Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w73bUkIhljjCJ65jxxLx6w50Z8g.roa
File: w73bUkIhljjCJ65jxxLx6w50Z8g.roa (raw, json)
Hash identifier: ZCQJe4nWQX+M4Ch1nEUL1t8t6rxt1+imDSnfImc/Hck=
Subject key identifier: C3:BD:DB:52:42:21:96:38:C2:27:AE:63:C7:12:F1:EB:0E:74:67:C8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7D47CB356815C0D42E63377F77F476BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w73bUkIhljjCJ65jxxLx6w50Z8g.roa
Signing time: Mon 18 Dec 2023 14:15:06 +0000
ROA not before: Mon 18 Dec 2023 14:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:47:cb:35:68:15:c0:d4:2e:63:37:7f:77:f4:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 14:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3bddb5242219638c227ae63c712f1eb0e7467c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:22:fa:ba:2a:63:c1:37:e0:96:e7:c1:c5:
30:16:d1:99:f4:41:04:43:e7:60:3c:87:c4:a0:4b:
f8:c0:6d:00:c8:8d:ae:22:b5:69:e8:b3:8e:0c:23:
b5:6d:80:c8:65:61:1b:0d:c9:c5:e5:b9:93:a7:9e:
ff:40:a9:0b:1e:91:96:68:8c:c6:f2:04:51:2d:8f:
a3:59:dc:1d:b7:79:70:47:aa:09:18:86:4a:83:3e:
d0:cd:a9:34:6d:e7:37:6b:9c:8a:bf:b0:69:62:ef:
3c:52:a4:9e:cf:7f:e6:05:05:07:87:23:22:c8:c3:
0d:03:c8:ce:91:07:43:ab:a8:f7:22:e5:cc:76:72:
ae:e7:7c:80:86:1e:b3:43:9b:43:51:be:2b:51:05:
70:3d:ac:5f:2c:82:6c:c8:c1:02:0d:84:ba:f5:57:
0a:fe:50:27:64:6f:81:93:b1:c2:b4:2b:99:da:b8:
31:5c:99:16:37:79:e4:91:2a:e7:42:14:99:d1:58:
1e:ab:0a:15:42:f6:d7:3e:ca:62:6a:0a:75:c2:34:
cf:ef:d8:23:74:20:fb:13:8d:1e:22:a6:63:d4:e9:
eb:0c:b4:5a:b1:59:b8:70:5f:91:9f:25:aa:70:3d:
67:ce:ef:b2:3b:42:89:56:3e:34:82:1b:c7:c0:5c:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:DB:52:42:21:96:38:C2:27:AE:63:C7:12:F1:EB:0E:74:67:C8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w73bUkIhljjCJ65jxxLx6w50Z8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:00:bc:5f:99:30:fb:df:f7:ee:e1:1e:ff:25:b0:18:a9:df:
20:36:64:36:55:54:7a:79:cb:27:65:25:2a:a3:0b:5a:f7:e9:
e7:f1:22:2e:20:02:8c:21:e9:0d:a1:e8:69:7d:51:f0:a4:35:
53:87:99:c7:59:59:55:4c:86:24:de:2a:05:ab:0b:7e:7c:59:
45:77:16:77:c4:86:b6:ea:ce:44:80:1b:1b:e3:0e:a0:d3:25:
cd:a6:4f:23:ec:b2:40:4d:2b:f7:ab:0a:eb:6e:91:e3:9b:7d:
93:d9:a4:49:5f:1e:5c:e6:d5:2f:06:16:12:de:94:30:ad:41:
31:4e:0b:03:b1:7e:0e:94:c5:ec:82:cf:81:1c:65:38:87:58:
ce:8e:f9:5b:73:7a:fd:99:fc:ae:16:2e:8c:6e:71:cf:80:82:
69:e8:27:61:19:44:5c:d5:ce:5b:76:da:e3:6e:92:60:32:81:
02:eb:0a:6a:ff:63:2f:2f:5c:2d:0c:73:83:11:12:1d:fb:e1:
2e:65:29:dd:42:14:bd:10:5a:fc:dc:6b:cf:7f:12:a2:f2:55:
a6:3a:43:81:85:79:6b:9e:c0:8e:ef:05:6e:6f:62:ee:d2:6f:
4b:23:16:eb:57:cf:8a:0e:a3:9f:74:fd:9e:60:b8:a8:31:02:
da:ee:9e:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx9R8s1aBXA1C5jN3939Ha7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE4MTQxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2JkZGI1MjQyMjE5NjM4YzIyN2FlNjNjNzEyZjFlYjBlNzQ2N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0i+roqY8E34JbnwcUwFtGZ9EEE
Q+dgPIfEoEv4wG0AyI2uIrVp6LOODCO1bYDIZWEbDcnF5bmTp57/QKkLHpGWaIzG
8gRRLY+jWdwdt3lwR6oJGIZKgz7Qzak0bec3a5yKv7BpYu88UqSez3/mBQUHhyMi
yMMNA8jOkQdDq6j3IuXMdnKu53yAhh6zQ5tDUb4rUQVwPaxfLIJsyMECDYS69VcK
/lAnZG+Bk7HCtCuZ2rgxXJkWN3nkkSrnQhSZ0VgeqwoVQvbXPspiagp1wjTP79gj
dCD7E40eIqZj1OnrDLRasVm4cF+RnyWqcD1nzu+yO0KJVj40ghvHwFzqnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMO921JCIZY4wieuY8cS8esOdGfIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdzczYlVrSWhsampDSjY1anh4THg2dzUwWjhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGwAvF+ZMPvf9+7hHv8l
sBip3yA2ZDZVVHp5yydlJSqjC1r36efxIi4gAowh6Q2h6Gl9UfCkNVOHmcdZWVVM
hiTeKgWrC358WUV3FnfEhrbqzkSAGxvjDqDTJc2mTyPsskBNK/erCutukeObfZPZ
pElfHlzm1S8GFhLelDCtQTFOCwOxfg6UxeyCz4EcZTiHWM6O+Vtzev2Z/K4WLoxu
cc+AgmnoJ2EZRFzVzlt22uNukmAygQLrCmr/Yy8vXC0Mc4MREh374S5lKd1CFL0Q
Wvzca89/EqLyVaY6Q4GFeWuewI7vBW5vYu7Sb0sjFutXz4oOo590/Z5guKgxAtru
nqw=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:30 2025 by rpki-client