Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rvKmMfhIlaT_HL5CaHn2mNYgOA.roa
File: 9rvKmMfhIlaT_HL5CaHn2mNYgOA.roa (raw, json)
Hash identifier: dBT0IsjJhV7L0eEu14Y8oE6M2sPiE1A/l/AY19r5g2o=
Subject key identifier: F6:BB:CA:98:C7:E1:22:56:93:FC:72:F9:09:A1:E7:DA:63:58:80:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB7D56513B132810A48D703A47ECCE719
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rvKmMfhIlaT_HL5CaHn2mNYgOA.roa
Signing time: Fri 10 Nov 2023 06:04:57 +0000
ROA not before: Fri 10 Nov 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:b7d5:3882/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:d5:65:13:b1:32:81:0a:48:d7:03:a4:7e:cc:e7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6bbca98c7e1225693fc72f909a1e7da635880e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:a1:77:d5:6f:a0:3e:c0:2d:4c:b2:ee:29:
57:7e:37:bc:08:09:b4:c1:75:6d:92:93:1e:27:d8:
8c:30:88:05:b5:a7:7a:43:d5:b7:4f:e3:86:dc:30:
e2:61:63:94:ff:7a:77:41:3a:76:45:42:e1:94:3e:
80:50:68:81:fe:d9:52:2a:14:36:68:d2:55:12:4e:
3f:1b:1f:e9:23:cf:6b:6b:02:22:c7:be:c5:87:62:
82:a7:5a:15:01:9b:47:b9:bf:f5:45:b5:bf:0e:a1:
fc:6c:b5:e0:bb:a2:e0:db:cb:5b:22:bb:30:19:6e:
36:cd:01:8e:7e:29:9c:b4:5e:a0:6b:05:2a:82:51:
5f:28:90:8d:6d:68:67:8c:64:4e:78:1e:ae:93:5e:
03:a2:9d:99:47:11:97:07:5d:a4:b0:e6:10:e8:1d:
1f:60:eb:00:cc:a0:80:f0:32:61:f4:e8:99:a9:f1:
a5:03:d0:ab:d8:43:56:fa:a5:27:2c:7c:0f:38:f5:
36:27:7e:9b:a4:6a:c6:e3:75:c0:76:b0:76:21:56:
94:86:33:88:b6:54:0d:0d:a0:1f:24:33:72:f9:cd:
3d:11:42:13:71:5a:70:62:55:c0:f9:78:00:bd:5f:
28:88:2a:bb:5d:40:ed:9b:3e:32:08:48:22:23:68:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:CA:98:C7:E1:22:56:93:FC:72:F9:09:A1:E7:DA:63:58:80:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rvKmMfhIlaT_HL5CaHn2mNYgOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:66:b7:2e:87:a0:02:d7:65:de:43:43:0d:3f:46:95:b1:df:
9e:2b:d4:09:ed:c8:dc:c4:21:ee:9a:40:d9:cf:54:d2:e1:96:
ee:a0:7f:a6:6d:5f:34:f7:bf:e0:3d:22:a0:6f:3f:72:24:8d:
0b:f1:24:7d:e8:06:d6:ab:5a:fd:6a:c0:d9:a8:3a:56:f3:bf:
c5:0d:15:a8:20:30:60:ac:71:9c:09:5a:9d:1f:26:85:cd:24:
63:a6:68:b3:b2:6e:b8:35:ba:49:3f:12:85:b9:6e:2f:c6:ba:
7e:5d:51:29:84:94:34:64:cb:82:4d:a6:eb:40:93:70:12:66:
d4:a8:f6:6b:14:70:64:7c:29:9c:fa:f8:b9:d7:4e:59:d3:ed:
10:9d:76:d9:f9:34:d3:75:fe:44:15:55:1c:bd:e7:47:83:68:
16:5d:26:26:54:8a:ba:62:e4:e4:59:04:ba:07:54:6f:9b:94:
35:a5:6e:a9:56:b9:5c:c4:c5:4c:f0:5e:77:c5:cf:e2:f2:47:
28:19:03:52:e2:67:04:37:b3:95:31:a0:f6:e2:b1:6e:fe:96:
33:67:19:bc:0f:74:41:e8:34:1f:1a:e0:3e:27:31:e3:37:f8:
39:49:0d:91:21:9a:2b:28:4c:44:c3:ad:f6:89:a2:47:d9:c4:
b0:db:e7:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu31WUTsTKBCkjXA6R+zOcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDYwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmJiY2E5OGM3ZTEyMjU2OTNmYzcyZjkwOWExZTdkYTYzNTg4MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttuhd9VvoD7ALUyy7ilXfje8CAm0
wXVtkpMeJ9iMMIgFtad6Q9W3T+OG3DDiYWOU/3p3QTp2RULhlD6AUGiB/tlSKhQ2
aNJVEk4/Gx/pI89rawIix77Fh2KCp1oVAZtHub/1RbW/DqH8bLXgu6Lg28tbIrsw
GW42zQGOfimctF6gawUqglFfKJCNbWhnjGROeB6uk14Dop2ZRxGXB12ksOYQ6B0f
YOsAzKCA8DJh9OiZqfGlA9Cr2ENW+qUnLHwPOPU2J36bpGrG43XAdrB2IVaUhjOI
tlQNDaAfJDNy+c09EUITcVpwYlXA+XgAvV8oiCq7XUDtmz4yCEgiI2hiwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPa7ypjH4SJWk/xy+Qmh59pjWIDgMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOXJ2S21NZmhJbGFUX0hMNUNhSG4ybU5ZZ09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACRmty6HoALXZd5DQw0/
RpWx354r1AntyNzEIe6aQNnPVNLhlu6gf6ZtXzT3v+A9IqBvP3IkjQvxJH3oBtar
Wv1qwNmoOlbzv8UNFaggMGCscZwJWp0fJoXNJGOmaLOybrg1ukk/EoW5bi/Gun5d
USmElDRky4JNputAk3ASZtSo9msUcGR8KZz6+LnXTlnT7RCddtn5NNN1/kQVVRy9
50eDaBZdJiZUirpi5ORZBLoHVG+blDWlbqlWuVzExUzwXnfFz+LyRygZA1LiZwQ3
s5UxoPbisW7+ljNnGbwPdEHoNB8a4D4nMeM3+DlJDZEhmisoTETDrfaJokfZxLDb
54w=
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:08 2025 by rpki-client