Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zQFGELwZb0gxHLsr-DBPvSifzbw.roa
File: zQFGELwZb0gxHLsr-DBPvSifzbw.roa (raw, json)
Hash identifier: 6lpCHFPoWSOF/J+O7WJA2mUcHctfZz0McPjIq32bgPU=
Subject key identifier: CD:01:46:10:BC:19:6F:48:31:1C:BB:2B:F8:30:4F:BD:28:9F:CD:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B341D94C5CBF5CB4AF784C24A68920C2E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zQFGELwZb0gxHLsr-DBPvSifzbw.roa
Signing time: Sun 15 Oct 2023 16:13:55 +0000
ROA not before: Sun 15 Oct 2023 16:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:1d:94:c5:cb:f5:cb:4a:f7:84:c2:4a:68:92:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 16:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd014610bc196f48311cbb2bf8304fbd289fcdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:72:51:dd:29:7a:a6:f9:8f:41:c2:e0:06:
10:37:c0:09:46:7d:eb:41:f7:33:08:94:b8:bc:0f:
7e:77:84:e7:e9:90:94:44:0c:3e:6b:e4:7f:42:b2:
2b:51:b7:ad:0b:46:27:d8:f4:e7:2c:cc:6d:06:19:
43:ce:ad:29:f4:40:fa:1a:34:1b:c3:52:13:94:dc:
80:4f:ba:ca:aa:2d:d2:32:7d:7c:cd:da:dd:94:32:
c4:70:22:57:1e:57:c4:e9:b0:88:00:45:46:98:53:
3b:dc:cc:6d:55:4f:bb:d5:26:aa:76:99:a1:a5:17:
42:50:8b:33:31:a9:ec:5f:5e:e6:00:0c:28:fc:7b:
f1:fa:9c:7a:af:ed:29:d4:9c:68:db:0f:49:a5:7b:
4d:f5:28:91:9d:e8:59:c1:61:75:85:c5:23:5e:31:
02:a3:f0:5a:c5:dd:3c:f2:dc:74:7d:11:8f:f6:ee:
8a:8f:4c:93:28:6f:ec:23:81:3f:db:ed:67:4b:43:
69:bd:80:1c:6c:f3:fb:a0:1e:0b:a3:47:bf:93:17:
75:c9:53:fe:5a:a5:0d:35:d8:b6:1e:b8:19:24:df:
61:ff:fc:bc:ed:15:17:59:39:f2:27:6f:52:55:3c:
95:5e:3e:cd:1e:ce:8a:ea:2b:ef:91:c4:64:24:c4:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:46:10:BC:19:6F:48:31:1C:BB:2B:F8:30:4F:BD:28:9F:CD:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zQFGELwZb0gxHLsr-DBPvSifzbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3d:7e:8b:cf:99:2f:5e:7e:04:4e:95:e5:ee:3c:e4:94:dd:
48:54:7c:f8:db:1a:bf:68:ea:50:11:bc:4c:58:b2:da:f1:ef:
b4:17:ba:44:cb:af:92:9f:c9:9f:cc:3a:02:6b:22:d4:f4:79:
b5:67:51:2e:3f:90:76:8f:4a:c6:01:a4:e9:39:71:48:21:4d:
a8:a5:f6:4b:62:ed:be:1b:dc:2d:81:9a:f1:b3:c2:22:11:32:
99:21:52:29:e0:18:43:39:32:7d:77:bb:a8:81:e2:87:53:3a:
dd:4c:8c:42:51:ba:48:68:de:c4:36:58:33:3c:3e:18:99:c6:
6a:ca:20:9c:ec:73:66:fa:4d:77:78:11:a1:8d:bd:c1:9c:f6:
be:7f:4f:dd:dc:c7:34:51:3e:e7:4c:89:c4:fd:5a:1b:4f:20:
34:33:f1:ee:43:28:36:76:12:ba:71:e4:91:76:ad:34:67:6a:
d7:90:0c:4a:24:56:92:43:98:0c:a9:96:14:f9:4a:90:c5:0c:
63:61:8b:c1:e2:dc:28:72:bc:80:b8:dd:4e:4a:20:be:83:d7:
13:f0:20:88:49:a8:3b:56:0b:67:36:4e:b9:1f:ba:05:ed:b3:
67:b7:58:3e:00:65:dc:5e:aa:2d:dc:d5:95:6e:ba:46:55:90:
57:b7:fc:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs0HZTFy/XLSveEwkpokgwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE1MTYxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDAxNDYxMGJjMTk2ZjQ4MzExY2JiMmJmODMwNGZiZDI4OWZjZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxZyUd0peqb5j0HC4AYQN8AJRn3r
QfczCJS4vA9+d4Tn6ZCURAw+a+R/QrIrUbetC0Yn2PTnLMxtBhlDzq0p9ED6GjQb
w1ITlNyAT7rKqi3SMn18zdrdlDLEcCJXHlfE6bCIAEVGmFM73MxtVU+71Saqdpmh
pRdCUIszMansX17mAAwo/Hvx+px6r+0p1Jxo2w9JpXtN9SiRnehZwWF1hcUjXjEC
o/Baxd088tx0fRGP9u6Kj0yTKG/sI4E/2+1nS0NpvYAcbPP7oB4Lo0e/kxd1yVP+
WqUNNdi2HrgZJN9h//y87RUXWTnyJ29SVTyVXj7NHs6K6ivvkcRkJMSz+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM0BRhC8GW9IMRy7K/gwT70on828MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvelFGR0VMd1piMGd4SExzci1EQlB2U2lmemJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKY9fovPmS9efgROleXu
POSU3UhUfPjbGr9o6lARvExYstrx77QXukTLr5KfyZ/MOgJrItT0ebVnUS4/kHaP
SsYBpOk5cUghTail9kti7b4b3C2BmvGzwiIRMpkhUingGEM5Mn13u6iB4odTOt1M
jEJRukho3sQ2WDM8PhiZxmrKIJzsc2b6TXd4EaGNvcGc9r5/T93cxzRRPudMicT9
WhtPIDQz8e5DKDZ2Erpx5JF2rTRnateQDEokVpJDmAyplhT5SpDFDGNhi8Hi3Chy
vIC43U5KIL6D1xPwIIhJqDtWC2c2TrkfugXts2e3WD4AZdxeqi3c1ZVuukZVkFe3
/DA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:40 2025 by rpki-client