Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t85JdP72yOjUbUQ-ih4SN5gt2VU.roa
File: t85JdP72yOjUbUQ-ih4SN5gt2VU.roa (raw, json)
Hash identifier: Ir+69aNNKpAIQ1Cb+rUpxM73oISAASEIpSIm4bdfBLM=
Subject key identifier: B7:CE:49:74:FE:F6:C8:E8:D4:6D:44:3E:8A:1E:12:37:98:2D:D9:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C793159B50E27B1BA95A022D3AB1E07A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t85JdP72yOjUbUQ-ih4SN5gt2VU.roa
Signing time: Sun 17 Dec 2023 19:12:06 +0000
ROA not before: Sun 17 Dec 2023 19:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:31:59:b5:0e:27:b1:ba:95:a0:22:d3:ab:1e:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 19:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ce4974fef6c8e8d46d443e8a1e1237982dd955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:93:ae:40:bf:c1:4b:2e:e5:e7:a9:f5:e3:
fc:e9:8b:46:19:a2:a4:25:a7:9b:b5:7b:ac:2b:ce:
9a:2b:51:16:d6:f7:d2:e9:6c:fa:9e:60:11:7a:22:
dc:2a:be:86:d2:e7:f0:1c:d9:83:d7:2d:a5:00:a2:
c7:31:e4:f9:ed:4f:b1:a6:1e:1c:72:8b:7d:97:29:
34:1a:41:4f:3c:9f:67:24:fc:f7:55:52:83:30:ac:
50:db:4b:37:3f:98:86:0c:b9:8c:ed:a3:84:a3:45:
09:e1:85:5b:64:4c:ef:bd:a1:f1:af:77:3a:4e:ea:
4e:d9:6e:0e:95:29:12:d6:9c:86:3d:22:8a:0e:97:
2f:f8:57:b7:87:5b:96:92:ca:b0:d0:84:f2:eb:7b:
8e:04:6a:56:1a:bf:5d:fc:fa:f2:56:d3:62:4e:01:
99:d8:73:5e:ed:a4:e2:e0:ea:ee:1e:3d:44:b3:7e:
be:6f:38:8b:e9:2d:59:94:83:65:2f:5c:13:85:61:
ad:f5:29:46:93:36:ae:b6:05:96:f3:38:f3:56:79:
e9:8b:7f:d3:3a:d5:63:47:dd:a5:75:93:17:e0:09:
63:e7:b1:78:b1:8f:c7:22:c4:aa:f8:d9:a9:b4:50:
e6:6b:a6:26:26:3b:4d:b8:e5:ed:5f:ef:d5:4e:2d:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:49:74:FE:F6:C8:E8:D4:6D:44:3E:8A:1E:12:37:98:2D:D9:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t85JdP72yOjUbUQ-ih4SN5gt2VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:b8:58:17:08:62:65:52:c3:e1:97:d3:4c:88:bd:c3:7d:61:
d4:41:ff:1c:18:63:7d:05:90:83:20:68:a7:a6:46:ef:12:19:
72:03:ea:a4:b8:ab:07:87:5e:a9:2b:63:e8:4c:f1:3f:58:c8:
04:55:da:de:20:f6:94:93:63:02:38:83:5d:99:62:d1:51:8d:
68:76:f5:6d:81:ff:09:97:71:20:90:49:d9:d7:43:06:81:ec:
95:13:ec:25:2d:72:c5:92:f2:cc:11:7b:76:99:8b:6c:66:0a:
f1:fa:70:73:0a:68:1a:fc:4b:0a:9e:e0:5d:92:87:45:49:65:
18:3c:02:5b:bc:a0:1b:d3:44:69:7c:a2:48:06:bf:da:65:16:
a9:4c:b4:41:71:6d:6d:17:45:62:7b:94:7e:5b:2c:7c:71:98:
98:e9:4a:29:d7:c8:31:f6:11:46:0d:90:54:f4:cc:1c:ca:de:
bf:14:4c:6e:73:11:29:64:59:f9:11:82:96:53:91:02:23:cc:
01:e6:8f:07:e5:8c:cb:67:38:7b:94:69:ea:94:8d:b7:f2:7b:
c5:17:9f:7a:22:b9:9b:97:b5:98:32:38:11:59:05:68:6c:54:
47:15:a7:ac:57:ec:90:ec:47:70:e9:ce:23:1c:86:db:3a:87:
35:0e:64:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx5MVm1DiexupWgItOrHgepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MTkxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2NlNDk3NGZlZjZjOGU4ZDQ2ZDQ0M2U4YTFlMTIzNzk4MmRkOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhyTrkC/wUsu5eep9eP86YtGGaKk
JaebtXusK86aK1EW1vfS6Wz6nmAReiLcKr6G0ufwHNmD1y2lAKLHMeT57U+xph4c
cot9lyk0GkFPPJ9nJPz3VVKDMKxQ20s3P5iGDLmM7aOEo0UJ4YVbZEzvvaHxr3c6
TupO2W4OlSkS1pyGPSKKDpcv+Fe3h1uWksqw0ITy63uOBGpWGr9d/PryVtNiTgGZ
2HNe7aTi4OruHj1Es36+bziL6S1ZlINlL1wThWGt9SlGkzautgWW8zjzVnnpi3/T
OtVjR92ldZMX4Alj57F4sY/HIsSq+NmptFDma6YmJjtNuOXtX+/VTi2THQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLfOSXT+9sjo1G1EPooeEjeYLdlVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdDg1SmRQNzJ5T2pVYlVRLWloNFNONWd0MlZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJW4WBcIYmVSw+GX00yI
vcN9YdRB/xwYY30FkIMgaKemRu8SGXID6qS4qweHXqkrY+hM8T9YyARV2t4g9pST
YwI4g12ZYtFRjWh29W2B/wmXcSCQSdnXQwaB7JUT7CUtcsWS8swRe3aZi2xmCvH6
cHMKaBr8Swqe4F2Sh0VJZRg8Alu8oBvTRGl8okgGv9plFqlMtEFxbW0XRWJ7lH5b
LHxxmJjpSinXyDH2EUYNkFT0zBzK3r8UTG5zESlkWfkRgpZTkQIjzAHmjwfljMtn
OHuUaeqUjbfye8UXn3oiuZuXtZgyOBFZBWhsVEcVp6xX7JDsR3DpziMchts6hzUO
ZKk=
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:44:19 2025 by rpki-client