Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BhH-rTlHBQLMEYHR2Pul5rULlKA.roa
File: BhH-rTlHBQLMEYHR2Pul5rULlKA.roa (raw, json)
Hash identifier: SYpMnSP9lsLwLD3Q/UtG+x9X2LF6ogNImeaqB/8+YAk=
Subject key identifier: 06:11:FE:AD:39:47:05:02:CC:11:81:D1:D8:FB:A5:E6:B5:0B:94:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4A666F7E899B130599601337A075F938
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BhH-rTlHBQLMEYHR2Pul5rULlKA.roa
Signing time: Fri 08 Dec 2023 17:07:56 +0000
ROA not before: Fri 08 Dec 2023 17:07:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4a63:1e63/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:66:6f:7e:89:9b:13:05:99:60:13:37:a0:75:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 17:07:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0611fead39470502cc1181d1d8fba5e6b50b94a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:f0:cc:68:fb:09:d6:6a:13:05:b6:71:70:
b1:b9:bf:66:bb:2d:d2:10:2c:0a:3a:c6:a9:a4:31:
87:87:f6:8d:7d:bf:c3:b6:0f:09:81:61:cd:1e:b3:
d1:56:fb:ba:5a:d2:b8:cb:31:17:ca:c7:a7:4f:d9:
fd:40:11:fb:dd:2c:3d:a5:2a:93:b6:9c:89:81:f4:
95:b6:71:de:7e:b3:11:ea:c8:03:bc:ed:a1:ee:08:
cd:ea:6b:9f:c1:ef:5c:91:f1:eb:9e:fd:79:fe:8f:
9a:73:a0:60:06:ca:8f:a4:39:d0:a0:fd:bd:19:bf:
90:5c:32:b3:cb:7d:ed:37:01:d2:f0:36:1c:e1:11:
bf:f8:d0:00:af:4d:64:38:9f:ab:5e:2d:58:49:b6:
b3:d1:06:80:fa:95:b7:b5:64:2e:85:30:54:09:41:
5b:c0:0a:2b:07:7b:6a:4c:8f:33:e0:f2:72:f3:78:
44:dc:7e:bc:e6:c0:36:84:15:16:f6:05:a5:c8:0a:
82:24:c7:9e:95:12:a5:72:7f:85:9c:1a:4b:9c:bb:
ed:1c:92:5a:4b:e2:81:d9:09:b1:13:ec:d8:11:ae:
c3:0d:9d:2d:37:8e:c1:08:74:16:07:c4:6e:b5:c1:
19:c4:05:8f:00:92:2b:9c:e2:e3:80:42:ad:e7:85:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:FE:AD:39:47:05:02:CC:11:81:D1:D8:FB:A5:E6:B5:0B:94:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BhH-rTlHBQLMEYHR2Pul5rULlKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d5:b0:a9:8c:bd:9a:85:ab:5f:35:03:ea:20:29:b6:b3:11:
88:ad:80:d7:01:b9:66:5b:40:5a:65:ee:c5:47:68:6c:cb:45:
61:86:62:52:7f:c8:38:b6:29:e1:c5:6e:fa:b3:88:19:b8:0b:
24:00:e5:51:0b:ee:58:ea:07:e1:7e:21:96:77:07:37:c8:e8:
db:aa:a4:cf:2c:e4:72:97:4b:36:35:a5:34:8d:18:c6:41:08:
40:13:c8:62:b1:a8:46:6c:70:b9:d1:2a:70:3d:5e:cc:29:9c:
5a:07:96:fe:cb:d6:dd:96:fd:c5:db:d2:07:27:01:51:d3:98:
f8:9c:ec:22:8f:f5:bf:11:24:61:c2:9e:02:85:b0:7e:53:4d:
f9:53:66:15:e5:f6:07:9c:10:7e:40:10:c0:9b:37:e9:0d:ac:
a4:e7:5a:a0:ec:9e:47:67:39:91:72:10:95:6f:77:dd:6e:2e:
f6:74:0d:8c:db:39:ae:05:2a:51:8e:9b:26:a3:b9:1f:c3:fa:
f8:cd:29:39:5d:2b:20:c7:b8:28:8a:19:25:0d:71:2d:cb:43:
08:16:37:a4:35:e9:5f:7b:64:f5:09:a8:99:23:ca:d3:33:3b:
b5:34:d1:70:1d:13:3e:4a:03:8c:fc:44:2f:4e:1f:ab:98:ae:
4c:01:bf:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxKZm9+iZsTBZlgEzegdfk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MTcwNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjExZmVhZDM5NDcwNTAyY2MxMTgxZDFkOGZiYTVlNmI1MGI5NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKLwzGj7CdZqEwW2cXCxub9muy3S
ECwKOsappDGHh/aNfb/Dtg8JgWHNHrPRVvu6WtK4yzEXysenT9n9QBH73Sw9pSqT
tpyJgfSVtnHefrMR6sgDvO2h7gjN6mufwe9ckfHrnv15/o+ac6BgBsqPpDnQoP29
Gb+QXDKzy33tNwHS8DYc4RG/+NAAr01kOJ+rXi1YSbaz0QaA+pW3tWQuhTBUCUFb
wAorB3tqTI8z4PJy83hE3H685sA2hBUW9gWlyAqCJMeelRKlcn+FnBpLnLvtHJJa
S+KB2QmxE+zYEa7DDZ0tN47BCHQWB8RutcEZxAWPAJIrnOLjgEKt54XQuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAYR/q05RwUCzBGB0dj7pea1C5SgMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQmhILXJUbEhCUUxNRVlIUjJQdWw1clVMbEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAArVsKmMvZqFq181A+og
KbazEYitgNcBuWZbQFpl7sVHaGzLRWGGYlJ/yDi2KeHFbvqziBm4CyQA5VEL7ljq
B+F+IZZ3BzfI6NuqpM8s5HKXSzY1pTSNGMZBCEATyGKxqEZscLnRKnA9XswpnFoH
lv7L1t2W/cXb0gcnAVHTmPic7CKP9b8RJGHCngKFsH5TTflTZhXl9gecEH5AEMCb
N+kNrKTnWqDsnkdnOZFyEJVvd91uLvZ0DYzbOa4FKlGOmyajuR/D+vjNKTldKyDH
uCiKGSUNcS3LQwgWN6Q16V97ZPUJqJkjytMzO7U00XAdEz5KA4z8RC9OH6uYrkwB
vyo=
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:16:37 2025 by rpki-client