Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-T-N7tutBnmKin_3kCCXHJosu_w.roa
File: 1-T-N7tutBnmKin_3kCCXHJosu_w.roa (raw, json)
Hash identifier: NYcHDF7aSGYEqPByJhiZSSp8luaoySAMpYNbtrZCVQ8=
Subject key identifier: F9:3F:8D:EE:DB:AD:06:79:8A:8A:7F:F7:90:20:97:1C:9A:2C:BB:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5D0EE4DEDE42DA2145FEC2145C10C845
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-T-N7tutBnmKin_3kCCXHJosu_w.roa
Signing time: Tue 12 Dec 2023 08:05:06 +0000
ROA not before: Tue 12 Dec 2023 08:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:5d0e:1fd3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:0e:e4:de:de:42:da:21:45:fe:c2:14:5c:10:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 08:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93f8deedbad06798a8a7ff79020971c9a2cbbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:52:a8:1a:b9:ec:a4:85:b8:56:e7:13:24:
49:ae:2d:24:a6:4f:aa:d8:fe:cc:0c:ec:d9:8b:27:
43:e6:fd:d0:57:2c:19:c8:64:d8:a0:5a:60:24:48:
cb:ad:09:d6:99:4f:ca:c2:01:d0:eb:f3:62:d7:5d:
7b:19:98:0c:e5:e7:34:75:52:f9:16:4e:9d:6c:0b:
87:9f:4e:c1:9c:6a:0f:91:73:ee:7d:d1:a9:9a:58:
11:7a:84:9c:77:8e:17:22:59:ca:55:71:5a:b0:e6:
ef:7f:a6:bb:9a:d5:dc:bd:38:23:0a:78:b5:d5:13:
ce:5d:2f:1e:85:09:cd:35:72:c0:0f:66:ef:74:37:
53:7f:b3:f2:65:7b:c6:24:8e:f1:2e:f3:71:63:76:
92:ca:a0:25:ca:e9:68:6f:8c:16:0b:9d:1d:04:a4:
5d:0c:6f:b0:10:9c:4e:09:95:f7:d0:33:e7:e6:85:
ee:0d:b9:6e:31:66:ae:41:84:94:c4:1c:ba:00:69:
b9:42:96:14:ff:5b:02:5b:44:b6:d6:4e:3c:9a:f0:
e8:e8:ce:49:ed:ad:5d:5e:63:d7:e0:c5:52:eb:9c:
da:76:8e:8a:e0:cf:2e:7d:e6:25:ca:23:d2:7f:7d:
19:22:fe:96:c4:13:de:c0:8f:bc:7b:d0:2b:99:3a:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:8D:EE:DB:AD:06:79:8A:8A:7F:F7:90:20:97:1C:9A:2C:BB:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-T-N7tutBnmKin_3kCCXHJosu_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e1:6f:7a:cc:2c:85:f7:3f:7f:89:83:65:60:fe:a1:1d:d7:
a0:a9:56:75:33:61:72:81:28:16:0c:ef:79:26:e3:00:ea:a6:
17:8d:b1:24:f9:96:b9:5d:0e:05:d5:ac:b4:93:15:e9:c6:de:
4f:31:d6:5e:da:f0:a7:e3:88:f7:5d:6c:f6:38:c8:da:ec:84:
5e:31:bb:ae:4c:4b:37:b6:68:9c:97:08:ab:e4:ca:13:c9:a9:
22:6d:50:78:26:41:14:73:dd:99:5c:ba:2c:6b:1b:94:f7:47:
34:16:c4:87:8f:5a:71:45:52:a1:57:04:96:1f:37:b3:12:e8:
1c:6c:8f:4b:48:38:67:86:2a:13:e1:99:78:da:08:2d:f4:be:
48:a2:fb:dc:c0:48:e0:25:95:8e:0d:aa:61:9a:69:75:b0:62:
b0:48:2d:e9:dd:a4:d5:3e:ac:96:d6:45:0b:2a:53:79:37:c1:
71:82:82:19:ff:2a:ad:db:b1:23:49:56:05:d6:6d:11:e7:ed:
0e:b9:ae:0b:90:8d:1b:85:d2:2d:96:f3:d2:75:e4:7c:ab:68:
96:d0:87:7a:17:5c:09:15:05:eb:99:d6:ab:ea:7a:82:9e:63:
10:a9:62:33:be:e4:38:c0:05:89:3a:e0:df:41:e8:87:19:e6:
96:8e:9e:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxdDuTe3kLaIUX+whRcEMhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEyMDgwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNmOGRlZWRiYWQwNjc5OGE4YTdmZjc5MDIwOTcxYzlhMmNiYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKFSqBq57KSFuFbnEyRJri0kpk+q
2P7MDOzZiydD5v3QVywZyGTYoFpgJEjLrQnWmU/KwgHQ6/Ni1117GZgM5ec0dVL5
Fk6dbAuHn07BnGoPkXPufdGpmlgReoScd44XIlnKVXFasObvf6a7mtXcvTgjCni1
1RPOXS8ehQnNNXLAD2bvdDdTf7PyZXvGJI7xLvNxY3aSyqAlyulob4wWC50dBKRd
DG+wEJxOCZX30DPn5oXuDbluMWauQYSUxBy6AGm5QpYU/1sCW0S21k48mvDo6M5J
7a1dXmPX4MVS65zado6K4M8ufeYlyiPSf30ZIv6WxBPewI+8e9ArmTonYQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPk/je7brQZ5iop/95AglxyaLLv8MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1ULU43dHV0Qm5tS2luXzNrQ0NYSEpvc3Vfdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAa4W96zCyF9z9/iYNl
YP6hHdegqVZ1M2FygSgWDO95JuMA6qYXjbEk+Za5XQ4F1ay0kxXpxt5PMdZe2vCn
44j3XWz2OMja7IReMbuuTEs3tmiclwir5MoTyakibVB4JkEUc92ZXLosaxuU90c0
FsSHj1pxRVKhVwSWHzezEugcbI9LSDhnhioT4Zl42ggt9L5IovvcwEjgJZWODaph
mml1sGKwSC3p3aTVPqyW1kULKlN5N8FxgoIZ/yqt27EjSVYF1m0R5+0Oua4LkI0b
hdItlvPSdeR8q2iW0Id6F1wJFQXrmdar6nqCnmMQqWIzvuQ4wAWJOuDfQeiHGeaW
jp6Y
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:03:20 2025 by rpki-client