Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MEJ3UI3fCrPPEXdggLZJI0UfwJY.roa
File: MEJ3UI3fCrPPEXdggLZJI0UfwJY.roa (raw, json)
Hash identifier: qBlbrBE5FMLVzV17248Iq8Pbk07Xhg3ESeRNoTHYntc=
Subject key identifier: 30:42:77:50:8D:DF:0A:B3:CF:11:77:60:80:B6:49:23:45:1F:C0:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAFE5D5FBDC63A871796984746393D426
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MEJ3UI3fCrPPEXdggLZJI0UfwJY.roa
Signing time: Wed 08 Nov 2023 17:05:57 +0000
ROA not before: Wed 08 Nov 2023 17:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:afe5:5515/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:e5:d5:fb:dc:63:a8:71:79:69:84:74:63:93:d4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 17:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=304277508ddf0ab3cf11776080b64923451fc096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:16:1f:fd:63:0e:2c:50:d8:ab:7a:66:0a:
63:7f:de:00:3f:a3:88:e6:af:aa:8d:c5:bb:d4:e7:
31:29:7a:ef:8e:ac:93:f1:0d:e7:1c:1b:27:91:68:
c8:2c:cd:80:97:e5:1d:2d:b1:48:b2:db:72:6d:d6:
1f:26:74:bb:d9:49:41:72:e9:c1:50:c7:46:cc:f7:
f7:36:da:19:11:0e:24:8c:d6:21:d9:98:b6:6f:c1:
30:7e:bb:28:4e:5f:b1:9d:c2:85:a1:3a:31:68:f1:
4b:37:89:7c:8d:d2:fe:e0:e1:06:02:7a:df:50:a6:
e6:7e:a5:fa:45:36:a9:30:4d:44:77:0a:5d:30:eb:
f2:6d:ea:2d:2a:d9:36:5e:63:bb:61:a2:1b:82:1c:
6b:9b:bb:8c:ad:8c:e8:01:12:63:29:e4:18:e8:f4:
ae:fe:6b:47:54:b3:79:37:f7:e6:24:38:1a:e2:ec:
56:ee:7c:5d:26:91:66:7a:9e:6e:32:58:61:b5:38:
ec:37:2f:e0:c4:73:cd:79:f2:5d:5f:c9:4f:6d:32:
ad:e1:73:88:38:f8:b9:ed:5f:c8:da:fa:c4:f9:d3:
f6:41:2e:f4:be:53:a2:45:ce:b8:31:7c:88:77:ae:
b6:65:0f:94:b4:9d:6a:a8:6f:26:7d:ff:ab:75:03:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:77:50:8D:DF:0A:B3:CF:11:77:60:80:B6:49:23:45:1F:C0:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MEJ3UI3fCrPPEXdggLZJI0UfwJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:44:7d:69:5f:3d:07:bc:a6:74:e0:13:90:22:f6:e9:1a:ac:
7c:79:5b:f6:bf:62:38:b7:bf:52:b9:03:09:4d:28:9f:ab:0a:
2d:49:15:28:e9:4c:8e:38:87:6c:56:e3:2d:39:d8:aa:49:88:
a7:86:0f:df:ce:09:01:7f:2d:87:9d:92:f2:0d:96:26:82:83:
62:4c:3c:71:97:f4:cc:09:35:a1:4a:70:28:b3:c3:08:0a:eb:
22:ba:b4:6b:d5:ec:8e:bb:dc:14:13:20:78:b6:b0:3f:03:e7:
89:65:15:c6:00:26:45:a2:24:7b:65:44:42:2a:54:57:6e:1b:
72:43:d7:d9:28:b6:e0:e0:ae:fd:47:d5:35:92:36:64:38:3d:
53:96:85:ae:c3:d3:ed:b5:55:f8:89:a8:8c:18:30:ab:50:84:
16:1f:b2:b6:6f:47:b1:c1:f5:09:68:71:b5:38:08:69:ab:d7:
03:fa:ac:d4:59:b6:44:8c:70:98:1a:e7:c0:f5:cb:5a:4f:df:
ab:4c:59:86:fe:27:5b:21:3c:5c:97:42:10:fe:ab:aa:5d:43:
e5:8b:6e:23:5f:44:de:f1:5c:51:2b:e1:c7:1f:a8:62:85:51:
b9:87:b2:fe:59:62:48:65:cb:bc:4f:81:2f:63:a8:ff:a3:37:
8f:da:4d:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuv5dX73GOocXlphHRjk9QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MTcwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQyNzc1MDhkZGYwYWIzY2YxMTc3NjA4MGI2NDkyMzQ1MWZjMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4IWH/1jDixQ2Kt6Zgpjf94AP6OI
5q+qjcW71OcxKXrvjqyT8Q3nHBsnkWjILM2Al+UdLbFIsttybdYfJnS72UlBcunB
UMdGzPf3NtoZEQ4kjNYh2Zi2b8EwfrsoTl+xncKFoToxaPFLN4l8jdL+4OEGAnrf
UKbmfqX6RTapME1EdwpdMOvybeotKtk2XmO7YaIbghxrm7uMrYzoARJjKeQY6PSu
/mtHVLN5N/fmJDga4uxW7nxdJpFmep5uMlhhtTjsNy/gxHPNefJdX8lPbTKt4XOI
OPi57V/I2vrE+dP2QS70vlOiRc64MXyId662ZQ+UtJ1qqG8mff+rdQMc7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDBCd1CN3wqzzxF3YIC2SSNFH8CWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTUVKM1VJM2ZDclBQRVhkZ2dMWkpJMFVmd0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGJEfWlfPQe8pnTgE5Ai
9ukarHx5W/a/Yji3v1K5AwlNKJ+rCi1JFSjpTI44h2xW4y052KpJiKeGD9/OCQF/
LYedkvINliaCg2JMPHGX9MwJNaFKcCizwwgK6yK6tGvV7I673BQTIHi2sD8D54ll
FcYAJkWiJHtlREIqVFduG3JD19kotuDgrv1H1TWSNmQ4PVOWha7D0+21VfiJqIwY
MKtQhBYfsrZvR7HB9QlocbU4CGmr1wP6rNRZtkSMcJga58D1y1pP36tMWYb+J1sh
PFyXQhD+q6pdQ+WLbiNfRN7xXFEr4ccfqGKFUbmHsv5ZYkhly7xPgS9jqP+jN4/a
TQA=
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:34:25 2025 by rpki-client