Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwIuy7nerF1qfccSgali7orgpe0.roa
File: xwIuy7nerF1qfccSgali7orgpe0.roa (raw, json)
Hash identifier: hq5ADKL0nrbBa7Ep888Ix9FYx+h0PtpyHAnZVJIvV48=
Subject key identifier: C7:02:2E:CB:B9:DE:AC:5D:6A:7D:C7:12:81:A9:62:EE:8A:E0:A5:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B21E063CD6D88632D5AF5D85E2CB34930
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwIuy7nerF1qfccSgali7orgpe0.roa
Signing time: Thu 12 Oct 2023 03:13:55 +0000
ROA not before: Thu 12 Oct 2023 03:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:e0:63:cd:6d:88:63:2d:5a:f5:d8:5e:2c:b3:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 03:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7022ecbb9deac5d6a7dc71281a962ee8ae0a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:42:10:e5:92:cb:2e:c4:4a:11:ca:40:02:
78:a7:fb:2e:cb:5c:17:a6:9f:52:91:a9:c8:eb:e4:
4d:ea:10:c8:00:76:7d:cc:90:af:63:d1:b2:6e:7a:
da:d9:22:7f:0f:8e:57:fe:1f:04:e7:31:29:1c:82:
d2:6e:cc:a0:46:a3:58:ea:7d:9e:a8:b6:d9:4a:0d:
cb:24:ad:21:4f:10:a6:dc:ff:18:75:0c:69:4a:db:
b6:63:6a:f8:f9:86:30:c3:bc:fc:1e:ec:d7:7b:c7:
79:f4:5c:79:92:b1:38:2d:85:3c:91:69:3f:39:3a:
98:c8:1e:4a:dd:ca:e9:1a:55:c1:69:7f:46:13:42:
d1:13:c2:3c:5a:07:54:c8:20:fa:63:38:e0:f6:b2:
1b:43:e0:2d:4f:65:a6:d4:8e:96:8a:38:08:7c:8d:
91:f6:7c:93:63:fc:cc:1f:2e:6d:ea:c6:db:ac:eb:
88:d3:85:14:45:92:c5:07:67:61:8d:ea:3c:90:79:
8e:d8:38:04:51:13:1d:62:09:ac:92:c7:1a:a8:d7:
36:33:96:37:97:59:09:90:35:2a:00:1d:3c:b0:cf:
cd:fe:d1:3a:8c:c8:b5:de:31:02:48:75:d3:77:ba:
00:23:2e:03:dd:b5:42:be:25:57:37:13:d5:e9:46:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:2E:CB:B9:DE:AC:5D:6A:7D:C7:12:81:A9:62:EE:8A:E0:A5:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwIuy7nerF1qfccSgali7orgpe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:81:47:6d:96:64:e4:56:c7:63:f1:b9:2e:a6:5f:6c:b0:d0:
02:05:d0:ab:cc:66:6f:c9:cd:7c:53:82:92:62:e7:a6:25:e5:
bc:d4:66:38:c9:a0:e9:4e:ad:d1:14:ae:55:36:45:3b:bd:b3:
1a:3f:ad:99:61:68:db:14:7d:17:3c:9b:96:6d:1a:20:89:24:
72:87:64:3c:b4:28:a3:72:bf:89:88:c8:30:71:1c:77:fb:d8:
b9:35:8d:44:22:6b:28:38:87:b1:b9:ca:23:b4:bd:c0:37:fb:
41:b0:6e:3f:ff:a2:6a:92:20:26:a6:ac:54:69:a4:15:d6:18:
18:2f:0a:8b:22:70:25:64:65:e4:dd:d0:eb:f0:a5:03:74:c6:
c5:d5:a5:d5:53:1e:4d:a8:9b:2d:b8:54:53:fe:33:b9:8c:10:
90:6e:d2:18:85:77:e6:e2:4b:ba:a0:c2:f4:07:ca:36:2d:32:
9b:71:c8:8a:b5:ef:9c:c9:4a:ac:b7:41:e4:73:10:8b:a5:34:
d2:dd:d4:4f:3a:a7:f3:2c:55:ab:38:67:27:d5:56:85:c4:2a:
4d:2e:7b:34:c2:8c:40:24:cb:fb:69:cc:03:d1:e5:09:36:d4:
b6:e1:96:ea:56:e2:ad:04:f6:f0:8d:90:71:b6:44:03:69:5a:
c0:f9:77:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsh4GPNbYhjLVr12F4ss0kwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEyMDMxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzAyMmVjYmI5ZGVhYzVkNmE3ZGM3MTI4MWE5NjJlZThhZTBhNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixtCEOWSyy7EShHKQAJ4p/suy1wX
pp9SkanI6+RN6hDIAHZ9zJCvY9Gybnra2SJ/D45X/h8E5zEpHILSbsygRqNY6n2e
qLbZSg3LJK0hTxCm3P8YdQxpStu2Y2r4+YYww7z8HuzXe8d59Fx5krE4LYU8kWk/
OTqYyB5K3crpGlXBaX9GE0LRE8I8WgdUyCD6Yzjg9rIbQ+AtT2Wm1I6WijgIfI2R
9nyTY/zMHy5t6sbbrOuI04UURZLFB2dhjeo8kHmO2DgEURMdYgmskscaqNc2M5Y3
l1kJkDUqAB08sM/N/tE6jMi13jECSHXTd7oAIy4D3bVCviVXNxPV6UZKPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMcCLsu53qxdan3HEoGpYu6K4KXtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveHdJdXk3bmVyRjFxZmNjU2dhbGk3b3JncGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADuBR22WZORWx2PxuS6m
X2yw0AIF0KvMZm/JzXxTgpJi56Yl5bzUZjjJoOlOrdEUrlU2RTu9sxo/rZlhaNsU
fRc8m5ZtGiCJJHKHZDy0KKNyv4mIyDBxHHf72Lk1jUQiayg4h7G5yiO0vcA3+0Gw
bj//omqSICamrFRppBXWGBgvCosicCVkZeTd0OvwpQN0xsXVpdVTHk2omy24VFP+
M7mMEJBu0hiFd+biS7qgwvQHyjYtMptxyIq175zJSqy3QeRzEIulNNLd1E86p/Ms
Vas4ZyfVVoXEKk0uezTCjEAky/tpzAPR5Qk21LbhlupW4q0E9vCNkHG2RANpWsD5
d/E=
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:44 2025 by rpki-client