Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIdCxX9jxKqoJCYy4ySLpTifmy4.roa
File: uIdCxX9jxKqoJCYy4ySLpTifmy4.roa (raw, json)
Hash identifier: 8SpAnem7+Rg0QSMlYe4HsxWGd0gCSR7BBPEBBVi8x9g=
Subject key identifier: B8:87:42:C5:7F:63:C4:AA:A8:24:26:32:E3:24:8B:A5:38:9F:9B:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B010AC1A8DE9AFBC84C66755C491FDE19
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIdCxX9jxKqoJCYy4ySLpTifmy4.roa
Signing time: Thu 05 Oct 2023 18:12:43 +0000
ROA not before: Thu 05 Oct 2023 18:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:0a:c1:a8:de:9a:fb:c8:4c:66:75:5c:49:1f:de:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 18:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b88742c57f63c4aaa8242632e3248ba5389f9b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:91:8d:cd:98:fe:c1:94:ea:32:ca:2f:53:
f0:ef:c1:34:4a:be:2c:ed:51:5b:75:23:49:f6:2c:
1b:31:98:1f:46:3b:32:99:33:64:e9:b2:81:d5:b5:
71:75:ba:c6:25:36:d0:a7:6c:d5:a5:eb:b7:24:25:
12:9c:9a:2d:7e:0c:53:7b:ab:ac:09:44:15:46:72:
26:79:c7:d5:da:2b:f7:ba:bf:31:81:2a:3d:3d:04:
ad:d6:52:4d:7c:b2:e5:e0:5d:03:59:fe:9e:dd:32:
b4:e0:88:14:94:90:7c:64:58:3e:39:d2:b6:28:48:
3d:91:a0:cf:a9:25:c9:3b:7f:7c:7a:9c:cf:7f:c3:
d1:19:5e:e9:49:61:8b:d5:2f:cf:6f:b3:51:e8:12:
ff:36:14:0a:24:f0:52:03:4e:31:39:24:b2:1d:cc:
d1:81:0f:40:7c:b6:d0:0d:7c:4e:f7:dc:9c:18:ed:
cb:ad:8e:90:8a:f7:e7:16:ba:50:f5:d3:08:39:8b:
22:13:b4:29:d0:41:08:06:6f:0a:94:31:51:6c:43:
c5:0b:d6:28:d4:d3:29:99:40:d0:b5:75:0b:65:a0:
20:89:ca:de:8b:f9:10:0e:40:e6:e3:87:cb:eb:1c:
b1:17:cb:26:11:91:ec:d0:18:61:bd:aa:75:5d:a0:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:42:C5:7F:63:C4:AA:A8:24:26:32:E3:24:8B:A5:38:9F:9B:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uIdCxX9jxKqoJCYy4ySLpTifmy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:4c:4f:e3:2f:84:7e:fe:b2:63:87:b5:8b:01:6a:ae:8e:15:
bc:86:d2:ae:cb:e7:2a:6e:9d:d5:31:4d:e1:8a:c8:df:48:5b:
70:96:45:36:2a:d0:92:d1:00:51:62:0a:bb:28:73:8d:7c:32:
2f:b1:0b:f3:a5:35:99:8a:02:34:b8:29:f9:b6:a1:78:c3:e9:
6e:44:6a:04:3f:68:67:5c:69:7a:2d:ac:35:98:e9:36:85:35:
21:99:1c:41:3e:79:6a:87:9d:af:b1:6b:1e:4e:07:dd:a3:3a:
a0:2f:88:10:0e:94:2c:bd:2b:0d:fb:ec:bf:96:16:89:69:bd:
ea:08:44:40:b0:e5:a7:92:c5:ab:f9:10:b4:8e:58:18:80:6b:
67:3d:a6:42:f4:41:a3:1c:40:f8:db:3c:fd:0f:c2:15:be:ab:
50:49:f6:ed:54:a9:a4:d5:25:85:ba:60:a1:55:e8:61:8f:1c:
e5:29:58:a9:6a:32:c3:41:f5:45:a7:4b:9d:e0:2f:8a:44:40:
39:7f:10:1c:c5:e6:41:4f:1c:9b:43:53:6c:34:52:18:f0:85:
a4:6e:50:1f:f0:ca:ce:c7:53:fc:c7:de:59:76:84:c9:0d:66:
6a:2d:2e:33:c7:f0:a7:c9:58:0b:65:d2:0b:5a:b4:20:03:5a:
09:a0:ff:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsBCsGo3pr7yExmdVxJH94ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MTgxMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg3NDJjNTdmNjNjNGFhYTgyNDI2MzJlMzI0OGJhNTM4OWY5YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnKRjc2Y/sGU6jLKL1Pw78E0Sr4s
7VFbdSNJ9iwbMZgfRjsymTNk6bKB1bVxdbrGJTbQp2zVpeu3JCUSnJotfgxTe6us
CUQVRnImecfV2iv3ur8xgSo9PQSt1lJNfLLl4F0DWf6e3TK04IgUlJB8ZFg+OdK2
KEg9kaDPqSXJO398epzPf8PRGV7pSWGL1S/Pb7NR6BL/NhQKJPBSA04xOSSyHczR
gQ9AfLbQDXxO99ycGO3LrY6QivfnFrpQ9dMIOYsiE7Qp0EEIBm8KlDFRbEPFC9Yo
1NMpmUDQtXULZaAgicrei/kQDkDm44fL6xyxF8smEZHs0Bhhvap1XaBsBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLiHQsV/Y8SqqCQmMuMki6U4n5suMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdUlkQ3hYOWp4S3FvSkNZeTR5U0xwVGlmbXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ5MT+MvhH7+smOHtYsB
aq6OFbyG0q7L5ypundUxTeGKyN9IW3CWRTYq0JLRAFFiCrsoc418Mi+xC/OlNZmK
AjS4Kfm2oXjD6W5EagQ/aGdcaXotrDWY6TaFNSGZHEE+eWqHna+xax5OB92jOqAv
iBAOlCy9Kw377L+WFolpveoIRECw5aeSxav5ELSOWBiAa2c9pkL0QaMcQPjbPP0P
whW+q1BJ9u1UqaTVJYW6YKFV6GGPHOUpWKlqMsNB9UWnS53gL4pEQDl/EBzF5kFP
HJtDU2w0UhjwhaRuUB/wys7HU/zH3ll2hMkNZmotLjPH8KfJWAtl0gtatCADWgmg
/5g=
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:07:30 2025 by rpki-client