Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xyFGa_e-dKlXbR_h5-3WgiTOJFM.roa
File: xyFGa_e-dKlXbR_h5-3WgiTOJFM.roa (raw, json)
Hash identifier: 86uYj0Tx3m5CcOrpg2I1H990UzjjWiP3pV7XD5Se+14=
Subject key identifier: C7:21:46:6B:F7:BE:74:A9:57:6D:1F:E1:E7:ED:D6:82:24:CE:24:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C08207AA60AD23E803F8612911BF18804
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xyFGa_e-dKlXbR_h5-3WgiTOJFM.roa
Signing time: Sat 25 Nov 2023 20:16:35 +0000
ROA not before: Sat 25 Nov 2023 20:16:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:20:7a:a6:0a:d2:3e:80:3f:86:12:91:1b:f1:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 20:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c721466bf7be74a9576d1fe1e7edd68224ce2453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:ef:0b:93:99:07:20:d3:8f:26:d4:d1:2f:
b4:ca:b0:51:06:60:72:a8:39:c6:f5:49:ac:89:d3:
f4:78:50:3a:65:86:0a:c5:23:bc:df:43:4a:a0:70:
9f:2a:87:3d:6d:c7:18:d2:99:52:d2:13:8a:9c:37:
ab:0c:27:e3:3b:b9:68:6e:87:cb:9b:9d:9d:0d:36:
f3:79:14:95:94:6b:be:35:9d:a4:96:1a:0d:ed:0c:
65:b5:b4:a1:c2:33:88:82:af:1b:3f:6b:dd:8d:c4:
83:22:03:0c:7a:36:ff:32:ba:0e:89:1c:03:22:ec:
ef:0d:a9:ff:0e:b0:1a:d0:a7:02:01:9f:0e:9e:00:
3a:20:ad:93:12:e4:62:a4:62:72:5c:2b:e1:90:4b:
af:8f:67:80:59:46:fb:aa:42:19:78:66:d4:16:99:
31:67:e8:52:6a:23:eb:d5:ea:d9:79:e0:ec:90:82:
db:25:f0:97:9d:ca:69:57:bd:04:90:36:e4:0e:bd:
2e:de:ee:d8:4d:4b:f0:36:50:2d:75:d0:f0:b9:40:
4b:f4:c9:99:42:97:bc:22:e1:ae:e0:df:bd:d9:99:
9a:41:54:d8:67:38:26:20:2c:a4:8c:29:79:62:97:
48:cd:d6:19:0e:02:0b:54:6a:c5:8f:30:3f:22:21:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:46:6B:F7:BE:74:A9:57:6D:1F:E1:E7:ED:D6:82:24:CE:24:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xyFGa_e-dKlXbR_h5-3WgiTOJFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:1d:3b:d3:9d:ba:ae:4f:57:1c:fb:0c:70:7f:1a:77:63:de:
b4:78:dc:68:59:91:71:69:71:cf:c0:98:77:1b:6d:cd:83:ab:
f3:43:2d:19:ee:8a:08:91:4d:4b:ef:fe:e3:43:b1:36:1b:48:
c7:cc:37:1e:da:f3:2f:e0:71:f9:07:a9:9c:18:31:bd:34:2c:
95:fa:20:47:a6:25:c8:0a:e7:b0:b0:a9:5b:3a:7b:4b:2a:36:
46:e7:91:31:99:72:7d:1c:29:8d:3c:2c:87:92:6a:f5:ab:4b:
55:0a:b4:dd:c2:49:fc:be:10:40:46:db:80:ad:87:55:38:bf:
9d:c7:19:84:46:4a:a1:a6:0a:c9:ee:53:ef:41:dc:c8:ed:df:
98:0c:91:ba:e9:bd:b2:f5:4e:42:65:fa:47:cc:b1:1f:da:41:
b7:9d:e4:3b:ce:4a:e6:52:c9:5a:18:ad:2c:ac:34:9c:cf:1b:
a1:8e:1e:f4:50:7d:03:29:39:b9:89:b3:92:49:4d:24:a6:3d:
81:f1:26:ce:85:15:1a:6e:d4:86:d1:88:b9:6a:ca:99:31:bd:
80:59:11:97:29:24:62:2a:5d:6b:80:94:53:e5:4f:84:32:5b:
53:e4:8e:60:7f:10:2d:14:87:85:74:66:9f:66:cf:f4:0f:16:
a7:1e:70:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwIIHqmCtI+gD+GEpEb8YgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI1MjAxNjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzIxNDY2YmY3YmU3NGE5NTc2ZDFmZTFlN2VkZDY4MjI0Y2UyNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB7vC5OZByDTjybU0S+0yrBRBmBy
qDnG9UmsidP0eFA6ZYYKxSO830NKoHCfKoc9bccY0plS0hOKnDerDCfjO7lobofL
m52dDTbzeRSVlGu+NZ2klhoN7QxltbShwjOIgq8bP2vdjcSDIgMMejb/MroOiRwD
IuzvDan/DrAa0KcCAZ8OngA6IK2TEuRipGJyXCvhkEuvj2eAWUb7qkIZeGbUFpkx
Z+hSaiPr1erZeeDskILbJfCXncppV70EkDbkDr0u3u7YTUvwNlAtddDwuUBL9MmZ
Qpe8IuGu4N+92ZmaQVTYZzgmICykjCl5YpdIzdYZDgILVGrFjzA/IiFpjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMchRmv3vnSpV20f4eft1oIkziRTMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveHlGR2FfZS1kS2xYYlJfaDUtM1dnaVRPSkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIkdO9Oduq5PVxz7DHB/
Gndj3rR43GhZkXFpcc/AmHcbbc2Dq/NDLRnuigiRTUvv/uNDsTYbSMfMNx7a8y/g
cfkHqZwYMb00LJX6IEemJcgK57CwqVs6e0sqNkbnkTGZcn0cKY08LIeSavWrS1UK
tN3CSfy+EEBG24Cth1U4v53HGYRGSqGmCsnuU+9B3Mjt35gMkbrpvbL1TkJl+kfM
sR/aQbed5DvOSuZSyVoYrSysNJzPG6GOHvRQfQMpObmJs5JJTSSmPYHxJs6FFRpu
1IbRiLlqypkxvYBZEZcpJGIqXWuAlFPlT4QyW1PkjmB/EC0Uh4V0Zp9mz/QPFqce
cCo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:37 2025 by rpki-client