Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xZjS-UrqGmp3mgksGJYnF6W_sJo.roa
File: xZjS-UrqGmp3mgksGJYnF6W_sJo.roa (raw, json)
Hash identifier: QaybAh8pSBIuDOoaGW6cYxMajht88KpOLqM4GGYhwzk=
Subject key identifier: C5:98:D2:F9:4A:EA:1A:6A:77:9A:09:2C:18:96:27:17:A5:BF:B0:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1CF1E1AFDDAA9E8F93458B08E9D42272
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xZjS-UrqGmp3mgksGJYnF6W_sJo.roa
Signing time: Wed 11 Oct 2023 04:14:55 +0000
ROA not before: Wed 11 Oct 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1c:f1:e1:af:dd:aa:9e:8f:93:45:8b:08:e9:d4:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c598d2f94aea1a6a779a092c18962717a5bfb09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:28:1c:97:12:42:45:21:e5:36:6c:c0:b2:
58:1c:9e:aa:2a:04:f2:e8:26:df:fa:c1:5c:1b:49:
65:ec:3d:66:3f:9f:e2:f7:d4:98:01:f5:9e:5e:41:
87:a5:25:15:f6:a3:91:52:6d:99:9c:64:15:3b:cf:
9c:80:3e:c0:28:fc:75:ab:dd:6e:16:ae:4a:8a:a8:
9c:08:c4:03:1d:64:fe:16:31:48:57:67:13:c6:9e:
d7:89:62:8b:46:f9:6c:27:21:8b:79:cc:07:89:84:
73:9a:e7:43:46:4d:03:37:43:e8:66:c1:1c:5c:00:
64:a6:03:54:81:c1:e2:f6:e2:e8:8e:7a:0a:db:68:
7d:97:84:41:00:68:50:e0:d0:0a:9d:47:7f:1e:4b:
4e:30:87:b0:bd:a4:a8:88:e6:15:4e:6b:c5:f9:be:
c2:57:2e:40:08:32:1b:bd:4a:bd:a1:06:fc:d0:63:
aa:29:11:21:c3:19:d0:bc:b3:24:bd:6c:99:d3:f2:
85:b6:a9:33:a5:fb:2b:68:c7:31:7e:5d:58:84:be:
b4:88:99:06:ad:da:56:6f:3a:c8:72:60:fa:8d:b0:
47:23:e8:ab:62:5e:99:69:12:16:a4:29:f6:fa:f0:
a8:d0:17:68:6b:e2:e4:ab:2f:99:f7:2f:66:18:c1:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:D2:F9:4A:EA:1A:6A:77:9A:09:2C:18:96:27:17:A5:BF:B0:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xZjS-UrqGmp3mgksGJYnF6W_sJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:48:f9:b7:b3:aa:62:03:2c:2d:4f:a9:bd:26:a5:a7:a8:18:
6d:14:60:b0:3e:b0:25:2e:56:f9:88:6c:2a:39:24:0b:83:a6:
72:46:97:6a:87:ce:df:d3:1a:9d:19:d7:ea:4a:5c:7c:8f:57:
6e:0d:93:38:51:c4:33:01:61:fc:a6:a9:59:7c:9f:b4:5a:1f:
d1:79:f6:4b:5a:8f:d2:d7:54:78:30:5c:b2:92:c9:6b:2e:b3:
63:8c:af:dc:c6:58:25:cb:d8:e2:02:9b:23:a4:d7:06:6f:5c:
a9:94:cf:67:28:87:7a:2f:1c:4a:d5:fe:e2:a4:8c:33:f1:71:
be:39:93:9d:e7:a0:8f:2a:2e:9f:e2:7e:3f:7e:35:5e:27:49:
20:96:3b:92:fb:2f:1b:d2:5d:ac:e4:bc:79:10:57:b5:b9:0b:
8c:ad:40:80:b0:74:24:c5:cf:4d:ac:25:f7:95:df:17:ed:2a:
ed:aa:ce:7c:16:cd:67:0f:50:48:10:f4:66:e4:59:ff:63:b1:
50:78:97:4c:55:43:bb:8a:d1:f9:0e:10:04:8c:6f:2a:e2:4e:
f6:0c:53:b1:36:9f:0e:08:37:0b:0e:6f:14:12:8a:5f:a7:61:
e5:cc:8d:a8:9f:a3:0f:c6:2e:e6:19:43:1c:18:1c:6c:60:4f:
9f:a9:dc:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsc8eGv3aqej5NFiwjp1CJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMDQxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTk4ZDJmOTRhZWExYTZhNzc5YTA5MmMxODk2MjcxN2E1YmZiMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TMoHJcSQkUh5TZswLJYHJ6qKgTy
6Cbf+sFcG0ll7D1mP5/i99SYAfWeXkGHpSUV9qORUm2ZnGQVO8+cgD7AKPx1q91u
Fq5KiqicCMQDHWT+FjFIV2cTxp7XiWKLRvlsJyGLecwHiYRzmudDRk0DN0PoZsEc
XABkpgNUgcHi9uLojnoK22h9l4RBAGhQ4NAKnUd/HktOMIewvaSoiOYVTmvF+b7C
Vy5ACDIbvUq9oQb80GOqKREhwxnQvLMkvWyZ0/KFtqkzpfsraMcxfl1YhL60iJkG
rdpWbzrIcmD6jbBHI+irYl6ZaRIWpCn2+vCo0Bdoa+Lkqy+Z9y9mGMH6HQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMWY0vlK6hpqd5oJLBiWJxelv7CaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveFpqUy1VcnFHbXAzbWdrc0dKWW5GNldfc0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADxI+bezqmIDLC1Pqb0m
paeoGG0UYLA+sCUuVvmIbCo5JAuDpnJGl2qHzt/TGp0Z1+pKXHyPV24NkzhRxDMB
YfymqVl8n7RaH9F59ktaj9LXVHgwXLKSyWsus2OMr9zGWCXL2OICmyOk1wZvXKmU
z2coh3ovHErV/uKkjDPxcb45k53noI8qLp/ifj9+NV4nSSCWO5L7LxvSXazkvHkQ
V7W5C4ytQICwdCTFz02sJfeV3xftKu2qznwWzWcPUEgQ9GbkWf9jsVB4l0xVQ7uK
0fkOEASMbyriTvYMU7E2nw4INwsObxQSil+nYeXMjaifow/GLuYZQxwYHGxgT5+p
3Dc=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:23:32 2025 by rpki-client