Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v4jyOVqhCrh1XRS9zgKga3kci4U.roa
File: v4jyOVqhCrh1XRS9zgKga3kci4U.roa (raw, json)
Hash identifier: KpWJV7WbJV5yzf+TpVM1ijwGCR4vPH85j26LBOqvG2k=
Subject key identifier: BF:88:F2:39:5A:A1:0A:B8:75:5D:14:BD:CE:02:A0:6B:79:1C:8B:85
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCCA5C360A056011669C30C14E84B816C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v4jyOVqhCrh1XRS9zgKga3kci4U.roa
Signing time: Tue 14 Nov 2023 07:04:57 +0000
ROA not before: Tue 14 Nov 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:cca5:2560/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:a5:c3:60:a0:56:01:16:69:c3:0c:14:e8:4b:81:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf88f2395aa10ab8755d14bdce02a06b791c8b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:7f:1b:db:d6:a0:f9:b5:f5:91:63:36:27:
36:27:30:89:59:42:f3:6d:b7:b4:71:b3:0f:c0:ab:
3f:74:da:75:22:93:88:0e:e0:df:94:cb:2e:48:29:
11:9b:50:04:27:e6:4e:f7:fb:f2:52:32:71:48:93:
6e:39:72:72:99:bf:3b:09:5d:74:0d:72:67:62:7f:
3c:ea:7a:5b:42:04:5b:e4:e0:17:ab:e0:cc:b7:1b:
09:3e:2c:ff:4f:ba:17:91:24:9a:da:a1:92:9e:ae:
27:43:c9:b4:95:ae:ce:c6:8a:25:1a:03:23:22:3b:
fe:8c:76:74:f1:17:6a:e6:b5:3e:74:18:de:d5:df:
ce:8e:3f:52:8c:90:43:be:31:84:f3:11:4c:ee:bb:
d5:08:a3:12:aa:8b:a3:6c:76:7a:4b:32:16:8d:42:
5d:bb:8f:6f:da:f0:0e:32:56:05:0f:bd:1f:c9:b2:
b9:86:7b:09:00:d5:80:e2:19:3e:24:c9:4a:dd:95:
b5:34:2d:17:4f:89:69:69:1f:97:fc:d2:88:04:3f:
5e:64:99:73:99:54:07:5b:a3:28:a5:82:9b:3d:06:
55:0b:c2:ef:e8:41:bb:32:40:6d:ad:b2:87:17:88:
b1:2c:45:ba:f2:83:a7:08:1a:cb:28:8a:96:dc:73:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:F2:39:5A:A1:0A:B8:75:5D:14:BD:CE:02:A0:6B:79:1C:8B:85
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v4jyOVqhCrh1XRS9zgKga3kci4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:65:41:d3:dd:b5:4e:04:eb:58:71:5b:f0:f1:be:46:eb:54:
c4:6e:03:0a:fb:55:8a:dd:70:3a:a6:d5:6b:08:73:9b:ff:4a:
ee:21:f3:9d:e2:ff:1d:c5:31:3c:36:ac:3e:52:89:3b:cf:41:
5a:a3:1f:fd:e4:1f:ff:08:1e:bb:cf:98:ac:44:75:29:f7:55:
05:61:42:77:d7:f8:d2:ae:39:28:44:40:5b:e6:3d:44:8e:d5:
a3:72:b9:fa:dd:89:dc:60:0c:4a:d2:8f:94:d0:aa:c3:c6:b8:
05:62:4f:87:23:89:d3:49:25:ba:13:07:3b:c7:d6:8c:64:4e:
b3:ce:79:5f:b2:6e:e5:b3:41:f7:0c:d2:69:a8:14:9b:05:4d:
13:07:3f:15:c7:e6:7d:95:bf:55:7e:49:e8:46:ee:da:69:4f:
b8:e5:53:1d:cb:0a:4f:fb:99:42:a4:87:d6:54:88:5a:63:bb:
2b:3e:c3:ca:6b:ba:75:2a:dd:aa:89:92:42:a8:c7:4a:04:44:
84:40:4c:9c:5f:8d:64:62:1c:3c:d9:e5:f3:98:34:4b:a6:38:
ac:5c:d8:3c:09:37:75:87:98:ad:4d:99:88:fe:e0:03:7a:eb:
ad:07:0d:8d:f4:8e:16:30:3a:49:8f:0a:f3:c5:e8:d0:c5:08:
35:a6:62:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvMpcNgoFYBFmnDDBToS4FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MDcwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjg4ZjIzOTVhYTEwYWI4NzU1ZDE0YmRjZTAyYTA2Yjc5MWM4Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe9/G9vWoPm19ZFjNic2JzCJWULz
bbe0cbMPwKs/dNp1IpOIDuDflMsuSCkRm1AEJ+ZO9/vyUjJxSJNuOXJymb87CV10
DXJnYn886npbQgRb5OAXq+DMtxsJPiz/T7oXkSSa2qGSnq4nQ8m0la7OxoolGgMj
Ijv+jHZ08Rdq5rU+dBje1d/Ojj9SjJBDvjGE8xFM7rvVCKMSqoujbHZ6SzIWjUJd
u49v2vAOMlYFD70fybK5hnsJANWA4hk+JMlK3ZW1NC0XT4lpaR+X/NKIBD9eZJlz
mVQHW6MopYKbPQZVC8Lv6EG7MkBtrbKHF4ixLEW68oOnCBrLKIqW3HOpqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL+I8jlaoQq4dV0Uvc4CoGt5HIuFMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdjRqeU9WcWhDcmgxWFJTOXpnS2dhM2tjaTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABVlQdPdtU4E61hxW/Dx
vkbrVMRuAwr7VYrdcDqm1WsIc5v/Su4h853i/x3FMTw2rD5SiTvPQVqjH/3kH/8I
HrvPmKxEdSn3VQVhQnfX+NKuOShEQFvmPUSO1aNyufrdidxgDErSj5TQqsPGuAVi
T4cjidNJJboTBzvH1oxkTrPOeV+ybuWzQfcM0mmoFJsFTRMHPxXH5n2Vv1V+SehG
7tppT7jlUx3LCk/7mUKkh9ZUiFpjuys+w8prunUq3aqJkkKox0oERIRATJxfjWRi
HDzZ5fOYNEumOKxc2DwJN3WHmK1NmYj+4AN6660HDY30jhYwOkmPCvPF6NDFCDWm
YiU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:58:27 2025 by rpki-client