Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyVEMIU9cZZRkl4dhYslasdmHY.roa
File: sYyVEMIU9cZZRkl4dhYslasdmHY.roa (raw, json)
Hash identifier: MNT1E46lY5jZ4fXSKABgJBKMJ1IiJ+kyJUQZUWFpdK8=
Subject key identifier: B1:8C:95:10:C2:14:F5:C6:59:46:49:78:76:16:2C:95:AB:1D:98:76
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C156E6BA20ED8FF4C8DFE4880269E423A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyVEMIU9cZZRkl4dhYslasdmHY.roa
Signing time: Tue 28 Nov 2023 10:16:47 +0000
ROA not before: Tue 28 Nov 2023 10:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:6e:6b:a2:0e:d8:ff:4c:8d:fe:48:80:26:9e:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 10:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b18c9510c214f5c65946497876162c95ab1d9876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:74:a6:f3:07:91:de:2e:d8:5e:bb:9f:9a:
6c:94:94:63:2f:6a:56:cf:52:15:20:d3:70:44:c3:
8d:cf:8b:fe:92:1b:ab:d2:5e:56:b5:bd:8f:92:e8:
8c:9d:37:41:07:fe:a8:23:c1:ec:aa:a2:06:d9:e5:
be:f7:3b:bd:28:b4:01:51:35:ac:fd:7e:71:0a:91:
1b:4b:1c:03:3c:e6:41:22:1a:4b:7a:2a:f5:ba:99:
3c:92:fe:83:22:e9:63:26:04:42:1b:3b:2a:f4:8a:
d5:bc:03:f5:49:39:28:f1:4b:2e:fe:07:49:05:cb:
6a:9a:86:6b:5f:09:72:2b:35:a1:6e:52:99:dc:3b:
6e:c5:58:0a:2a:46:2e:7c:78:85:4e:0d:df:57:be:
a7:11:16:55:cd:20:55:02:29:23:10:ea:80:a1:03:
14:61:88:49:d8:2a:33:30:4c:2a:e3:52:0c:e0:df:
e2:6a:e9:36:40:ab:d8:61:72:0b:55:31:de:4b:9a:
46:e9:53:ec:04:54:19:e0:43:7b:2b:f1:09:7c:03:
80:18:c2:b1:b5:ab:42:4b:0b:5e:e8:fa:ed:68:86:
44:a9:63:ca:9e:f1:6d:76:37:59:16:7b:97:28:7e:
87:3d:3f:db:3f:ad:f4:85:4e:36:7d:89:e5:3d:b0:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:95:10:C2:14:F5:C6:59:46:49:78:76:16:2C:95:AB:1D:98:76
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sYyVEMIU9cZZRkl4dhYslasdmHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:6f:32:a0:a6:a1:34:da:80:a4:5f:51:16:2b:16:32:15:8e:
20:d1:e9:af:f5:60:14:e4:73:4b:9d:eb:90:48:84:b0:96:52:
cb:b0:50:02:c1:1d:de:0a:68:ad:e8:f6:73:0f:0d:e2:45:4c:
e3:66:e5:f5:31:2e:9a:ec:79:f2:7a:82:9e:00:98:67:bc:6d:
9a:41:da:a0:78:b4:8a:38:59:52:77:57:d1:7f:35:9d:80:6d:
0c:1d:9a:b2:bb:1f:39:09:f5:0f:88:03:b8:7b:b6:b6:44:e2:
e1:20:9f:f2:da:b5:a6:f6:f9:e9:86:85:f8:7d:88:68:9d:d8:
5e:44:94:d2:4f:7d:d8:23:56:19:3c:1f:92:90:53:54:ee:c5:
8f:7b:44:7a:2d:4f:cd:92:47:ec:18:2d:f2:00:d2:11:df:4f:
49:81:58:57:70:8d:04:bc:8b:45:1a:e2:85:ec:2f:f7:ed:b1:
3e:c1:21:79:e6:7f:d1:b0:63:f2:d7:96:d7:71:2e:d3:80:ae:
45:6f:d8:d5:74:c2:cc:eb:27:d9:a9:b0:bd:1d:17:ad:61:4d:
73:e8:35:a0:14:ea:2c:65:9d:33:c7:46:90:4c:df:10:1b:3d:
c5:cb:9f:b4:6e:42:63:bc:b7:b1:4e:34:e7:5a:7d:61:d0:a6:
d5:d4:d0:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwVbmuiDtj/TI3+SIAmnkI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI4MTAxNjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThjOTUxMGMyMTRmNWM2NTk0NjQ5Nzg3NjE2MmM5NWFiMWQ5ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLB0pvMHkd4u2F67n5pslJRjL2pW
z1IVINNwRMONz4v+khur0l5Wtb2PkuiMnTdBB/6oI8HsqqIG2eW+9zu9KLQBUTWs
/X5xCpEbSxwDPOZBIhpLeir1upk8kv6DIuljJgRCGzsq9IrVvAP1STko8Usu/gdJ
BctqmoZrXwlyKzWhblKZ3DtuxVgKKkYufHiFTg3fV76nERZVzSBVAikjEOqAoQMU
YYhJ2CozMEwq41IM4N/iauk2QKvYYXILVTHeS5pG6VPsBFQZ4EN7K/EJfAOAGMKx
tatCSwte6PrtaIZEqWPKnvFtdjdZFnuXKH6HPT/bP630hU42fYnlPbAjewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLGMlRDCFPXGWUZJeHYWLJWrHZh2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc1l5VkVNSVU5Y1paUmtsNGRoWXNsYXNkbUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKpvMqCmoTTagKRfURYr
FjIVjiDR6a/1YBTkc0ud65BIhLCWUsuwUALBHd4KaK3o9nMPDeJFTONm5fUxLprs
efJ6gp4AmGe8bZpB2qB4tIo4WVJ3V9F/NZ2AbQwdmrK7HzkJ9Q+IA7h7trZE4uEg
n/Latab2+emGhfh9iGid2F5ElNJPfdgjVhk8H5KQU1TuxY97RHotT82SR+wYLfIA
0hHfT0mBWFdwjQS8i0Ua4oXsL/ftsT7BIXnmf9GwY/LXltdxLtOArkVv2NV0wszr
J9mpsL0dF61hTXPoNaAU6ixlnTPHRpBM3xAbPcXLn7RuQmO8t7FONOdafWHQptXU
0LE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:10:20 2025 by rpki-client