Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSFTrLSGlLsle6oeEyEgJUTzPL8.roa
File: KSFTrLSGlLsle6oeEyEgJUTzPL8.roa (raw, json)
Hash identifier: bG7ZeWorfxOWOQqZGrBI7XuFLmr1UqydXjXgiwa8Ksk=
Subject key identifier: 29:21:53:AC:B4:86:94:BB:25:7B:AA:1E:13:21:20:25:44:F3:3C:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAE9B5556E221C7F3B05CE1B70934A209
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSFTrLSGlLsle6oeEyEgJUTzPL8.roa
Signing time: Wed 08 Nov 2023 11:04:57 +0000
ROA not before: Wed 08 Nov 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ae9a:b119/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:9b:55:56:e2:21:c7:f3:b0:5c:e1:b7:09:34:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=292153acb48694bb257baa1e1321202544f33cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:c8:d0:ee:3a:b6:ea:c5:ec:fc:5b:88:65:
d4:f7:c2:2b:ec:f8:76:d2:8b:d9:03:85:c8:a7:22:
5c:23:57:78:71:0d:92:aa:a9:18:8d:d8:c0:82:69:
9d:08:a2:db:ca:64:cd:e7:ce:dc:68:72:8f:8e:8b:
e0:c8:16:0b:ed:e6:d5:09:a8:f3:d7:af:42:ea:9c:
d2:54:8c:18:07:42:07:da:91:b4:39:03:55:4a:cb:
e7:89:14:c6:52:de:22:dd:ca:b3:2b:e9:9a:b7:89:
47:0b:bd:fd:87:93:af:46:3f:7b:91:2f:c1:f9:0d:
2f:69:92:79:e0:e0:e0:36:5c:34:8e:87:8e:e1:3f:
b3:20:48:46:2d:b3:51:79:3c:fe:47:0c:3f:36:59:
97:b5:15:b3:3d:e1:07:98:6f:10:06:7e:39:c1:61:
1c:2d:93:14:2e:26:77:58:07:e9:c5:e3:ad:ae:5a:
fc:2c:eb:7e:c7:08:d7:f5:98:6a:7d:aa:91:9a:7a:
f7:ec:a5:57:71:cf:59:07:f2:8e:95:a2:35:d7:17:
3a:1c:e2:29:10:c9:e5:7f:3a:5c:b2:1e:37:8f:08:
4d:3f:c0:84:26:b9:5e:c3:c5:24:a5:2b:b5:ac:08:
2a:e9:80:26:a9:dc:da:93:16:10:a9:8a:cd:74:82:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:53:AC:B4:86:94:BB:25:7B:AA:1E:13:21:20:25:44:F3:3C:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSFTrLSGlLsle6oeEyEgJUTzPL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e6:7d:51:63:30:49:ad:1d:11:92:86:4b:10:99:44:fd:99:
20:d7:1d:9f:30:ba:1f:cb:32:bc:80:e1:78:d4:23:0a:b4:9b:
1c:b9:a4:85:69:34:09:65:cc:86:c8:de:c4:cc:66:05:48:ff:
13:4c:20:09:a7:ba:9a:5f:74:14:ec:a6:02:1e:65:f0:66:67:
7f:bc:89:a0:f1:cb:b1:83:8e:c7:9c:53:e2:39:1a:fe:09:0e:
fe:e1:2b:a4:91:35:6f:0b:cc:4f:b0:47:76:cd:7a:39:90:f2:
1b:1a:b5:a6:f3:30:e6:bf:e0:e7:6c:c4:e0:09:da:f3:c3:fb:
98:cf:3c:56:e6:75:af:32:a8:9f:d3:8d:ee:64:19:ec:a5:0f:
74:8d:f8:9f:86:f5:5b:b8:81:34:8b:c4:3d:dc:a7:e6:f5:ee:
15:18:0b:54:4c:62:b8:cb:62:6a:83:cc:86:bd:ea:90:07:8a:
b7:45:fe:8b:51:c6:29:97:5a:3a:8c:0d:46:3a:b8:41:70:5e:
7c:19:30:8a:92:92:a5:23:b7:fd:e7:1d:ca:dc:65:e2:8a:93:
1e:32:98:9b:1f:1a:db:b2:ad:b0:7f:0c:99:54:b6:fc:cf:46:
96:78:6c:3d:b0:8b:85:3d:b3:f6:47:6e:b2:e4:31:6f:be:0f:
86:b5:2f:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuum1VW4iHH87Bc4bcJNKIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MTEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTIxNTNhY2I0ODY5NGJiMjU3YmFhMWUxMzIxMjAyNTQ0ZjMzY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzTI0O46turF7PxbiGXU98Ir7Ph2
0ovZA4XIpyJcI1d4cQ2SqqkYjdjAgmmdCKLbymTN587caHKPjovgyBYL7ebVCajz
169C6pzSVIwYB0IH2pG0OQNVSsvniRTGUt4i3cqzK+mat4lHC739h5OvRj97kS/B
+Q0vaZJ54ODgNlw0joeO4T+zIEhGLbNReTz+Rww/NlmXtRWzPeEHmG8QBn45wWEc
LZMULiZ3WAfpxeOtrlr8LOt+xwjX9ZhqfaqRmnr37KVXcc9ZB/KOlaI11xc6HOIp
EMnlfzpcsh43jwhNP8CEJrlew8UkpSu1rAgq6YAmqdzakxYQqYrNdIJY4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCkhU6y0hpS7JXuqHhMhICVE8zy/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvS1NGVHJMU0dsTHNsZTZvZUV5RWdKVVR6UEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA/mfVFjMEmtHRGShksQ
mUT9mSDXHZ8wuh/LMryA4XjUIwq0mxy5pIVpNAllzIbI3sTMZgVI/xNMIAmnuppf
dBTspgIeZfBmZ3+8iaDxy7GDjsecU+I5Gv4JDv7hK6SRNW8LzE+wR3bNejmQ8hsa
tabzMOa/4OdsxOAJ2vPD+5jPPFbmda8yqJ/Tje5kGeylD3SN+J+G9Vu4gTSLxD3c
p+b17hUYC1RMYrjLYmqDzIa96pAHirdF/otRximXWjqMDUY6uEFwXnwZMIqSkqUj
t/3nHcrcZeKKkx4ymJsfGtuyrbB/DJlUtvzPRpZ4bD2wi4U9s/ZHbrLkMW++D4a1
L24=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:15 2025 by rpki-client