Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u2hXI5Fdbvg-uTaQt1-DqwKDquo.roa
File: u2hXI5Fdbvg-uTaQt1-DqwKDquo.roa (raw, json)
Hash identifier: TSQC7om0VUvn61GTqssHo6wZvuYxQtoQ8oxpdr0RSa4=
Subject key identifier: BB:68:57:23:91:5D:6E:F8:3E:B9:36:90:B7:5F:83:AB:02:83:AA:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACCB2506A8330945AEE628DACDA5A118A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u2hXI5Fdbvg-uTaQt1-DqwKDquo.roa
Signing time: Mon 25 Sep 2023 14:15:52 +0000
ROA not before: Mon 25 Sep 2023 14:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:b2:50:6a:83:30:94:5a:ee:62:8d:ac:da:5a:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 14:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb685723915d6ef83eb93690b75f83ab0283aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:a9:99:c4:d9:dc:34:7c:23:6e:4f:63:01:
87:dc:07:a4:6b:f7:db:bf:12:ab:02:13:47:1e:f0:
49:51:aa:d5:57:50:00:26:76:52:c3:85:9e:79:f3:
87:85:f9:8d:1c:97:f2:02:32:f8:6b:7d:21:29:5d:
a1:e3:16:50:78:58:70:97:ec:49:86:ea:f1:c1:0d:
fc:13:53:0b:87:66:05:f0:83:66:59:46:2d:41:b0:
b9:de:cd:5a:dd:07:4a:c8:94:9e:78:4c:43:61:22:
b6:c2:0e:7a:fa:79:d1:49:f4:a9:17:d5:87:21:07:
ac:70:ae:2f:74:07:83:64:db:5a:05:1a:6f:74:f6:
40:68:eb:6a:60:8f:de:de:8e:b1:01:04:a1:ce:46:
39:54:e2:1f:6c:fa:9b:2d:82:17:dd:e6:10:d9:69:
fe:93:c7:3d:39:0c:d7:f4:12:cb:68:2c:2b:f5:40:
f4:78:af:d5:fe:b0:fb:8f:1a:70:ea:82:e2:91:3f:
9f:7a:1b:d7:42:2a:7f:27:51:60:a9:ec:67:8d:b6:
ec:7e:06:c5:af:fc:6d:9c:03:8e:f2:07:79:47:e3:
69:49:41:78:22:7e:6f:4f:b7:b6:bd:58:3a:12:29:
b8:97:70:59:36:5e:63:11:4d:ba:35:a2:fa:ca:69:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:57:23:91:5D:6E:F8:3E:B9:36:90:B7:5F:83:AB:02:83:AA:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/u2hXI5Fdbvg-uTaQt1-DqwKDquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ce:38:c2:23:bc:2c:6f:db:ff:3e:8c:89:45:72:5d:bd:ba:
4e:e8:b2:7c:3e:f1:00:4d:fc:4d:04:e0:5b:9a:79:4f:3e:11:
57:53:5a:9d:ae:cc:62:8c:c4:c9:6a:e9:5f:a4:d8:3e:10:62:
97:46:9e:51:56:3d:56:37:55:c9:75:94:19:b5:57:3e:64:ae:
a8:69:e8:71:fe:e5:0e:64:d0:0b:84:77:ed:1a:23:78:0d:de:
d3:81:e6:7d:cb:d0:93:1e:6f:ca:28:39:4b:40:0e:26:d2:8b:
36:24:ec:61:4c:80:9b:da:00:b8:72:b3:b6:8f:ac:10:37:0e:
a2:c3:5b:7a:06:ff:87:25:3f:46:52:95:9d:d3:d2:49:89:a9:
c8:61:71:57:23:45:c0:4e:c4:7c:51:42:6e:a0:8a:f1:31:e7:
8c:d6:81:9b:67:5e:b8:63:80:da:e7:6a:f9:54:c3:f6:9d:24:
72:9b:76:8f:25:b0:fd:f0:54:7c:b9:e8:8c:3c:99:0c:e6:c7:
bd:6a:1d:d6:0f:9f:41:87:0f:0b:e8:e1:22:7a:25:f8:7f:95:
01:48:be:7a:40:4a:d4:84:5c:37:b6:16:7c:f3:02:cd:7c:36:
29:4b:c8:17:e4:d6:7a:cb:bc:2a:30:68:bc:01:d8:3e:43:ae:
bb:a8:9f:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrMslBqgzCUWu5ijazaWhGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI1MTQxNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjY4NTcyMzkxNWQ2ZWY4M2ViOTM2OTBiNzVmODNhYjAyODNhYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTupmcTZ3DR8I25PYwGH3Aeka/fb
vxKrAhNHHvBJUarVV1AAJnZSw4WeefOHhfmNHJfyAjL4a30hKV2h4xZQeFhwl+xJ
hurxwQ38E1MLh2YF8INmWUYtQbC53s1a3QdKyJSeeExDYSK2wg56+nnRSfSpF9WH
IQescK4vdAeDZNtaBRpvdPZAaOtqYI/e3o6xAQShzkY5VOIfbPqbLYIX3eYQ2Wn+
k8c9OQzX9BLLaCwr9UD0eK/V/rD7jxpw6oLikT+fehvXQip/J1FgqexnjbbsfgbF
r/xtnAOO8gd5R+NpSUF4In5vT7e2vVg6Eim4l3BZNl5jEU26NaL6ymmKswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLtoVyORXW74Prk2kLdfg6sCg6rqMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdTJoWEk1RmRidmctdVRhUXQxLURxd0tEcXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJvOOMIjvCxv2/8+jIlF
cl29uk7osnw+8QBN/E0E4FuaeU8+EVdTWp2uzGKMxMlq6V+k2D4QYpdGnlFWPVY3
Vcl1lBm1Vz5krqhp6HH+5Q5k0AuEd+0aI3gN3tOB5n3L0JMeb8ooOUtADibSizYk
7GFMgJvaALhys7aPrBA3DqLDW3oG/4clP0ZSlZ3T0kmJqchhcVcjRcBOxHxRQm6g
ivEx54zWgZtnXrhjgNrnavlUw/adJHKbdo8lsP3wVHy56Iw8mQzmx71qHdYPn0GH
Dwvo4SJ6Jfh/lQFIvnpAStSEXDe2FnzzAs18NilLyBfk1nrLvCowaLwB2D5Drruo
nwI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:04:01 2025 by rpki-client