Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWeIEJpNvJavZtgbszXiW-mBO_E.roa
File: xWeIEJpNvJavZtgbszXiW-mBO_E.roa (raw, json)
Hash identifier: Gt2jmUOyy/L9yA2QnE4fBR2htZ/oBNlaHqRgFMFLxGA=
Subject key identifier: C5:67:88:10:9A:4D:BC:96:AF:66:D8:1B:B3:35:E2:5B:E9:81:3B:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0A79C589CB0830E5F5995ECF1C6909C0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWeIEJpNvJavZtgbszXiW-mBO_E.roa
Signing time: Sun 26 Nov 2023 07:13:21 +0000
ROA not before: Sun 26 Nov 2023 07:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:79:c5:89:cb:08:30:e5:f5:99:5e:cf:1c:69:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 07:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56788109a4dbc96af66d81bb335e25be9813bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:3f:3e:8e:81:05:a1:8a:c0:6a:37:a5:08:
60:dd:9c:33:66:10:02:36:7a:f0:9f:10:f8:ad:f3:
7d:ba:2d:c9:d0:1a:51:d3:14:b4:a6:f9:0d:ae:fa:
46:f0:ed:eb:e4:08:c7:c9:2f:1b:ec:0f:74:dd:11:
39:b2:9d:e3:1d:11:f5:fa:88:07:ba:f9:8b:84:19:
42:a3:ed:00:3d:a6:21:88:ba:b2:10:ea:cb:03:65:
f7:20:7d:61:23:77:35:82:04:4e:8f:4c:c4:5c:d1:
d8:37:27:da:9c:83:ac:f2:9d:e7:b1:db:25:d1:6d:
36:11:90:5b:60:0d:0b:22:25:ca:2d:23:20:74:f1:
66:64:3a:8a:df:95:ca:5f:20:68:47:f6:2c:85:33:
d0:cd:f7:50:54:72:7d:7b:45:95:fe:c3:3c:53:9e:
49:2e:80:70:65:0e:bd:79:6b:7f:89:67:af:92:a4:
0c:98:93:36:85:4f:0d:16:5f:a3:9d:f1:df:06:7c:
98:4a:81:50:a6:0b:ec:16:8b:dd:3f:ec:9f:35:89:
cd:e4:37:35:dd:08:48:7e:1c:67:68:48:64:89:ab:
1b:32:33:48:9c:87:94:fc:0c:1c:5c:3c:f6:82:b7:
52:f8:f9:2c:6d:1c:27:c3:7e:3e:7b:a6:4e:1e:a2:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:88:10:9A:4D:BC:96:AF:66:D8:1B:B3:35:E2:5B:E9:81:3B:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWeIEJpNvJavZtgbszXiW-mBO_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:60:25:82:8b:08:c0:f4:f1:e4:f3:05:0d:1e:58:9b:03:ab:
f4:11:a9:ea:ed:be:28:db:38:7a:6b:be:0c:ad:1d:c2:b5:2e:
e9:9a:82:9b:4b:e5:f1:15:f9:a3:d8:e6:a3:95:58:1f:92:86:
d3:cb:c0:07:1e:00:f9:80:5e:ea:8b:a3:1a:09:3a:08:53:a5:
c1:cc:f6:99:c8:b3:1f:41:28:7f:60:b6:cf:48:0e:61:21:cf:
52:c7:3b:d9:08:29:24:37:cb:b9:63:05:bb:dc:04:40:ae:05:
19:2d:57:26:67:e5:6e:a5:a2:d0:20:5d:8c:a7:82:a2:9b:05:
ab:51:15:0f:b5:57:73:f5:83:71:62:b5:f6:f3:64:87:c7:0e:
49:95:cf:ba:5a:c5:1a:6f:ef:e6:1f:41:b4:ee:f2:42:e1:ce:
9f:ed:e2:d7:4c:2b:de:49:ff:29:31:5c:61:cc:87:f5:e7:40:
b0:f7:ac:af:0a:77:bf:8f:27:e5:3b:5a:71:d3:16:7c:8b:d0:
49:a3:c7:ba:a5:57:de:f5:39:7c:b1:f1:67:56:70:03:5a:15:
18:3f:43:6d:d9:64:d9:a0:b8:f5:de:5b:d5:d8:e4:a7:43:c7:
fe:aa:6d:a1:96:4e:0a:8b:1e:17:aa:4f:a7:16:32:6e:07:8f:
1d:93:58:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwKecWJywgw5fWZXs8caQnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI2MDcxMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTY3ODgxMDlhNGRiYzk2YWY2NmQ4MWJiMzM1ZTI1YmU5ODEzYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz8/Po6BBaGKwGo3pQhg3ZwzZhAC
NnrwnxD4rfN9ui3J0BpR0xS0pvkNrvpG8O3r5AjHyS8b7A903RE5sp3jHRH1+ogH
uvmLhBlCo+0APaYhiLqyEOrLA2X3IH1hI3c1ggROj0zEXNHYNyfanIOs8p3nsdsl
0W02EZBbYA0LIiXKLSMgdPFmZDqK35XKXyBoR/YshTPQzfdQVHJ9e0WV/sM8U55J
LoBwZQ69eWt/iWevkqQMmJM2hU8NFl+jnfHfBnyYSoFQpgvsFovdP+yfNYnN5Dc1
3QhIfhxnaEhkiasbMjNInIeU/AwcXDz2grdS+PksbRwnw34+e6ZOHqJ0jQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMVniBCaTbyWr2bYG7M14lvpgTvxMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveFdlSUVKcE52SmF2WnRnYnN6WGlXLW1CT19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHxgJYKLCMD08eTzBQ0e
WJsDq/QRqertvijbOHprvgytHcK1LumagptL5fEV+aPY5qOVWB+ShtPLwAceAPmA
XuqLoxoJOghTpcHM9pnIsx9BKH9gts9IDmEhz1LHO9kIKSQ3y7ljBbvcBECuBRkt
VyZn5W6lotAgXYyngqKbBatRFQ+1V3P1g3FitfbzZIfHDkmVz7paxRpv7+YfQbTu
8kLhzp/t4tdMK95J/ykxXGHMh/XnQLD3rK8Kd7+PJ+U7WnHTFnyL0Emjx7qlV971
OXyx8WdWcANaFRg/Q23ZZNmguPXeW9XY5KdDx/6qbaGWTgqLHheqT6cWMm4Hjx2T
WAQ=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:33:22 2025 by rpki-client