Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eWmY8aXAkdSYDeWGS2KTtp7DMLw.roa
File: eWmY8aXAkdSYDeWGS2KTtp7DMLw.roa (raw, json)
Hash identifier: vWiV1VXCyjuHkjyUTMO4DiuVq2bSXh2CWSNRX/TMUOs=
Subject key identifier: 79:69:98:F1:A5:C0:91:D4:98:0D:E5:86:4B:62:93:B6:9E:C3:30:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B371662C8006694AC1B5703CB438A80B1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eWmY8aXAkdSYDeWGS2KTtp7DMLw.roa
Signing time: Mon 16 Oct 2023 06:04:55 +0000
ROA not before: Mon 16 Oct 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:3715:f946/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:16:62:c8:00:66:94:ac:1b:57:03:cb:43:8a:80:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796998f1a5c091d4980de5864b6293b69ec330bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:9c:ca:af:14:42:dd:92:e3:99:02:45:df:
23:1e:3f:0d:f2:90:22:45:dc:ec:f4:22:52:32:cf:
7e:86:b4:2e:ee:3a:16:f2:45:47:68:60:1a:62:c2:
e0:88:13:af:30:ba:31:02:ae:80:09:e0:d0:e2:81:
66:28:c1:43:69:a5:32:c2:68:ad:eb:5c:a4:e3:d5:
39:e3:33:e8:0e:d1:30:c3:f9:79:35:4c:25:d2:17:
80:46:34:7a:ab:83:7f:26:9a:9b:a7:6c:05:ce:eb:
e9:d5:01:3c:a4:de:77:4a:90:3b:0d:ad:7f:8c:0b:
1d:bf:0c:4f:a5:10:b8:5d:ba:c9:f5:a1:94:2a:37:
a1:fc:64:3e:71:4c:2d:a7:58:18:ac:01:99:f8:a4:
7b:be:01:44:2e:66:03:f6:f8:c3:1a:eb:ae:08:28:
fc:cb:5a:c0:0c:37:07:b4:45:09:2d:dd:16:58:71:
38:7a:9b:9e:74:b0:5a:bf:73:4d:40:de:56:e1:e7:
97:e6:1c:74:c3:3f:b0:60:0d:d2:76:ca:46:68:ec:
0a:3b:47:00:01:a4:89:08:07:51:6d:b6:dd:c1:ca:
dd:74:ad:3d:9c:b5:af:08:81:02:18:72:fe:1c:6f:
11:57:20:a2:1f:74:70:79:dc:a5:0a:ec:00:0d:b3:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:98:F1:A5:C0:91:D4:98:0D:E5:86:4B:62:93:B6:9E:C3:30:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eWmY8aXAkdSYDeWGS2KTtp7DMLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:70:b4:b3:9d:ba:05:b3:f3:bc:50:f1:30:dc:1f:22:1b:a2:
ef:38:be:ed:02:72:b1:02:6a:9a:27:03:76:e3:85:d3:1b:34:
6f:d6:e1:01:0e:1f:10:b6:3d:e6:b8:ba:55:2b:8a:3a:89:0a:
75:d5:4b:0b:79:fe:69:3a:06:55:dd:ef:66:ac:38:8e:b1:16:
6b:97:98:83:b3:bc:26:8a:18:5e:62:d1:bb:52:2b:62:8e:cf:
7f:58:0c:5d:ab:29:17:62:8f:57:b9:67:9b:c0:15:b7:ec:5c:
ec:7b:ba:07:80:f2:10:a7:8a:f8:7f:17:01:24:46:e8:c8:91:
d1:c1:86:31:df:0b:61:b1:8c:8c:91:c8:05:98:11:db:66:bf:
0e:42:0b:9a:fa:ef:b6:00:33:fd:31:41:cc:6b:03:d7:f2:86:
f1:cd:7f:05:30:c4:d6:8d:6d:a0:ae:cc:ab:27:4d:ef:73:d0:
ee:1c:c3:63:2e:10:2e:61:8e:1e:05:bd:3c:b5:d6:ba:cd:9b:
9e:e7:a3:03:2c:74:fe:f0:46:49:12:fe:b8:b9:10:43:f9:e5:
33:3e:d3:f3:ce:7a:97:31:ed:e9:09:52:07:c9:00:b9:1d:53:
7a:53:e5:cf:06:51:b0:d2:4d:07:f8:9a:53:03:c8:15:e0:87:
19:7c:79:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs3FmLIAGaUrBtXA8tDioCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE2MDYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTY5OThmMWE1YzA5MWQ0OTgwZGU1ODY0YjYyOTNiNjllYzMzMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIecyq8UQt2S45kCRd8jHj8N8pAi
Rdzs9CJSMs9+hrQu7joW8kVHaGAaYsLgiBOvMLoxAq6ACeDQ4oFmKMFDaaUywmit
61yk49U54zPoDtEww/l5NUwl0heARjR6q4N/Jpqbp2wFzuvp1QE8pN53SpA7Da1/
jAsdvwxPpRC4XbrJ9aGUKjeh/GQ+cUwtp1gYrAGZ+KR7vgFELmYD9vjDGuuuCCj8
y1rADDcHtEUJLd0WWHE4epuedLBav3NNQN5W4eeX5hx0wz+wYA3SdspGaOwKO0cA
AaSJCAdRbbbdwcrddK09nLWvCIECGHL+HG8RVyCiH3RwedylCuwADbNiTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHlpmPGlwJHUmA3lhktik7aewzC8MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZVdtWThhWEFrZFNZRGVXR1MyS1R0cDdETUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADJwtLOdugWz87xQ8TDc
HyIbou84vu0CcrECaponA3bjhdMbNG/W4QEOHxC2Pea4ulUrijqJCnXVSwt5/mk6
BlXd72asOI6xFmuXmIOzvCaKGF5i0btSK2KOz39YDF2rKRdij1e5Z5vAFbfsXOx7
ugeA8hCnivh/FwEkRujIkdHBhjHfC2GxjIyRyAWYEdtmvw5CC5r677YAM/0xQcxr
A9fyhvHNfwUwxNaNbaCuzKsnTe9z0O4cw2MuEC5hjh4FvTy11rrNm57nowMsdP7w
RkkS/ri5EEP55TM+0/POepcx7ekJUgfJALkdU3pT5c8GUbDSTQf4mlMDyBXghxl8
eQs=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:30:04 2025 by rpki-client