Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z8RlL_ex8Q-FEv8Jm73VkbG1SiA.roa
File: z8RlL_ex8Q-FEv8Jm73VkbG1SiA.roa (raw, json)
Hash identifier: 8lXTvP1yv70595FbdrfEJEPDpubGoCzcEdxeEBqFoeE=
Subject key identifier: CF:C4:65:2F:F7:B1:F1:0F:85:12:FF:09:9B:BD:D5:91:B1:B5:4A:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B60F95A0062B02B183697E762C19BAA10
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z8RlL_ex8Q-FEv8Jm73VkbG1SiA.roa
Signing time: Tue 24 Oct 2023 09:17:15 +0000
ROA not before: Tue 24 Oct 2023 09:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:f9:5a:00:62:b0:2b:18:36:97:e7:62:c1:9b:aa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 09:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc4652ff7b1f10f8512ff099bbdd591b1b54a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:6f:25:38:ed:60:35:78:54:44:f5:16:f3:
ca:f9:6d:d6:cf:8f:02:86:48:84:b5:d6:ab:0e:e4:
9d:9d:95:01:98:aa:ef:47:2a:9b:65:e2:32:7b:5f:
2c:e5:44:d7:76:09:0c:44:e9:8e:19:48:72:b6:80:
06:7e:e4:2f:70:59:48:10:59:d1:5f:ac:16:6d:42:
37:60:c5:b7:43:e4:73:b1:09:c0:33:e6:db:eb:3c:
c5:f6:6a:61:90:88:8f:2c:42:12:9c:d0:a1:07:4f:
07:69:54:93:6a:43:72:f1:49:ba:b5:38:a5:49:99:
58:13:1f:07:15:09:3c:b8:28:bc:0a:a4:f9:1b:30:
31:5b:22:ec:0f:2a:30:d9:6c:55:99:5c:0d:a0:6d:
cc:71:ea:82:b9:7e:f4:84:63:af:10:37:9c:ff:23:
f7:72:b5:03:ea:9d:29:b6:18:d0:31:98:44:52:95:
be:12:e7:d7:c3:97:87:3e:f2:6b:1d:81:9f:4a:f7:
0e:75:bc:9b:74:ef:21:e6:b0:af:22:7e:ba:fb:ab:
d6:7d:bd:fe:48:ab:ee:af:67:ba:29:9f:95:40:89:
02:17:bb:a6:87:59:f3:18:10:fe:19:99:9d:f6:f5:
4c:e7:b3:65:12:5f:7f:c8:8a:4c:c5:14:e0:1d:95:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:65:2F:F7:B1:F1:0F:85:12:FF:09:9B:BD:D5:91:B1:B5:4A:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z8RlL_ex8Q-FEv8Jm73VkbG1SiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:a4:77:aa:2c:78:0c:0f:4c:a1:c1:a6:ab:80:62:d5:b0:e7:
90:f8:38:e4:a5:cd:fa:3e:23:93:55:b1:fd:2e:6e:1b:42:9b:
d7:9f:75:e6:7b:2d:ac:a9:e9:b2:2d:f1:4b:34:6d:7c:15:fd:
e2:e5:07:e7:15:1b:e7:dd:9c:fb:bb:74:44:f6:00:a8:3d:1a:
3e:41:b5:2c:69:0c:6f:c4:e6:32:ab:d0:89:d2:fd:3b:0f:32:
e1:05:c9:92:c3:88:1b:c1:cb:9e:9e:61:3b:d8:7a:92:7b:10:
0e:b3:59:35:20:95:e0:f3:ef:cc:0d:d9:c1:68:9c:c6:52:52:
4b:4d:81:07:22:9a:2a:00:3b:97:d9:56:7f:30:63:a7:d9:22:
ca:7d:8f:18:3c:b0:52:56:41:eb:40:3f:57:d4:fa:b1:b7:14:
51:be:e1:b2:c5:a2:b4:84:c7:9e:5d:bf:bb:2a:d3:6c:cd:e9:
96:10:78:3c:6d:7c:9f:03:ab:32:91:9f:78:23:17:04:f9:4b:
fe:c3:59:a5:37:e9:fd:e4:b9:cb:e6:5f:e5:28:b8:7d:ce:ad:
30:ae:0c:bc:03:bc:8e:e5:16:fe:6e:32:f1:f6:9b:1e:37:1c:
c7:a0:a3:c2:4a:10:2e:fc:3c:a6:8b:a7:61:6d:2e:c7:de:bf:
1e:bd:ec:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtg+VoAYrArGDaX52LBm6oQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI0MDkxNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmM0NjUyZmY3YjFmMTBmODUxMmZmMDk5YmJkZDU5MWIxYjU0YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgetvJTjtYDV4VET1FvPK+W3Wz48C
hkiEtdarDuSdnZUBmKrvRyqbZeIye18s5UTXdgkMROmOGUhytoAGfuQvcFlIEFnR
X6wWbUI3YMW3Q+RzsQnAM+bb6zzF9mphkIiPLEISnNChB08HaVSTakNy8Um6tTil
SZlYEx8HFQk8uCi8CqT5GzAxWyLsDyow2WxVmVwNoG3MceqCuX70hGOvEDec/yP3
crUD6p0pthjQMZhEUpW+EufXw5eHPvJrHYGfSvcOdbybdO8h5rCvIn66+6vWfb3+
SKvur2e6KZ+VQIkCF7umh1nzGBD+GZmd9vVM57NlEl9/yIpMxRTgHZVZAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM/EZS/3sfEPhRL/CZu91ZGxtUogMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvejhSbExfZXg4US1GRXY4Sm03M1ZrYkcxU2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICkd6oseAwPTKHBpquA
YtWw55D4OOSlzfo+I5NVsf0ubhtCm9efdeZ7Layp6bIt8Us0bXwV/eLlB+cVG+fd
nPu7dET2AKg9Gj5BtSxpDG/E5jKr0InS/TsPMuEFyZLDiBvBy56eYTvYepJ7EA6z
WTUgleDz78wN2cFonMZSUktNgQcimioAO5fZVn8wY6fZIsp9jxg8sFJWQetAP1fU
+rG3FFG+4bLForSEx55dv7sq02zN6ZYQeDxtfJ8DqzKRn3gjFwT5S/7DWaU36f3k
ucvmX+UouH3OrTCuDLwDvI7lFv5uMvH2mx43HMego8JKEC78PKaLp2FtLsfevx69
7CM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:27 2025 by rpki-client