Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4I7NoCWV0lWS2VWRj68Y6RsuMRo.roa
File: 4I7NoCWV0lWS2VWRj68Y6RsuMRo.roa (raw, json)
Hash identifier: /VSywWWrMGuprwOvl65DcPNOfDOlO6/0eqKIOHIPwZM=
Subject key identifier: E0:8E:CD:A0:25:95:D2:55:92:D9:55:91:8F:AF:18:E9:1B:2E:31:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB3FBC920AA41129B785839D11552C529
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4I7NoCWV0lWS2VWRj68Y6RsuMRo.roa
Signing time: Wed 20 Sep 2023 19:05:37 +0000
ROA not before: Wed 20 Sep 2023 19:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:b3fa:df98/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:fb:c9:20:aa:41:12:9b:78:58:39:d1:15:52:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 19:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08ecda02595d25592d955918faf18e91b2e311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:5f:09:1b:9b:7e:eb:4c:97:01:e8:35:06:
aa:f9:e4:07:49:94:1e:f7:85:e9:8e:cd:20:df:63:
59:c0:a1:0b:4c:fa:d1:04:6d:af:96:b2:9d:63:2d:
1e:96:f4:8a:b1:3a:29:45:e5:c3:a9:3d:55:24:12:
de:fb:8b:7b:2f:49:29:0a:27:4d:63:47:5e:47:65:
15:84:c9:1b:41:60:b1:94:9a:ce:6b:a6:34:09:6a:
09:e1:47:dd:a5:2b:58:41:0f:e3:66:a5:11:ca:15:
c1:38:14:cc:cd:34:85:44:23:6d:d0:36:57:56:2b:
26:85:df:8b:ed:6a:d4:8a:e4:61:69:b2:25:d2:a3:
be:89:16:da:2a:6b:68:a8:82:f8:41:81:33:a8:bc:
f3:04:f9:63:d1:bc:77:7b:d9:44:57:e8:52:36:5f:
c1:17:8e:28:6b:a3:c0:72:11:f8:f0:7e:2e:42:83:
56:02:7e:a1:4b:e3:dd:49:05:c9:ec:69:14:84:54:
ba:63:42:c1:6a:db:b4:73:0b:aa:4f:af:68:da:ee:
2e:fc:78:16:e8:2d:d1:30:0b:77:2a:05:5e:25:d6:
b0:82:99:74:2c:e6:08:24:78:7e:f3:6d:d7:7d:c3:
75:17:55:31:72:34:aa:8f:39:12:df:f3:ab:09:4f:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:CD:A0:25:95:D2:55:92:D9:55:91:8F:AF:18:E9:1B:2E:31:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4I7NoCWV0lWS2VWRj68Y6RsuMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:40:be:64:52:13:76:65:37:b3:a9:48:7e:23:6a:de:52:d0:
a2:40:25:2f:cc:08:9d:0a:89:eb:68:9d:ae:85:cc:12:f5:21:
3c:93:f1:48:88:31:fb:62:05:f6:cd:90:28:61:07:0b:c3:6d:
b4:79:c8:23:47:e3:5a:cf:22:eb:e2:9e:00:ff:f0:85:4b:1a:
3d:52:e0:cf:a7:2a:4b:94:71:7b:b7:04:42:50:b9:e9:06:ee:
98:96:d8:2d:aa:48:d1:70:32:b2:8c:ba:84:f8:b1:57:7b:f6:
4b:e9:cc:f9:ae:a1:40:93:91:22:9a:2b:7b:b5:40:71:81:2a:
53:f2:30:91:f1:5b:68:fa:0d:dd:f5:72:91:cd:e6:70:f2:e8:
08:bd:0b:15:e6:3f:a5:ab:37:ca:16:5d:d3:40:3e:c9:8c:4c:
0a:db:d9:d4:dc:0a:65:7d:68:e8:6e:7f:2a:3f:10:96:5a:4c:
44:1e:8e:f8:14:b9:29:1d:9c:c3:f5:65:6a:8b:4a:87:5e:de:
b2:6c:ac:4b:c5:f0:a3:bb:36:c1:d4:be:1a:27:dc:bf:cb:be:
e1:16:b5:32:50:4e:5d:a4:c0:3c:57:c6:d5:4c:6b:ac:6f:98:
6e:4a:9a:6f:92:e0:a7:5b:57:10:2e:9d:eb:f6:3a:0b:2e:cf:
c2:84:85:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqz+8kgqkESm3hYOdEVUsUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIwMTkwNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDhlY2RhMDI1OTVkMjU1OTJkOTU1OTE4ZmFmMThlOTFiMmUzMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DdfCRubfutMlwHoNQaq+eQHSZQe
94Xpjs0g32NZwKELTPrRBG2vlrKdYy0elvSKsTopReXDqT1VJBLe+4t7L0kpCidN
Y0deR2UVhMkbQWCxlJrOa6Y0CWoJ4UfdpStYQQ/jZqURyhXBOBTMzTSFRCNt0DZX
Vismhd+L7WrUiuRhabIl0qO+iRbaKmtoqIL4QYEzqLzzBPlj0bx3e9lEV+hSNl/B
F44oa6PAchH48H4uQoNWAn6hS+PdSQXJ7GkUhFS6Y0LBatu0cwuqT69o2u4u/HgW
6C3RMAt3KgVeJdawgpl0LOYIJHh+823XfcN1F1UxcjSqjzkS3/OrCU8eHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOCOzaAlldJVktlVkY+vGOkbLjEaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNEk3Tm9DV1YwbFdTMlZXUmo2OFk2UnN1TVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE1AvmRSE3ZlN7OpSH4j
at5S0KJAJS/MCJ0Kietona6FzBL1ITyT8UiIMftiBfbNkChhBwvDbbR5yCNH41rP
IuvingD/8IVLGj1S4M+nKkuUcXu3BEJQuekG7piW2C2qSNFwMrKMuoT4sVd79kvp
zPmuoUCTkSKaK3u1QHGBKlPyMJHxW2j6Dd31cpHN5nDy6Ai9CxXmP6WrN8oWXdNA
PsmMTArb2dTcCmV9aOhufyo/EJZaTEQejvgUuSkdnMP1ZWqLSode3rJsrEvF8KO7
NsHUvhon3L/LvuEWtTJQTl2kwDxXxtVMa6xvmG5Kmm+S4KdbVxAunev2Ogsuz8KE
hes=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:25:04 2025 by rpki-client