Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dgs7H9CspqJ1PtMvyECqdj9WkgQ.roa
File: Dgs7H9CspqJ1PtMvyECqdj9WkgQ.roa (raw, json)
Hash identifier: uysCwwCvcIYK8pMExvOIb+vkaz43s2KOoHYdoSVWvz8=
Subject key identifier: 0E:0B:3B:1F:D0:AC:A6:A2:75:3E:D3:2F:C8:40:AA:76:3F:56:92:04
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD3BA83BA89DF2EB59A8CC5787E547D16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dgs7H9CspqJ1PtMvyECqdj9WkgQ.roa
Signing time: Wed 15 Nov 2023 16:04:57 +0000
ROA not before: Wed 15 Nov 2023 16:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:d3ba:1f0c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:ba:83:ba:89:df:2e:b5:9a:8c:c5:78:7e:54:7d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 16:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e0b3b1fd0aca6a2753ed32fc840aa763f569204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:47:a0:8f:a3:98:46:2f:71:bd:34:b3:27:
28:dd:d2:2d:4d:82:f6:af:7e:a6:67:1f:f8:59:2d:
0f:b8:b4:7b:09:a1:55:d4:83:d3:a8:f2:f8:9f:3d:
be:ed:c3:db:2a:dd:51:72:44:96:81:5d:01:7c:8c:
9e:f8:be:d9:e7:e5:01:2e:40:06:91:ba:17:f0:db:
0d:a6:06:75:20:eb:e5:ae:c8:2c:1a:2d:bb:19:da:
94:af:47:6e:4f:7e:78:df:b9:f5:1a:71:d5:87:73:
7d:c8:13:54:e3:40:53:40:ca:6b:ef:e0:e3:de:86:
e0:79:5d:f4:c2:c7:7c:65:9b:08:15:1a:38:9e:6e:
bb:86:5f:e2:6a:78:ab:8a:78:0e:9e:40:67:be:26:
cd:02:72:22:61:8a:00:63:cb:0e:a6:17:76:c0:44:
ad:df:a1:80:59:8c:b1:8b:f7:31:ae:33:a7:4f:7e:
cb:8a:9c:86:18:98:eb:1d:d3:d9:f6:1c:04:df:48:
8e:54:2a:80:78:ff:f2:db:ff:c5:67:a0:c1:86:27:
7f:69:91:1d:35:04:f3:f1:50:b6:bd:87:21:68:2a:
61:95:49:89:c5:5d:e0:4f:3d:6d:74:75:24:76:2b:
6e:b2:9a:c5:aa:a0:ec:3f:e3:92:8c:09:6d:b0:f7:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:3B:1F:D0:AC:A6:A2:75:3E:D3:2F:C8:40:AA:76:3F:56:92:04
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dgs7H9CspqJ1PtMvyECqdj9WkgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:9a:b7:5f:6a:33:1b:41:8c:02:a6:dc:e3:53:62:49:b8:1a:
73:c2:a0:c6:75:3f:0d:88:1b:26:d6:50:c9:d5:e3:43:2b:e2:
bd:30:a5:51:67:67:f1:ab:7a:d4:53:73:7c:9e:85:9c:a6:3d:
73:26:b6:36:01:c6:43:b2:18:64:b1:62:a8:97:51:58:78:9e:
b9:fb:93:fb:69:af:9c:af:17:c5:56:d3:46:ce:9e:21:45:c1:
1e:bb:e7:91:7c:d2:a9:c4:b3:e4:73:3b:49:c0:1e:b4:ed:f5:
9a:5d:25:fe:a4:44:5b:f0:13:52:ba:38:09:65:7f:cc:ae:65:
72:80:bb:09:f9:48:0b:b0:52:a8:34:18:9e:19:e1:17:74:aa:
bc:71:ab:e3:3b:a9:7a:bf:61:06:4c:2e:1d:3c:15:3b:af:02:
b6:b7:d0:9d:c9:7a:c1:12:17:5b:be:95:35:b9:44:fb:d8:25:
26:93:17:0c:a3:47:98:7e:c9:5c:b4:74:5b:e8:2c:1a:62:cb:
b3:2c:b8:0b:7b:14:ff:4c:bb:99:99:66:90:43:10:6b:27:af:
db:e0:f4:97:01:be:cb:8b:67:0e:f8:3a:86:b3:19:cb:c2:61:
ff:68:c9:8e:c5:20:52:4b:d1:cb:d6:cf:e8:ce:cb:f2:9e:35:
dc:d7:f4:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvTuoO6id8utZqMxXh+VH0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE1MTYwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTBiM2IxZmQwYWNhNmEyNzUzZWQzMmZjODQwYWE3NjNmNTY5MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51JHoI+jmEYvcb00syco3dItTYL2
r36mZx/4WS0PuLR7CaFV1IPTqPL4nz2+7cPbKt1RckSWgV0BfIye+L7Z5+UBLkAG
kboX8NsNpgZ1IOvlrsgsGi27GdqUr0duT35437n1GnHVh3N9yBNU40BTQMpr7+Dj
3obgeV30wsd8ZZsIFRo4nm67hl/ianiringOnkBnvibNAnIiYYoAY8sOphd2wESt
36GAWYyxi/cxrjOnT37LipyGGJjrHdPZ9hwE30iOVCqAeP/y2//FZ6DBhid/aZEd
NQTz8VC2vYchaCphlUmJxV3gTz1tdHUkditusprFqqDsP+OSjAltsPcLfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA4LOx/QrKaidT7TL8hAqnY/VpIEMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRGdzN0g5Q3NwcUoxUHRNdnlFQ3FkajlXa2dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJuat19qMxtBjAKm3ONT
Ykm4GnPCoMZ1Pw2IGybWUMnV40Mr4r0wpVFnZ/GretRTc3yehZymPXMmtjYBxkOy
GGSxYqiXUVh4nrn7k/tpr5yvF8VW00bOniFFwR6755F80qnEs+RzO0nAHrTt9Zpd
Jf6kRFvwE1K6OAllf8yuZXKAuwn5SAuwUqg0GJ4Z4Rd0qrxxq+M7qXq/YQZMLh08
FTuvAra30J3JesESF1u+lTW5RPvYJSaTFwyjR5h+yVy0dFvoLBpiy7MsuAt7FP9M
u5mZZpBDEGsnr9vg9JcBvsuLZw74OoazGcvCYf9oyY7FIFJL0cvWz+jOy/KeNdzX
9H8=
-----END CERTIFICATE-----
Generated at Thu Jun 19 23:26:28 2025 by rpki-client