Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CU6q7E9I5x5X-B_Xn7N_1LZnMcs.roa
File: CU6q7E9I5x5X-B_Xn7N_1LZnMcs.roa (raw, json)
Hash identifier: eTFYuni4OiIR2nTh4YGGI5vzePq8ltUiSX8ZZQ0eQBY=
Subject key identifier: 09:4E:AA:EC:4F:48:E7:1E:57:F8:1F:D7:9F:B3:7F:D4:B6:67:31:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD4963B6F45356ECB64CF0ECB18704053
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CU6q7E9I5x5X-B_Xn7N_1LZnMcs.roa
Signing time: Wed 15 Nov 2023 20:04:57 +0000
ROA not before: Wed 15 Nov 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:d495:8a3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:96:3b:6f:45:35:6e:cb:64:cf:0e:cb:18:70:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094eaaec4f48e71e57f81fd79fb37fd4b66731cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:25:9b:14:10:7b:5e:64:49:a1:c0:33:6e:
8c:c1:97:d7:2d:27:08:df:46:0c:2c:1c:6c:e7:24:
3d:7f:7e:48:ee:29:c1:6f:fe:0c:7a:f5:d3:5e:8c:
f9:bc:55:f0:ce:52:15:2d:44:16:dd:9f:a2:c6:64:
62:86:b8:57:31:54:33:58:4c:ec:58:08:e6:c9:d1:
8c:17:ce:d6:4f:8b:65:f1:53:ce:9b:90:e7:23:b0:
a5:8d:41:a0:7d:d7:98:bf:c8:6c:49:5d:cb:31:d0:
16:5c:65:1f:a9:60:9c:b6:78:a9:ab:fa:19:79:4b:
b5:d4:07:88:4d:79:1f:85:e5:dc:df:78:f4:13:a2:
4e:4a:80:f7:40:23:ab:a2:40:6d:ca:58:9a:ac:81:
9d:2a:50:e6:a0:c8:89:c9:eb:c0:c8:bc:ef:fb:e5:
3c:8e:ac:19:d5:1e:31:97:d3:7f:bf:a2:62:7f:91:
2c:e2:4b:78:7c:58:41:56:59:cf:1e:19:db:51:26:
e1:95:c6:e7:b3:90:a3:bd:10:c2:00:f7:df:9b:2f:
21:f2:ab:86:e1:2d:e9:5a:bc:57:17:27:52:38:3e:
b6:bc:45:9d:29:60:55:3d:0a:5e:e1:46:0c:82:59:
7f:80:ac:bb:1e:e9:1f:85:5c:cd:a0:62:c3:2d:9f:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:AA:EC:4F:48:E7:1E:57:F8:1F:D7:9F:B3:7F:D4:B6:67:31:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CU6q7E9I5x5X-B_Xn7N_1LZnMcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:59:6e:c3:46:9b:9d:6c:1e:d4:65:89:c9:4a:1b:cc:4d:6f:
f1:e2:fd:2b:23:e3:00:ad:66:c3:71:ba:8c:9c:89:64:32:87:
a7:b7:98:49:bb:65:fd:e7:17:54:ac:92:ff:27:4e:15:9f:ca:
6e:09:fa:69:f2:d1:b7:30:89:20:ff:a6:c2:8a:26:51:b0:e9:
3f:84:01:1e:6c:49:db:a2:38:74:69:1d:f4:1a:42:26:e3:12:
8c:9a:94:c8:8a:49:60:45:fc:bf:57:25:2c:bc:90:0d:68:50:
19:ef:aa:0f:4e:57:d1:76:b7:27:0c:40:ff:c8:1f:2d:94:38:
64:c0:76:73:fa:23:e0:dd:a1:de:ee:93:c7:aa:5d:6b:34:d8:
f9:2b:36:d2:2a:68:1e:10:82:7f:bf:77:c4:0a:a9:bc:43:a0:
c7:d8:e3:aa:7f:47:a5:8d:d5:15:b4:eb:2f:90:bd:fc:42:da:
f8:1f:c8:fb:c7:39:b2:22:0c:b1:e9:04:57:35:dc:a6:90:4c:
3a:0e:aa:0c:08:98:07:74:92:02:9b:6b:6b:e5:d1:ea:22:87:
95:30:4a:f6:fb:0d:da:db:de:a5:17:14:e0:f6:76:ed:49:e2:
99:45:8e:b1:57:38:95:54:ef:c6:75:b8:60:ab:da:d8:4c:6f:
8b:84:66:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvUljtvRTVuy2TPDssYcEBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE1MjAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTRlYWFlYzRmNDhlNzFlNTdmODFmZDc5ZmIzN2ZkNGI2NjczMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAwlmxQQe15kSaHAM26MwZfXLScI
30YMLBxs5yQ9f35I7inBb/4MevXTXoz5vFXwzlIVLUQW3Z+ixmRihrhXMVQzWEzs
WAjmydGMF87WT4tl8VPOm5DnI7CljUGgfdeYv8hsSV3LMdAWXGUfqWCctnipq/oZ
eUu11AeITXkfheXc33j0E6JOSoD3QCOrokBtyliarIGdKlDmoMiJyevAyLzv++U8
jqwZ1R4xl9N/v6Jif5Es4kt4fFhBVlnPHhnbUSbhlcbns5CjvRDCAPffmy8h8quG
4S3pWrxXFydSOD62vEWdKWBVPQpe4UYMgll/gKy7HukfhVzNoGLDLZ8r6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAlOquxPSOceV/gf15+zf9S2ZzHLMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQ1U2cTdFOUk1eDVYLUJfWG43Tl8xTFpuTWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGJZbsNGm51sHtRliclK
G8xNb/Hi/Ssj4wCtZsNxuoyciWQyh6e3mEm7Zf3nF1Sskv8nThWfym4J+mny0bcw
iSD/psKKJlGw6T+EAR5sSduiOHRpHfQaQibjEoyalMiKSWBF/L9XJSy8kA1oUBnv
qg9OV9F2tycMQP/IHy2UOGTAdnP6I+Ddod7uk8eqXWs02PkrNtIqaB4Qgn+/d8QK
qbxDoMfY46p/R6WN1RW06y+QvfxC2vgfyPvHObIiDLHpBFc13KaQTDoOqgwImAd0
kgKba2vl0eoih5UwSvb7Ddrb3qUXFOD2du1J4plFjrFXOJVU78Z1uGCr2thMb4uE
ZoI=
-----END CERTIFICATE-----
Generated at Wed Jun 18 00:26:55 2025 by rpki-client