97:1b:2a:2d:6e:b3:fb:
32:f4:c7:dd:29:76:e6:a3:3b:c9:35:20:42:33:c7:38:c3:aa:
6d:ee:83:b7:a7:3b:2e:04:d9:11:fe:3d:38:8a:17:06:3b:85:
d9:20:ee:14:8b:79:cf:76:65:3e:be:0f:26:e7:22:54:ac:84:
bb:01:41:40:4c:6b:7b:dd:6b:d8:e9:68:f0:e8:f0:4b:c8:ac:
e9:47:7c:30:49:bc:d4:fe:8e:8f:f7:b1:af:5e:eb:98:61:d6:
2d:28:5d:33:ce:5b:8c:1b:2b:c2:67:28:85:cd:d3:05:5d:7a:
35:df:c3:16:31:cc:80:c2:7b:33:27:5f:72:55:43:93:44:2b:
92:bb:91:82:f2:07:e4:d0:53:8e:a2:be:55:da:83:cf:91:2e:
97:e4:a6:59:a1:7b:fb:55:fd:a7:a1:5b:8c:ad:f0:ff:52:1b:
00:dc:30:09:9e:83:fb:d4:df:5d:9b:af:e5:da:2b:cf:5d:66:
16:03:4e:40
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxOufucfH7XijiSicKE+mC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA5MTMxNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzA2YzczODYwOTdhMmY2NmEzNzRlNTQwNzEwMDg5OTE2NTI5NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Bmo6DLLwYczQldVWsyTlWNTw1n
DBsDyI/yJnzWcvuiyTTxzY2v5obYyav0AnaYUT1+COOueJQocCBV6Ri6VOxRHhT0
JOBRKFKqOJXQbaiZqcIEjDeyPkVanzr13sBwK+yIPGB3/kHWOxd43SeFLyK84xtI
qwM+fC7k6CBdC0/6i7bH1j6nWtakTLA3R2bhe/J6Tgxtbv0xQzoV+7uuRM/CCmm3
9omvLhRvPKEZmzS6OjL4Wxkw11Je7HOJfeQNo2DNpVc8BdwCBvIko+0IZ99jHbGo
+y+up8LyanvbYDcd1GriX8JxA/mWyk3YCNDqHPcg071tqe2GfndrjmkV/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKwGxzhgl6L2ajdOVAcQCJkWUpdGMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvckFiSE9HQ1hvdlpxTjA1VUJ4QUltUlpTbDBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJC071/ikWv+JymgOWcZ
zh+B5iOmvxmWApcHvmXJIvzstCiYxf1H5S30UC436E7D8jvKiJq5On0TmYVcQsPS
jodplxsqLW6z+zL0x90pduajO8k1IEIzxzjDqm3ug7enOy4E2RH+PTiKFwY7hdkg
7hSLec92ZT6+DybnIlSshLsBQUBMa3vda9jpaPDo8EvIrOlHfDBJvNT+jo/3sa9e
65hh1i0oXTPOW4wbK8JnKIXN0wVdejXfwxYxzIDCezMnX3JVQ5NEK5K7kYLyB+TQ
U46ivlXag8+RLpfkplmhe/tV/aehW4yt8P9SGwDcMAmeg/vU312br+XaK89dZhYD
TkA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:15 2025 by rpki-client