Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w8ouy-gkN2B89aqTFH3g9xbJWc0.roa
File: w8ouy-gkN2B89aqTFH3g9xbJWc0.roa (raw, json)
Hash identifier: ZgBqx92WiENLfm2FczeYTaXPSMwGpPegcBOiasyMYzY=
Subject key identifier: C3:CA:2E:CB:E8:24:37:60:7C:F5:AA:93:14:7D:E0:F7:16:C9:59:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9C2C9776C547BD7B00BAB6EF3553EEDA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w8ouy-gkN2B89aqTFH3g9xbJWc0.roa
Signing time: Sat 04 Nov 2023 21:10:49 +0000
ROA not before: Sat 04 Nov 2023 21:10:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:2c:97:76:c5:47:bd:7b:00:ba:b6:ef:35:53:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 21:10:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ca2ecbe82437607cf5aa93147de0f716c959cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:42:d7:ea:23:6c:8c:26:23:10:87:91:7a:
1d:d8:63:d4:f7:21:b9:0f:4c:50:b9:4c:0a:88:f4:
8d:8f:8b:96:95:b0:47:ea:7c:a4:3a:6e:b1:f8:bf:
7c:4d:2a:47:47:4b:57:c4:28:47:7d:e1:45:59:e4:
14:fc:8c:2f:d8:4f:f9:17:47:df:29:b0:88:e6:ea:
03:b5:ff:6f:6d:b7:1d:24:c5:a1:e0:d1:87:7d:86:
c3:f7:31:9e:5a:36:c4:aa:9d:00:1d:2a:28:e6:ca:
26:f9:0d:f4:91:67:dc:ec:4d:65:bd:f0:1b:a2:49:
cf:48:ee:81:eb:54:f0:54:bc:43:7a:17:f7:4c:9c:
d1:76:5f:a6:db:c1:a8:24:d5:0a:7d:c8:a8:4d:25:
c4:69:5c:77:a9:f0:05:16:fd:79:a1:37:2b:a6:f4:
c4:87:c9:1f:9b:5a:a8:df:05:ec:8e:a3:41:a1:0a:
cd:5f:50:e3:a9:2e:9c:05:5a:94:fa:26:3b:fd:77:
ea:57:d5:a3:dd:d7:ef:96:68:a2:98:47:9f:7e:ee:
e6:12:08:34:f8:94:a7:35:08:5e:94:a8:8d:f6:20:
c2:b5:91:fc:f8:52:be:40:25:ca:9a:4d:68:51:1f:
1a:e1:e3:ab:dc:3a:80:e6:ee:ed:52:c4:ba:3d:90:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:2E:CB:E8:24:37:60:7C:F5:AA:93:14:7D:E0:F7:16:C9:59:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/w8ouy-gkN2B89aqTFH3g9xbJWc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:04:0e:0e:5c:4c:c5:7f:96:cd:a6:b5:68:25:f7:b3:2c:f6:
05:16:ae:26:cd:4f:bd:2c:77:f6:b4:cc:30:fc:c7:56:a8:4e:
98:40:8a:c8:a1:e7:ee:4c:1e:76:72:32:a2:c5:9a:fb:71:34:
55:bd:8d:0e:6b:dd:52:06:1d:25:03:c9:a6:4c:a7:b3:58:83:
e4:e9:96:20:fa:4a:6a:6a:ed:4a:ae:33:a0:fc:ab:a6:bf:bd:
ce:30:a3:47:ee:f5:c2:6b:bf:ae:74:0c:99:58:2d:1f:d0:91:
01:6e:f5:f8:b5:80:56:7c:d9:6d:57:da:16:09:4a:11:e1:e8:
84:13:bc:ce:0c:02:c2:ad:32:ec:d3:24:5a:6f:94:96:c6:7c:
8d:88:97:ef:80:1d:76:ff:0e:d4:0a:37:d0:05:fc:24:da:ab:
3f:61:d8:cb:91:fc:e2:e0:86:a7:4c:b0:f7:e8:c6:c7:87:28:
35:b6:3c:08:b6:26:2e:54:d7:ab:a9:db:6e:99:ef:cf:bb:f1:
e3:22:b4:31:8d:f7:21:be:d8:41:61:d7:3d:41:88:b0:ba:81:
c5:85:6a:1f:e2:0f:99:35:0f:e6:25:97:51:d3:83:78:52:4f:
56:b9:cb:bf:d2:0d:b7:87:43:da:28:41:1e:f4:70:6b:28:7f:
7c:14:22:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYucLJd2xUe9ewC6tu81U+7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MjExMDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2NhMmVjYmU4MjQzNzYwN2NmNWFhOTMxNDdkZTBmNzE2Yzk1OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8dC1+ojbIwmIxCHkXod2GPU9yG5
D0xQuUwKiPSNj4uWlbBH6nykOm6x+L98TSpHR0tXxChHfeFFWeQU/Iwv2E/5F0ff
KbCI5uoDtf9vbbcdJMWh4NGHfYbD9zGeWjbEqp0AHSoo5som+Q30kWfc7E1lvfAb
oknPSO6B61TwVLxDehf3TJzRdl+m28GoJNUKfcioTSXEaVx3qfAFFv15oTcrpvTE
h8kfm1qo3wXsjqNBoQrNX1DjqS6cBVqU+iY7/XfqV9Wj3dfvlmiimEeffu7mEgg0
+JSnNQhelKiN9iDCtZH8+FK+QCXKmk1oUR8a4eOr3DqA5u7tUsS6PZDFBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMPKLsvoJDdgfPWqkxR94PcWyVnNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdzhvdXktZ2tOMkI4OWFxVEZIM2c5eGJKV2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMsEDg5cTMV/ls2mtWgl
97Ms9gUWribNT70sd/a0zDD8x1aoTphAisih5+5MHnZyMqLFmvtxNFW9jQ5r3VIG
HSUDyaZMp7NYg+TpliD6Smpq7UquM6D8q6a/vc4wo0fu9cJrv650DJlYLR/QkQFu
9fi1gFZ82W1X2hYJShHh6IQTvM4MAsKtMuzTJFpvlJbGfI2Il++AHXb/DtQKN9AF
/CTaqz9h2MuR/OLghqdMsPfoxseHKDW2PAi2Ji5U16up226Z78+78eMitDGN9yG+
2EFh1z1BiLC6gcWFah/iD5k1D+Yll1HTg3hST1a5y7/SDbeHQ9ooQR70cGsof3wU
Iks=
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:59:44 2025 by rpki-client