Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UEvhJyNqUGZcP7rTAOhcK_vG0g.roa
File: 2UEvhJyNqUGZcP7rTAOhcK_vG0g.roa (raw, json)
Hash identifier: ZGzAmXiPL+seiN88QiQPc/n16xLo+W8FxKZ9l4GEraY=
Subject key identifier: D9:41:2F:84:9C:8D:A9:41:99:70:FE:EB:4C:03:A1:70:AF:EF:1B:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C79CFBB16C73AB53D07A528370CCCD056
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UEvhJyNqUGZcP7rTAOhcK_vG0g.roa
Signing time: Sun 17 Dec 2023 22:05:06 +0000
ROA not before: Sun 17 Dec 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:79ce:e387/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:cf:bb:16:c7:3a:b5:3d:07:a5:28:37:0c:cc:d0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9412f849c8da9419970feeb4c03a170afef1b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:12:08:e5:49:10:21:90:39:0a:71:73:05:
a1:31:7f:1f:a2:b7:40:60:8b:9d:dd:a6:45:ed:c4:
c2:d5:0b:50:14:20:4b:2a:58:4f:52:1c:ec:7d:f9:
51:e8:77:98:e5:84:73:54:da:6a:01:9d:50:da:13:
c0:f8:7a:ac:bf:00:b6:3e:de:85:2a:fe:31:6e:d5:
44:88:8f:ce:c4:f5:71:b3:bc:aa:9d:7e:34:6c:e4:
60:bb:7c:4c:5d:3b:1b:9b:70:67:2e:26:5a:77:07:
db:9c:94:e1:96:0d:e1:48:7e:10:e6:9c:eb:36:e6:
df:26:55:90:37:89:00:e2:42:aa:6b:d6:9a:be:fb:
20:a8:65:2b:62:ee:98:56:83:64:0b:68:22:ac:7e:
a4:c8:8e:60:8c:92:4b:1c:3d:70:06:ef:6c:7c:fb:
e8:c0:19:f3:49:88:13:32:b1:94:84:89:ac:71:63:
ae:1e:21:3f:3d:c8:db:2d:82:ff:10:b4:7a:52:93:
c4:07:99:ee:7b:9e:1b:58:57:e5:e9:ad:8b:7d:bf:
8e:06:31:f2:31:0a:6a:9d:f1:1a:6d:34:be:cc:76:
90:9a:8a:ae:9b:25:ed:71:c7:a3:ad:99:2f:41:1f:
f2:ef:6d:5b:87:a3:92:64:a2:ca:23:66:9e:4b:b9:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:2F:84:9C:8D:A9:41:99:70:FE:EB:4C:03:A1:70:AF:EF:1B:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2UEvhJyNqUGZcP7rTAOhcK_vG0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:a3:55:3d:b1:87:75:f5:d5:00:fd:ab:a0:52:d5:99:6d:63:
c1:da:00:37:c4:07:a9:19:54:eb:80:77:f3:88:dc:62:11:bc:
07:26:d5:28:48:e0:1b:e3:98:e3:be:01:9d:36:2a:7f:ce:3a:
7c:da:9d:60:bb:44:ea:b5:59:47:94:7b:34:0f:36:59:1e:1b:
2e:de:73:cc:d5:c8:69:2d:ff:f5:eb:6f:39:6f:73:4a:59:66:
09:33:04:2a:7c:fc:d6:e6:8d:1a:64:98:e8:54:09:74:65:0f:
1c:94:50:35:82:3b:a9:a0:43:dc:6f:e4:23:98:fb:e8:f8:5b:
92:80:c2:48:8d:78:17:1f:e1:ae:85:02:59:f5:1e:38:ff:8f:
88:e7:fd:7c:c2:58:6e:f4:8e:aa:c2:4a:7b:ee:fa:d4:64:c7:
46:0d:86:f2:e6:16:0d:6e:92:12:ff:8e:fd:a6:5d:f3:de:27:
6e:c8:20:63:d7:89:2c:79:96:0d:f0:1e:54:00:44:b8:e4:91:
32:49:62:dc:82:c0:11:cd:38:49:d8:61:87:56:4a:50:12:6e:
8b:a1:84:74:d0:13:8b:2a:1e:e2:55:52:c3:47:a3:b0:1f:e4:
14:29:6d:76:1a:d6:90:63:a2:a2:98:f4:94:b6:88:54:23:84:
61:75:61:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx5z7sWxzq1PQelKDcMzNBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MjIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTQxMmY4NDljOGRhOTQxOTk3MGZlZWI0YzAzYTE3MGFmZWYxYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohoSCOVJECGQOQpxcwWhMX8fordA
YIud3aZF7cTC1QtQFCBLKlhPUhzsfflR6HeY5YRzVNpqAZ1Q2hPA+HqsvwC2Pt6F
Kv4xbtVEiI/OxPVxs7yqnX40bORgu3xMXTsbm3BnLiZadwfbnJThlg3hSH4Q5pzr
NubfJlWQN4kA4kKqa9aavvsgqGUrYu6YVoNkC2girH6kyI5gjJJLHD1wBu9sfPvo
wBnzSYgTMrGUhImscWOuHiE/PcjbLYL/ELR6UpPEB5nue54bWFfl6a2Lfb+OBjHy
MQpqnfEabTS+zHaQmoqumyXtccejrZkvQR/y721bh6OSZKLKI2aeS7l9rQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNlBL4ScjalBmXD+60wDoXCv7xtIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMlVFdmhKeU5xVUdaY1A3clRBT2hjS192RzBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJqjVT2xh3X11QD9q6BS
1ZltY8HaADfEB6kZVOuAd/OI3GIRvAcm1ShI4BvjmOO+AZ02Kn/OOnzanWC7ROq1
WUeUezQPNlkeGy7ec8zVyGkt//Xrbzlvc0pZZgkzBCp8/NbmjRpkmOhUCXRlDxyU
UDWCO6mgQ9xv5COY++j4W5KAwkiNeBcf4a6FAln1Hjj/j4jn/XzCWG70jqrCSnvu
+tRkx0YNhvLmFg1ukhL/jv2mXfPeJ27IIGPXiSx5lg3wHlQARLjkkTJJYtyCwBHN
OEnYYYdWSlASbouhhHTQE4sqHuJVUsNHo7Af5BQpbXYa1pBjoqKY9JS2iFQjhGF1
Yeg=
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:13:51 2025 by rpki-client