Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XZsOse1D4zz73SlmJ-D-yJulyM4.roa
File: XZsOse1D4zz73SlmJ-D-yJulyM4.roa (raw, json)
Hash identifier: en+37kMnOZhtw8p/EMjMBD7oyaPD4X8caYmoXe1oARY=
Subject key identifier: 5D:9B:0E:B1:ED:43:E3:3C:FB:DD:29:66:27:E0:FE:C8:9B:A5:C8:CE
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A86F3A9109022FD5D696C2A1DEE99AB67
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XZsOse1D4zz73SlmJ-D-yJulyM4.roa
Signing time: Tue 12 Sep 2023 01:13:50 +0000
ROA not before: Tue 12 Sep 2023 01:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:f3:a9:10:90:22:fd:5d:69:6c:2a:1d:ee:99:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 12 01:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9b0eb1ed43e33cfbdd296627e0fec89ba5c8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:c2:fc:b3:40:eb:5a:58:a6:85:65:c7:8e:
27:bd:5b:8f:a7:ab:c8:39:65:62:10:fb:86:e8:b3:
0f:9d:4a:d7:27:e0:ee:65:54:96:3e:e8:c3:4b:18:
ce:55:b6:b0:c7:cd:43:ff:50:37:b3:e1:3b:7a:78:
98:f5:b3:e7:c1:26:7f:51:d6:e5:90:9d:a9:d4:22:
fc:6b:71:8e:44:8f:5c:4f:22:29:56:f9:37:a4:3e:
1b:c9:14:2b:25:3a:ba:42:47:92:24:9f:ec:73:f1:
74:e2:47:6f:59:03:a8:24:84:3f:95:b1:3e:0d:78:
8d:ac:c1:d6:3e:53:27:4e:ea:9d:3c:b2:cd:c2:79:
43:12:3f:d6:91:41:c7:53:2f:06:64:93:b1:c3:4e:
ab:44:e4:09:35:e0:fc:f3:8a:b1:87:b4:91:6b:33:
1e:93:d1:8d:fb:b0:cf:e1:d4:23:9b:85:d0:a6:04:
02:5e:9c:fe:ab:c7:6f:3c:8d:2a:2f:32:41:31:e4:
97:fc:ab:3a:0d:2d:6e:aa:d6:31:93:85:da:71:c5:
65:79:13:e5:4b:35:61:81:1b:2b:ed:d7:36:9f:9b:
90:ba:d3:0b:47:05:d5:55:c1:fd:c7:ea:5a:a8:cd:
87:77:47:01:f6:aa:c7:7a:8e:3b:eb:92:a1:1c:61:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:0E:B1:ED:43:E3:3C:FB:DD:29:66:27:E0:FE:C8:9B:A5:C8:CE
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XZsOse1D4zz73SlmJ-D-yJulyM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:6a:69:b0:b3:0a:68:80:cf:65:65:c9:32:33:45:cb:0a:64:
ca:b0:45:10:93:a1:2b:61:4d:c1:80:c2:68:01:24:9a:ba:3c:
a4:07:45:ee:88:9a:ca:4b:d0:c2:5f:4c:16:ac:36:1b:b7:24:
1b:79:fd:d8:53:8a:ba:f8:6f:1b:99:4f:1b:a1:28:f6:35:1f:
18:33:c9:63:33:46:58:66:82:50:9d:39:1d:c6:79:23:8a:94:
38:09:42:3a:0c:fb:69:34:b5:3d:18:94:f8:70:8a:28:9c:43:
45:c2:a6:e8:0a:18:08:20:eb:6a:d7:d3:38:9b:a8:6f:f6:4b:
20:46:82:7a:44:8b:42:0e:ef:08:5c:82:d5:ba:70:b7:24:98:
d6:af:b6:ea:6c:9c:b8:b8:3c:f0:91:e2:6a:4d:dd:a2:49:52:
db:84:59:3e:ef:5b:c3:9a:8e:ed:c2:57:b9:ca:ff:98:09:df:
3b:b1:1e:66:3c:d3:6d:77:ab:4e:6e:e9:b8:01:73:f6:cc:b4:
a1:cd:86:29:07:7f:d5:c4:aa:b6:38:a7:54:77:6f:4b:d5:39:
2e:88:8e:86:de:1d:a7:9b:7c:dd:49:87:12:a4:c9:90:ce:37:
0d:3b:40:41:31:c4:f0:8c:6d:ef:d1:db:6b:b4:94:7c:35:9f:
e5:49:82:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqG86kQkCL9XWlsKh3umatnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEyMDExMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDliMGViMWVkNDNlMzNjZmJkZDI5NjYyN2UwZmVjODliYTVjOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1PC/LNA61pYpoVlx44nvVuPp6vI
OWViEPuG6LMPnUrXJ+DuZVSWPujDSxjOVbawx81D/1A3s+E7eniY9bPnwSZ/Udbl
kJ2p1CL8a3GORI9cTyIpVvk3pD4byRQrJTq6QkeSJJ/sc/F04kdvWQOoJIQ/lbE+
DXiNrMHWPlMnTuqdPLLNwnlDEj/WkUHHUy8GZJOxw06rROQJNeD884qxh7SRazMe
k9GN+7DP4dQjm4XQpgQCXpz+q8dvPI0qLzJBMeSX/Ks6DS1uqtYxk4XaccVleRPl
SzVhgRsr7dc2n5uQutMLRwXVVcH9x+paqM2Hd0cB9qrHeo4765KhHGHyTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF2bDrHtQ+M8+90pZifg/sibpcjOMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvWFpzT3NlMUQ0eno3M1NsbUotRC15SnVseU00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA1qabCzCmiAz2VlyTIz
RcsKZMqwRRCToSthTcGAwmgBJJq6PKQHRe6ImspL0MJfTBasNhu3JBt5/dhTirr4
bxuZTxuhKPY1HxgzyWMzRlhmglCdOR3GeSOKlDgJQjoM+2k0tT0YlPhwiiicQ0XC
pugKGAgg62rX0zibqG/2SyBGgnpEi0IO7whcgtW6cLckmNavtupsnLi4PPCR4mpN
3aJJUtuEWT7vW8Oaju3CV7nK/5gJ3zuxHmY80213q05u6bgBc/bMtKHNhikHf9XE
qrY4p1R3b0vVOS6IjobeHaebfN1JhxKkyZDONw07QEExxPCMbe/R22u0lHw1n+VJ
glE=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:04 2025 by rpki-client