Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0U_fUq_HYYHUQ8oyjREp5GuoCas.roa
File: 0U_fUq_HYYHUQ8oyjREp5GuoCas.roa (raw, json)
Hash identifier: 34zAveD6DBgifob7qIEN1RXa/3zk5U33TrTL3TiwJlQ=
Subject key identifier: D1:4F:DF:52:AF:C7:61:81:D4:43:CA:32:8D:11:29:E4:6B:A8:09:AB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF347ED03AC1A65819FDFDA27628CB526
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0U_fUq_HYYHUQ8oyjREp5GuoCas.roa
Signing time: Tue 03 Oct 2023 02:04:51 +0000
ROA not before: Tue 03 Oct 2023 02:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f347:92b6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f3:47:ed:03:ac:1a:65:81:9f:df:da:27:62:8c:b5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 02:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d14fdf52afc76181d443ca328d1129e46ba809ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:3a:d3:03:1e:65:88:f9:5a:27:a1:11:75:
50:09:48:57:33:7f:04:b6:c5:df:87:fe:79:bd:8c:
9c:f2:85:7e:0e:66:3c:f2:a8:0f:9d:e7:ac:cb:5d:
94:ae:bc:e7:7a:76:3f:f8:ff:cb:d5:5e:6f:f7:58:
73:05:1b:fe:9b:66:f7:54:4a:74:a9:b3:50:b3:d0:
4b:64:99:17:55:57:9b:4f:e6:7d:99:66:ad:b4:47:
05:06:c9:3a:f5:a5:0f:ef:8a:4c:6a:89:6f:a4:1b:
2f:d7:ce:08:63:b7:73:c6:ff:3f:56:0d:a5:a1:c0:
78:10:2a:69:bf:73:f4:23:e2:1e:16:41:b4:e1:de:
67:b8:12:55:75:74:b7:74:7a:80:9f:1a:44:62:67:
5b:1b:f6:88:dc:65:1b:81:5d:aa:ca:4b:a0:c1:04:
c5:27:0a:2b:f5:e3:66:0b:e3:7c:52:4f:b1:da:a2:
d0:8e:6d:ba:7a:3a:21:f8:47:b9:39:bb:55:df:f2:
40:ff:65:d6:2f:d8:d6:7e:c6:fa:e1:74:2d:8d:a4:
a6:c9:7a:77:e3:79:40:d8:a9:c6:0f:fb:58:36:21:
e3:ef:ae:84:db:04:92:1b:3f:bb:d9:5f:93:6b:15:
ef:01:07:0e:8d:31:f9:4c:57:42:0a:1d:7c:82:6a:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4F:DF:52:AF:C7:61:81:D4:43:CA:32:8D:11:29:E4:6B:A8:09:AB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0U_fUq_HYYHUQ8oyjREp5GuoCas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:78:f9:a2:b1:18:88:5a:a4:05:03:de:c7:a7:b5:ba:5d:74:
32:80:9e:e4:82:8b:f0:fb:19:f1:25:5f:67:e8:03:91:65:53:
71:48:fa:a7:d0:32:e1:d0:10:b8:8e:15:44:dd:ba:62:4e:94:
ba:a8:0c:fb:93:12:35:e2:a4:4b:40:cc:00:3b:c9:c6:1b:9b:
25:63:be:d3:ae:74:0c:90:51:bb:5c:30:d1:ea:42:76:6c:e0:
90:ef:2e:33:87:4f:71:4e:ea:db:76:7d:22:63:bd:db:e5:3d:
9b:7e:8f:da:82:ac:bc:40:73:f9:19:f4:92:ec:bf:0b:f6:4a:
49:c6:b6:bf:8a:f8:10:97:1c:bb:01:57:cf:80:0f:30:9f:af:
3b:84:7f:65:0b:ba:11:10:4c:a1:f7:9b:f9:a9:a3:60:52:d1:
1a:51:56:2f:63:9f:73:d7:8e:14:80:e3:66:b5:68:97:06:23:
66:99:fe:a7:f3:39:15:8e:e6:78:f9:a0:38:d8:f9:b1:52:76:
05:73:95:3a:b2:75:5c:f1:89:8b:50:3e:06:1d:5d:07:15:c9:
d3:44:28:e6:0b:f5:f5:10:de:ff:75:38:d0:ca:de:28:37:7d:
e2:0f:06:1c:74:7e:72:b8:d3:26:46:f9:13:9a:75:ae:3b:1f:
4b:31:38:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrzR+0DrBplgZ/f2idijLUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAzMDIwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTRmZGY1MmFmYzc2MTgxZDQ0M2NhMzI4ZDExMjllNDZiYTgwOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ860wMeZYj5WiehEXVQCUhXM38E
tsXfh/55vYyc8oV+DmY88qgPneesy12UrrznenY/+P/L1V5v91hzBRv+m2b3VEp0
qbNQs9BLZJkXVVebT+Z9mWattEcFBsk69aUP74pMaolvpBsv184IY7dzxv8/Vg2l
ocB4ECppv3P0I+IeFkG04d5nuBJVdXS3dHqAnxpEYmdbG/aI3GUbgV2qykugwQTF
Jwor9eNmC+N8Uk+x2qLQjm26ejoh+Ee5ObtV3/JA/2XWL9jWfsb64XQtjaSmyXp3
43lA2KnGD/tYNiHj766E2wSSGz+72V+TaxXvAQcOjTH5TFdCCh18gmrjuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNFP31Kvx2GB1EPKMo0RKeRrqAmrMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMFVfZlVxX0hZWUhVUThveWpSRXA1R3VvQ2FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFp4+aKxGIhapAUD3sen
tbpddDKAnuSCi/D7GfElX2foA5FlU3FI+qfQMuHQELiOFUTdumJOlLqoDPuTEjXi
pEtAzAA7ycYbmyVjvtOudAyQUbtcMNHqQnZs4JDvLjOHT3FO6tt2fSJjvdvlPZt+
j9qCrLxAc/kZ9JLsvwv2SknGtr+K+BCXHLsBV8+ADzCfrzuEf2ULuhEQTKH3m/mp
o2BS0RpRVi9jn3PXjhSA42a1aJcGI2aZ/qfzORWO5nj5oDjY+bFSdgVzlTqydVzx
iYtQPgYdXQcVydNEKOYL9fUQ3v91ONDK3ig3feIPBhx0fnK40yZG+ROada47H0sx
OOs=
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:13:17 2025 by rpki-client