Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-EQwHi4wwcRF4Fvw51bWTFKPbM.roa
File: y-EQwHi4wwcRF4Fvw51bWTFKPbM.roa (raw, json)
Hash identifier: d+GPO3z8c2O+d8Mcv89shtE2O8oLgiAHqeYRd2pRbzI=
Subject key identifier: CB:E1:10:C0:78:B8:C3:07:11:17:81:6F:C3:9D:5B:59:31:4A:3D:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB01E4C51E801F10BAF868BCF080641D7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-EQwHi4wwcRF4Fvw51bWTFKPbM.roa
Signing time: Wed 20 Sep 2023 01:04:50 +0000
ROA not before: Wed 20 Sep 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b01e:1714/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b0:1e:4c:51:e8:01:f1:0b:af:86:8b:cf:08:06:41:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe110c078b8c3071117816fc39d5b59314a3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:d8:f5:82:f6:e4:a8:fa:e6:1e:f7:c2:c7:
08:13:06:ef:61:1c:c3:8d:a3:e4:e3:99:6f:bf:57:
8b:5e:b5:a9:5e:26:d7:d3:cc:0b:b3:d9:58:62:98:
58:67:89:aa:08:7c:31:e8:42:b8:e2:21:01:ed:85:
c3:f7:55:82:ee:a9:95:f9:77:a8:87:86:c3:95:e4:
2f:8e:1b:e6:c6:4d:57:af:d6:4f:58:e9:23:c7:71:
b3:8c:8b:a0:e0:ac:24:67:c0:6b:a0:3d:67:1e:ca:
b8:fd:d8:4a:35:88:93:29:3b:2f:3e:cd:14:2e:a2:
91:af:6c:5f:ba:a4:9e:1e:a4:b2:20:db:50:39:b3:
2b:47:5a:ee:16:26:7c:40:85:27:11:26:f7:f7:8c:
76:fc:10:c8:e4:59:ce:c9:ee:a7:02:20:4c:72:e3:
1b:40:af:0a:3f:73:05:0d:42:3f:56:12:d0:f0:dd:
93:73:9d:a5:93:19:2e:a4:4d:db:f3:41:a4:0b:a8:
8d:e6:86:0f:b2:ac:2b:3e:63:ea:f3:65:b1:3c:41:
3a:6c:93:22:64:72:59:39:a2:6e:35:07:d2:b2:a2:
17:c7:77:e8:e4:86:a7:6c:89:ac:33:dd:73:17:c3:
69:18:4b:46:6b:37:f8:a6:55:c0:de:1c:f6:c3:f5:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:10:C0:78:B8:C3:07:11:17:81:6F:C3:9D:5B:59:31:4A:3D:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/y-EQwHi4wwcRF4Fvw51bWTFKPbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:51:68:77:c1:a0:34:a5:dd:d1:bf:df:a8:1d:18:cc:f7:d5:
e8:c7:94:15:f9:88:53:0b:ed:df:db:eb:f6:93:d6:6b:36:ca:
a1:08:a0:09:71:97:c3:46:3e:f8:d0:48:5f:89:1e:a9:0d:2d:
b2:5b:82:73:9d:51:a1:cb:7e:27:68:bb:d1:39:86:02:6e:3f:
76:07:b3:16:c9:b7:95:63:41:90:6d:99:05:44:0a:de:2e:9e:
52:2a:35:3d:47:b2:3f:09:80:62:0c:f4:82:14:e6:8d:bd:ec:
cd:f3:88:61:cf:cf:f8:61:96:9e:86:b5:d4:4a:6f:c3:61:ec:
de:6c:fb:6f:78:18:dc:ad:05:5d:d1:9e:b5:2d:fa:12:ba:ff:
cc:7f:31:f8:11:69:b0:5c:c4:a9:e9:5b:c5:13:58:f9:9d:92:
98:65:1b:c8:52:b8:41:48:7b:56:0f:cb:51:83:2e:e7:2d:75:
24:9a:f0:b2:69:e0:74:4c:f9:d9:e6:1c:fa:a2:a8:4c:fc:c3:
f2:39:e3:17:7b:fb:4f:f4:71:da:ff:6a:46:f8:91:08:09:ba:
90:ea:a4:54:14:20:09:26:3b:86:f2:9b:55:24:e5:98:f4:38:
65:52:cb:53:2f:6a:30:a6:d0:9d:66:ef:1e:77:c3:14:51:02:
bb:27:7f:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqwHkxR6AHxC6+Gi88IBkHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIwMDEwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmUxMTBjMDc4YjhjMzA3MTExNzgxNmZjMzlkNWI1OTMxNGEzZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU/Y9YL25Kj65h73wscIEwbvYRzD
jaPk45lvv1eLXrWpXibX08wLs9lYYphYZ4mqCHwx6EK44iEB7YXD91WC7qmV+Xeo
h4bDleQvjhvmxk1Xr9ZPWOkjx3GzjIug4KwkZ8BroD1nHsq4/dhKNYiTKTsvPs0U
LqKRr2xfuqSeHqSyINtQObMrR1ruFiZ8QIUnESb394x2/BDI5FnOye6nAiBMcuMb
QK8KP3MFDUI/VhLQ8N2Tc52lkxkupE3b80GkC6iN5oYPsqwrPmPq82WxPEE6bJMi
ZHJZOaJuNQfSsqIXx3fo5IanbImsM91zF8NpGEtGazf4plXA3hz2w/X+ywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMvhEMB4uMMHEReBb8OdW1kxSj2zMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveS1FUXdIaTR3d2NSRjRGdnc1MWJXVEZLUGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE5RaHfBoDSl3dG/36gd
GMz31ejHlBX5iFML7d/b6/aT1ms2yqEIoAlxl8NGPvjQSF+JHqkNLbJbgnOdUaHL
fidou9E5hgJuP3YHsxbJt5VjQZBtmQVECt4unlIqNT1Hsj8JgGIM9IIU5o297M3z
iGHPz/hhlp6GtdRKb8Nh7N5s+294GNytBV3RnrUt+hK6/8x/MfgRabBcxKnpW8UT
WPmdkphlG8hSuEFIe1YPy1GDLuctdSSa8LJp4HRM+dnmHPqiqEz8w/I54xd7+0/0
cdr/akb4kQgJupDqpFQUIAkmO4bym1Uk5Zj0OGVSy1MvajCm0J1m7x53wxRRArsn
f5g=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:54:13 2025 by rpki-client