Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sMdBDOSpZtgp3KaEA5WTjA-svhw.roa
File: sMdBDOSpZtgp3KaEA5WTjA-svhw.roa (raw, json)
Hash identifier: FphjtRq0VU5YzIZTGPZT1GypiOMpDVoPQgA/t/4EOow=
Subject key identifier: B0:C7:41:0C:E4:A9:66:D8:29:DC:A6:84:03:95:93:8C:0F:AC:BE:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7E514BDFA353C793E5422E7D0CC47E34
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sMdBDOSpZtgp3KaEA5WTjA-svhw.roa
Signing time: Mon 18 Dec 2023 19:05:06 +0000
ROA not before: Mon 18 Dec 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:7e50:787e/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:51:4b:df:a3:53:c7:93:e5:42:2e:7d:0c:c4:7e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c7410ce4a966d829dca6840395938c0facbe1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:2c:19:13:e8:2c:16:73:95:4b:8f:95:99:
04:05:04:fe:d0:f8:43:15:57:72:96:65:e0:00:e6:
c6:01:9e:b9:30:77:b6:c0:ee:f7:17:34:89:5d:e5:
82:c3:f6:ff:e9:88:f7:77:1e:69:2f:42:ef:b2:41:
81:cc:14:a5:26:4c:1e:bb:30:58:1a:a4:d1:64:74:
bd:ff:90:5e:77:02:85:bc:dc:31:d2:ee:39:cb:61:
42:ee:ce:1f:bc:95:e2:a9:ac:d6:eb:9b:56:f4:2a:
29:ce:a7:09:77:3e:4b:90:38:c3:bb:50:40:c8:25:
b1:da:75:53:d6:8a:14:9d:e9:91:9d:3a:e8:5b:b4:
4b:e2:7a:b9:a9:9d:62:23:0e:cf:62:38:bc:78:9a:
6f:ab:5b:a1:17:68:b5:55:b3:0b:1d:b3:e9:24:00:
65:77:40:71:a7:65:e2:8c:ec:db:08:f7:c5:87:5a:
d2:df:69:7d:1c:86:3a:da:c6:7b:0d:5f:9a:dd:de:
b3:e7:e8:c9:11:4c:81:11:ef:85:f4:47:ac:9d:eb:
fe:d7:03:4c:7e:0a:ab:03:11:16:8d:1a:a9:2d:cc:
70:04:47:21:00:fb:f1:ee:f2:63:2f:07:f2:ef:ad:
15:f0:e1:8b:5d:14:89:83:32:94:7b:78:29:eb:ea:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:41:0C:E4:A9:66:D8:29:DC:A6:84:03:95:93:8C:0F:AC:BE:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sMdBDOSpZtgp3KaEA5WTjA-svhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:ce:ae:1b:57:ab:c1:c6:7c:02:74:7b:e8:c0:49:3c:5a:46:
47:75:5d:86:b5:be:59:35:3c:0b:06:65:5b:e3:20:62:84:3f:
f1:20:1a:e9:ae:e2:f2:2c:83:c3:04:0b:ab:4d:e6:db:9a:86:
9a:4b:a2:80:89:e2:9c:02:e5:c1:30:30:0d:43:6e:d8:0e:c9:
43:0d:2e:eb:a9:b4:ec:f1:93:4a:bb:a6:c3:c1:1f:08:a6:97:
95:1c:5c:d5:c2:5d:2a:ba:63:78:c2:80:a4:34:fb:a7:92:2e:
ee:07:c5:58:1c:9f:68:a1:64:f0:ec:e0:48:34:e2:a1:86:8a:
07:e1:c4:a6:f6:6b:77:fa:81:f8:fd:87:b7:ba:b8:1c:d0:4c:
e9:46:0d:6f:22:2c:a2:18:97:66:36:ca:18:19:90:1c:aa:c2:
40:83:41:59:83:5f:2d:b1:4b:23:f9:6d:d7:40:44:a1:de:0e:
dc:b7:5d:10:16:87:44:2e:cd:3f:94:68:fc:1a:da:95:c7:fc:
b2:da:3f:f4:23:28:6c:b5:ee:b9:2a:ca:96:0f:8a:3b:f0:df:
24:85:9c:48:b8:88:93:d6:2c:03:b0:22:21:3e:7e:eb:df:eb:
67:9b:a7:fe:4a:fb:87:eb:70:0e:d8:6b:91:94:11:2c:07:b9:
ab:c2:8c:cf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx+UUvfo1PHk+VCLn0MxH40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE4MTkwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGM3NDEwY2U0YTk2NmQ4MjlkY2E2ODQwMzk1OTM4YzBmYWNiZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPUsGRPoLBZzlUuPlZkEBQT+0PhD
FVdylmXgAObGAZ65MHe2wO73FzSJXeWCw/b/6Yj3dx5pL0LvskGBzBSlJkweuzBY
GqTRZHS9/5BedwKFvNwx0u45y2FC7s4fvJXiqazW65tW9CopzqcJdz5LkDjDu1BA
yCWx2nVT1ooUnemRnTroW7RL4nq5qZ1iIw7PYji8eJpvq1uhF2i1VbMLHbPpJABl
d0Bxp2XijOzbCPfFh1rS32l9HIY62sZ7DV+a3d6z5+jJEUyBEe+F9Eesnev+1wNM
fgqrAxEWjRqpLcxwBEchAPvx7vJjLwfy760V8OGLXRSJgzKUe3gp6+rq1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLDHQQzkqWbYKdymhAOVk4wPrL4cMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc01kQkRPU3BadGdwM0thRUE1V1RqQS1zdmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHXOrhtXq8HGfAJ0e+jA
STxaRkd1XYa1vlk1PAsGZVvjIGKEP/EgGumu4vIsg8MEC6tN5tuahppLooCJ4pwC
5cEwMA1DbtgOyUMNLuuptOzxk0q7psPBHwiml5UcXNXCXSq6Y3jCgKQ0+6eSLu4H
xVgcn2ihZPDs4Eg04qGGigfhxKb2a3f6gfj9h7e6uBzQTOlGDW8iLKIYl2Y2yhgZ
kByqwkCDQVmDXy2xSyP5bddARKHeDty3XRAWh0QuzT+UaPwa2pXH/LLaP/QjKGy1
7rkqypYPijvw3ySFnEi4iJPWLAOwIiE+fuvf62ebp/5K+4frcA7Ya5GUESwHuavC
jM8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:04 2025 by rpki-client