Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aAUJcwZ4il_8I6FrtkWbFoqSdT0.roa
File: aAUJcwZ4il_8I6FrtkWbFoqSdT0.roa (raw, json)
Hash identifier: CBfsBoaM9WO4mX8ygLO52l/lCK91do9x1Jv0ig26EdM=
Subject key identifier: 68:05:09:73:06:78:8A:5F:FC:23:A1:6B:B6:45:9B:16:8A:92:75:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B570E97B4346BC0BD48B9723A9E21CCEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aAUJcwZ4il_8I6FrtkWbFoqSdT0.roa
Signing time: Sun 22 Oct 2023 11:04:15 +0000
ROA not before: Sun 22 Oct 2023 11:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:570e:82c1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:0e:97:b4:34:6b:c0:bd:48:b9:72:3a:9e:21:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 11:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6805097306788a5ffc23a16bb6459b168a92753d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:73:47:e9:fe:e2:6b:80:36:c8:45:ea:28:
6b:29:93:94:58:1d:7e:1d:1a:90:c3:32:e0:a7:fe:
71:46:3d:7b:7a:1b:0d:b2:36:5e:e5:3d:40:7a:7d:
b6:62:47:24:14:35:fd:dd:fc:2c:e1:a9:43:88:39:
ac:c3:a9:ed:eb:9a:a2:25:12:03:3a:40:73:50:1a:
22:24:55:d2:9f:42:6e:c5:da:a2:bc:4d:60:e3:af:
f3:ed:56:95:6d:e8:a0:69:8b:c0:78:3f:24:74:11:
e9:1d:fe:16:e0:0d:c5:58:14:a0:36:17:df:e4:1b:
f6:4e:f4:c1:8f:6f:22:5d:c2:f4:dc:e7:3f:83:30:
ea:ea:99:f4:8b:43:f4:48:8e:31:fe:0b:a9:6e:75:
84:92:af:8f:42:4e:c3:bc:5f:19:aa:3c:0a:ca:7b:
c0:98:df:1f:9c:52:b3:91:92:38:11:4d:36:76:b8:
c7:6a:71:ab:e3:16:1b:e2:d2:7c:10:3d:f3:d6:bb:
3c:a5:f7:69:37:97:bc:d3:b8:ff:0c:9c:96:00:fb:
a0:99:5a:0b:d6:fb:3f:0d:ca:3b:44:ec:22:13:2f:
90:b6:a9:ce:03:95:ca:62:a3:f7:26:11:9f:67:39:
65:50:ab:8d:76:07:ab:71:7e:8d:28:b7:23:2d:37:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:09:73:06:78:8A:5F:FC:23:A1:6B:B6:45:9B:16:8A:92:75:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aAUJcwZ4il_8I6FrtkWbFoqSdT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:ba:d0:dd:d7:55:73:41:ac:94:b9:1f:f4:be:d8:72:46:a9:
32:b6:86:4c:9b:fd:4a:9f:02:2d:d7:48:72:e5:d0:82:28:be:
1e:2d:a0:9e:44:e3:b1:86:47:3c:4c:a4:ae:83:51:63:3e:ed:
94:19:14:80:43:97:42:4d:13:2a:4c:da:aa:39:88:f7:0c:a7:
75:df:53:21:3e:c0:7e:bf:10:78:19:9e:0e:a7:0a:07:8b:73:
33:f1:84:ac:e4:10:ac:e6:cf:2a:d9:1b:7d:40:c0:83:3f:d9:
b9:20:d7:34:b8:c4:86:b8:eb:78:97:d4:e0:21:a7:11:9e:6a:
49:98:8e:cc:f8:a6:af:7a:d1:31:12:69:cc:17:66:d8:1f:86:
61:35:44:d1:68:8b:a6:77:77:16:81:42:fa:2a:fa:f6:a8:38:
fe:50:c6:80:a0:55:8f:14:38:67:df:e3:89:b7:a1:31:c5:a3:
a1:58:9c:58:5c:ec:c8:13:8e:93:dc:e6:50:a9:67:e0:76:7c:
89:90:92:0d:e4:7e:3a:65:68:33:6c:59:93:48:21:1a:81:a5:
94:ee:de:cc:9b:f9:b5:5c:52:df:ac:11:8a:95:f5:e4:5d:2d:
61:02:f4:71:18:fa:9a:e2:3b:2e:f6:fd:d0:ce:b9:50:40:2b:
fb:93:9b:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtXDpe0NGvAvUi5cjqeIczrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIyMTEwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODA1MDk3MzA2Nzg4YTVmZmMyM2ExNmJiNjQ1OWIxNjhhOTI3NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3RzR+n+4muANshF6ihrKZOUWB1+
HRqQwzLgp/5xRj17ehsNsjZe5T1Aen22YkckFDX93fws4alDiDmsw6nt65qiJRID
OkBzUBoiJFXSn0JuxdqivE1g46/z7VaVbeigaYvAeD8kdBHpHf4W4A3FWBSgNhff
5Bv2TvTBj28iXcL03Oc/gzDq6pn0i0P0SI4x/gupbnWEkq+PQk7DvF8ZqjwKynvA
mN8fnFKzkZI4EU02drjHanGr4xYb4tJ8ED3z1rs8pfdpN5e807j/DJyWAPugmVoL
1vs/Dco7ROwiEy+QtqnOA5XKYqP3JhGfZzllUKuNdgercX6NKLcjLTfHUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGgFCXMGeIpf/COha7ZFmxaKknU9MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYUFVSmN3WjRpbF84STZGcnRrV2JGb3FTZFQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFC60N3XVXNBrJS5H/S+
2HJGqTK2hkyb/UqfAi3XSHLl0IIovh4toJ5E47GGRzxMpK6DUWM+7ZQZFIBDl0JN
EypM2qo5iPcMp3XfUyE+wH6/EHgZng6nCgeLczPxhKzkEKzmzyrZG31AwIM/2bkg
1zS4xIa463iX1OAhpxGeakmYjsz4pq960TESacwXZtgfhmE1RNFoi6Z3dxaBQvoq
+vaoOP5QxoCgVY8UOGff44m3oTHFo6FYnFhc7MgTjpPc5lCpZ+B2fImQkg3kfjpl
aDNsWZNIIRqBpZTu3syb+bVcUt+sEYqV9eRdLWEC9HEY+priOy72/dDOuVBAK/uT
m2o=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:20:17 2025 by rpki-client