Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fSnFXantN3oTUmLcM8PHmBddcy4.roa
File: fSnFXantN3oTUmLcM8PHmBddcy4.roa (raw, json)
Hash identifier: 0GTshjBGJFOFtZb4iN/6KmWyw3KzSqqLQ3ejmCpM7Ko=
Subject key identifier: 7D:29:C5:5D:A9:ED:37:7A:13:52:62:DC:33:C3:C7:98:17:5D:73:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAF0931A4529F242F049253A3AE0A8028
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fSnFXantN3oTUmLcM8PHmBddcy4.roa
Signing time: Wed 08 Nov 2023 13:04:57 +0000
ROA not before: Wed 08 Nov 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:af08:ada6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:09:31:a4:52:9f:24:2f:04:92:53:a3:ae:0a:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d29c55da9ed377a135262dc33c3c798175d732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:21:86:3a:10:8c:91:bb:7c:15:2c:86:ad:
89:11:9a:ef:e7:42:54:a2:63:d1:ac:b1:ed:01:de:
d8:f2:71:51:bd:4b:d0:30:1e:cc:af:47:1a:60:5f:
01:44:25:a7:8a:1c:13:b7:5d:15:c2:6c:9d:e8:98:
6d:d9:80:cb:28:89:87:83:ae:b0:9f:73:a6:e5:76:
3a:ce:65:93:24:4d:ef:c3:cd:a1:2b:77:39:d0:d0:
eb:2e:1d:fd:53:e4:80:02:2c:64:62:b5:19:83:76:
92:a8:69:2a:bc:f8:13:bc:df:09:ab:20:48:46:b3:
c4:b5:4a:6b:cd:e2:52:34:bf:72:71:9a:6a:50:1a:
ed:78:e6:ce:b7:d7:a8:4e:84:ab:23:dd:e9:81:f8:
07:33:40:7a:6d:f7:ba:f9:e0:5e:10:f3:ca:c8:99:
a9:ca:2c:4f:01:5e:b6:98:43:bf:f4:f2:a1:53:59:
86:f6:33:9b:1f:46:e5:bd:72:10:f1:30:ab:6b:31:
84:40:a0:95:52:e8:f6:9e:73:cb:b4:3b:c4:9e:89:
cb:da:37:66:06:bf:3f:7b:eb:bf:31:96:86:95:05:
81:0f:71:a2:8b:0e:bc:87:df:d3:af:1e:97:80:16:
cd:24:75:c3:e3:9a:1a:41:3a:ac:64:e6:d9:c5:73:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:29:C5:5D:A9:ED:37:7A:13:52:62:DC:33:C3:C7:98:17:5D:73:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fSnFXantN3oTUmLcM8PHmBddcy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:35:a2:4e:2d:95:b0:2a:24:16:05:c5:10:1d:bc:a4:b4:eb:
a6:38:1d:d2:67:34:ef:79:9b:b2:8a:f7:de:b1:36:de:4e:c0:
ce:c2:b2:6e:6a:bc:f6:d6:48:87:fe:b7:de:d3:e1:3b:ee:fa:
98:ae:1b:79:07:16:1e:4b:ad:86:89:06:55:91:46:68:90:df:
71:e1:56:d1:ea:ee:d8:7a:53:64:94:bb:96:6a:37:18:03:58:
53:9e:01:af:ac:82:18:25:be:f5:a0:8f:73:63:3a:37:81:dc:
bd:56:fd:b5:9f:10:e9:e9:4d:5f:bc:03:85:fb:e7:59:c5:c7:
c0:c2:80:c7:ab:e1:54:92:18:74:03:53:88:aa:4e:4a:c3:41:
a1:73:3f:ab:fe:ef:0a:61:b6:7a:4e:20:2c:2b:23:ef:58:78:
bf:be:bf:86:05:ef:06:e8:b8:7e:e1:20:78:ff:95:d5:0d:b9:
87:03:35:10:cf:fd:c0:68:6e:59:59:80:e5:ac:d4:9e:f6:60:
28:62:b4:a9:14:d5:8c:54:ea:7f:0a:0e:7a:83:38:3f:d6:10:
22:9c:33:92:76:5b:3e:ce:e6:ed:0a:ea:c3:80:96:44:8d:1f:
d8:3d:f5:57:d6:a7:c9:13:a9:19:17:de:17:8a:3d:08:65:91:
ad:44:91:b7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuvCTGkUp8kLwSSU6OuCoAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MTMwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI5YzU1ZGE5ZWQzNzdhMTM1MjYyZGMzM2MzYzc5ODE3NWQ3MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMohhjoQjJG7fBUshq2JEZrv50JU
omPRrLHtAd7Y8nFRvUvQMB7Mr0caYF8BRCWnihwTt10Vwmyd6Jht2YDLKImHg66w
n3Om5XY6zmWTJE3vw82hK3c50NDrLh39U+SAAixkYrUZg3aSqGkqvPgTvN8JqyBI
RrPEtUprzeJSNL9ycZpqUBrteObOt9eoToSrI93pgfgHM0B6bfe6+eBeEPPKyJmp
yixPAV62mEO/9PKhU1mG9jObH0blvXIQ8TCrazGEQKCVUuj2nnPLtDvEnonL2jdm
Br8/e+u/MZaGlQWBD3Giiw68h9/Trx6XgBbNJHXD45oaQTqsZObZxXOO0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH0pxV2p7Td6E1Ji3DPDx5gXXXMuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZlNuRlhhbnROM29UVW1MY004UEhtQmRkY3k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB81ok4tlbAqJBYFxRAd
vKS066Y4HdJnNO95m7KK996xNt5OwM7Csm5qvPbWSIf+t97T4Tvu+piuG3kHFh5L
rYaJBlWRRmiQ33HhVtHq7th6U2SUu5ZqNxgDWFOeAa+sghglvvWgj3NjOjeB3L1W
/bWfEOnpTV+8A4X751nFx8DCgMer4VSSGHQDU4iqTkrDQaFzP6v+7wphtnpOICwr
I+9YeL++v4YF7wbouH7hIHj/ldUNuYcDNRDP/cBobllZgOWs1J72YChitKkU1YxU
6n8KDnqDOD/WECKcM5J2Wz7O5u0K6sOAlkSNH9g99VfWp8kTqRkX3heKPQhlka1E
kbc=
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:00:13 2025 by rpki-client