Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Tq3HuxuLZS1QHGDDLoCw7x-x9E.roa
File: 1-Tq3HuxuLZS1QHGDDLoCw7x-x9E.roa (raw, json)
Hash identifier: x8FopxM9IubxABWdqUJEX32Dtt86LbsxWaTvX37PR+w=
Subject key identifier: F9:3A:B7:1E:EC:6E:2D:94:B5:40:71:83:0C:BA:02:C3:BC:7E:C7:D1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3F7226D811B43B431BC9275B1B6A787C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Tq3HuxuLZS1QHGDDLoCw7x-x9E.roa
Signing time: Wed 06 Dec 2023 14:04:54 +0000
ROA not before: Wed 06 Dec 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:3f71:9cd0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:72:26:d8:11:b4:3b:43:1b:c9:27:5b:1b:6a:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93ab71eec6e2d94b54071830cba02c3bc7ec7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:5d:f9:43:7f:26:bf:e9:35:f3:49:64:1c:
c4:ef:5f:0c:cc:81:26:44:cc:82:69:a7:81:d1:ed:
47:88:92:62:f0:9a:e6:a3:e8:da:fa:ad:f1:48:77:
10:07:4c:a3:97:dd:3a:96:f6:7f:4c:8b:35:d9:42:
29:e1:d9:78:5e:b9:b1:13:68:0a:42:a0:99:9b:3e:
3d:e2:4a:ab:7e:67:32:e1:93:12:a2:91:a3:8b:ea:
46:bf:6b:ed:64:55:eb:45:ed:99:9e:9e:5d:b1:7f:
83:f2:af:48:d4:af:35:33:3e:22:68:ac:b4:52:a2:
27:4b:c3:44:f1:cc:a2:7d:38:0c:12:da:1a:9b:12:
9e:33:50:04:2c:04:1c:ab:31:8b:3f:a5:19:3a:a9:
b3:1a:92:b7:94:bd:3b:63:2d:23:84:1f:2c:91:21:
7c:a0:ed:8c:e6:2b:6f:5d:6a:e1:ed:fa:28:ee:74:
0a:9f:ce:b1:f4:86:0d:c7:93:8b:f6:5d:39:be:cc:
9e:4d:ce:a6:4a:cb:5c:26:d3:4c:b4:db:9c:8b:a2:
64:b0:ee:0b:79:bb:a9:6d:c7:1c:94:8b:d4:48:41:
53:8b:a1:cc:22:b6:2e:3a:ae:8e:90:9e:92:bd:09:
71:96:fd:3c:db:9b:55:ef:10:39:17:c1:06:01:8e:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:B7:1E:EC:6E:2D:94:B5:40:71:83:0C:BA:02:C3:BC:7E:C7:D1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Tq3HuxuLZS1QHGDDLoCw7x-x9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:5a:de:be:5e:ae:ff:ec:04:08:80:1d:48:88:3b:b2:ab:ac:
c8:e3:ce:8c:e4:71:c4:81:3b:dd:b8:66:98:87:65:71:17:3a:
60:51:d9:96:20:e3:ef:b3:c9:8e:f6:4c:c3:92:e5:7c:c8:db:
a0:2c:ec:8c:77:0b:e5:6a:73:99:60:44:f8:87:35:bf:d6:70:
ea:f0:b6:5a:61:98:61:cb:85:54:42:01:5a:75:4d:7a:a7:96:
3a:aa:6b:bb:f4:96:34:3f:79:ef:5b:e8:1a:3a:cb:23:94:73:
99:03:2c:1f:5e:d3:56:50:bc:15:1b:20:0c:75:de:6e:29:40:
aa:e6:f0:c4:88:6a:15:ad:c0:3a:cb:25:24:14:c3:5c:44:45:
7a:18:4e:e8:87:5f:7d:31:50:ac:d9:47:4f:64:d3:8c:5e:a5:
7d:69:49:51:2c:35:3c:9f:ad:24:f9:df:06:12:69:53:a7:08:
90:43:92:17:00:05:be:71:1f:ed:69:b4:c0:5d:1f:3d:52:1b:
59:17:a9:7f:13:ed:32:f6:c1:07:00:89:92:40:51:99:53:be:
3f:c0:b2:c7:65:81:ad:cb:4d:f1:5b:b2:9d:16:4b:e0:dd:a1:
0f:7c:b4:ba:e8:e8:ae:be:3f:a8:a5:d5:fe:1f:77:c9:de:d2:
41:be:b9:89
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYw/cibYEbQ7QxvJJ1sbanh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTQwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNhYjcxZWVjNmUyZDk0YjU0MDcxODMwY2JhMDJjM2JjN2VjN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Vd+UN/Jr/pNfNJZBzE718MzIEm
RMyCaaeB0e1HiJJi8Jrmo+ja+q3xSHcQB0yjl906lvZ/TIs12UIp4dl4XrmxE2gK
QqCZmz494kqrfmcy4ZMSopGji+pGv2vtZFXrRe2Znp5dsX+D8q9I1K81Mz4iaKy0
UqInS8NE8cyifTgMEtoamxKeM1AELAQcqzGLP6UZOqmzGpK3lL07Yy0jhB8skSF8
oO2M5itvXWrh7foo7nQKn86x9IYNx5OL9l05vsyeTc6mSstcJtNMtNuci6JksO4L
ebupbccclIvUSEFTi6HMIrYuOq6OkJ6SvQlxlv0825tV7xA5F8EGAY6NowIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPk6tx7sbi2UtUBxgwy6AsO8fsfRMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS1UcTNIdXh1TFpTMVFIR0RETG9Ddzd4LXg5RS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQDQWt6+Xq7/7AQIgB1I
iDuyq6zI486M5HHEgTvduGaYh2VxFzpgUdmWIOPvs8mO9kzDkuV8yNugLOyMdwvl
anOZYET4hzW/1nDq8LZaYZhhy4VUQgFadU16p5Y6qmu79JY0P3nvW+gaOssjlHOZ
AywfXtNWULwVGyAMdd5uKUCq5vDEiGoVrcA6yyUkFMNcREV6GE7oh199MVCs2UdP
ZNOMXqV9aUlRLDU8n60k+d8GEmlTpwiQQ5IXAAW+cR/tabTAXR89UhtZF6l/E+0y
9sEHAImSQFGZU74/wLLHZYGty03xW7KdFkvg3aEPfLS66Oiuvj+opdX+H3fJ3tJB
vrmJ
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:21:48 2025 by rpki-client