Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g1Ae24lvntH2r1TsOzhKS-XZC-U.roa
File: g1Ae24lvntH2r1TsOzhKS-XZC-U.roa (raw, json)
Hash identifier: Z/6PShCAqXVLCqAY/EwrT1iOSosOnJbWKaEu3s29CPo=
Subject key identifier: 83:50:1E:DB:89:6F:9E:D1:F6:AF:54:EC:3B:38:4A:4B:E5:D9:0B:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2F25EA8A130C9321A7F286C84B373DB0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g1Ae24lvntH2r1TsOzhKS-XZC-U.roa
Signing time: Sat 14 Oct 2023 17:04:55 +0000
ROA not before: Sat 14 Oct 2023 17:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:2f25:5681/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:25:ea:8a:13:0c:93:21:a7:f2:86:c8:4b:37:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 17:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83501edb896f9ed1f6af54ec3b384a4be5d90be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:71:74:1f:a1:21:60:f8:f2:44:de:e0:1c:
b3:dd:08:b5:b6:e4:31:06:52:14:48:98:37:d1:ce:
dc:07:07:ec:92:2d:58:71:44:d9:87:c4:96:29:9c:
3f:47:b3:05:43:57:ba:00:db:49:08:a5:9a:f7:9f:
55:cc:c9:56:b7:df:cb:88:5f:85:5a:96:8d:c6:66:
84:42:1f:a4:26:07:ed:ad:04:6a:5e:94:5f:19:f7:
e7:47:12:54:a1:33:cd:04:9d:2a:74:ae:73:86:42:
02:d5:a0:04:f6:38:f6:ee:02:82:57:c8:de:d5:1c:
57:bb:90:7e:81:e9:d2:65:e9:b8:b3:9f:23:72:4c:
bb:e1:c7:32:ea:ee:68:7f:9a:5f:4c:0d:49:2c:20:
58:86:c7:3b:be:5c:1b:c4:80:a8:79:e6:25:ef:80:
7d:cd:88:4c:53:56:8c:da:30:d3:10:f7:51:61:57:
bb:0d:9a:4c:d4:31:82:57:d3:b4:bd:3a:cd:a4:ac:
1a:5c:3f:12:d0:d7:77:44:7b:fe:b4:94:5b:72:0e:
10:50:7a:25:60:2d:39:b6:36:93:0e:4f:db:c4:47:
41:2d:22:f7:bd:77:59:cc:bb:b3:d5:2a:3d:0b:6b:
10:b2:34:00:48:86:44:55:d0:5e:15:7f:86:7c:6a:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:1E:DB:89:6F:9E:D1:F6:AF:54:EC:3B:38:4A:4B:E5:D9:0B:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g1Ae24lvntH2r1TsOzhKS-XZC-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c5:b1:e2:9a:67:02:d8:9f:0a:75:f6:1c:cf:50:bb:04:5c:
74:d8:8c:fa:f2:9b:5d:e0:2e:5b:52:d3:86:34:ee:08:9a:a1:
38:2d:77:47:9b:7f:8d:3d:ab:e6:d3:30:44:65:23:9b:b7:f1:
9b:8c:97:8c:8e:7a:07:ae:ef:37:60:10:70:a1:3e:9b:3a:d4:
b6:8d:99:06:fe:10:8d:d8:55:06:40:62:50:c7:47:cb:cf:d1:
20:54:50:cc:5a:dd:ff:da:c1:f3:38:54:d1:4d:a3:1a:0d:91:
46:e2:16:c9:2b:ee:9b:e1:71:70:f4:d7:b4:21:ab:1f:7d:45:
f2:f2:1b:cd:c2:72:af:67:59:59:ae:0b:fe:cc:9b:4b:c5:82:
8a:87:c1:8d:1e:51:de:8b:17:36:a3:96:8c:ec:2e:0c:eb:05:
1b:f7:19:ee:93:43:7f:a3:a9:46:5f:b7:35:a9:f3:af:fd:ae:
68:b7:45:d8:9c:e1:7a:fe:96:9f:fd:1f:05:ea:10:0f:a0:2c:
97:cc:a9:44:d2:7a:37:fe:41:19:5b:bb:af:42:9a:3a:1a:6e:
e4:c9:0f:b4:65:b7:25:37:19:8b:a3:f2:4b:05:ee:a1:54:bf:
05:e8:f5:fc:3b:f1:29:1b:0b:42:d9:f2:b2:de:2d:21:c5:d3:
c8:b0:96:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsvJeqKEwyTIafyhshLNz2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzUwMWVkYjg5NmY5ZWQxZjZhZjU0ZWMzYjM4NGE0YmU1ZDkwYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV9xdB+hIWD48kTe4Byz3Qi1tuQx
BlIUSJg30c7cBwfski1YcUTZh8SWKZw/R7MFQ1e6ANtJCKWa959VzMlWt9/LiF+F
WpaNxmaEQh+kJgftrQRqXpRfGffnRxJUoTPNBJ0qdK5zhkIC1aAE9jj27gKCV8je
1RxXu5B+genSZem4s58jcky74ccy6u5of5pfTA1JLCBYhsc7vlwbxICoeeYl74B9
zYhMU1aM2jDTEPdRYVe7DZpM1DGCV9O0vTrNpKwaXD8S0Nd3RHv+tJRbcg4QUHol
YC05tjaTDk/bxEdBLSL3vXdZzLuz1So9C2sQsjQASIZEVdBeFX+GfGq+kQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFINQHtuJb57R9q9U7Ds4Skvl2QvlMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZzFBZTI0bHZudEgycjFUc096aEtTLVhaQy1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB7FseKaZwLYnwp19hzP
ULsEXHTYjPrym13gLltS04Y07giaoTgtd0ebf409q+bTMERlI5u38ZuMl4yOegeu
7zdgEHChPps61LaNmQb+EI3YVQZAYlDHR8vP0SBUUMxa3f/awfM4VNFNoxoNkUbi
Fskr7pvhcXD017Qhqx99RfLyG83Ccq9nWVmuC/7Mm0vFgoqHwY0eUd6LFzajlozs
LgzrBRv3Ge6TQ3+jqUZftzWp86/9rmi3Rdic4Xr+lp/9HwXqEA+gLJfMqUTSejf+
QRlbu69CmjoabuTJD7RltyU3GYuj8ksF7qFUvwXo9fw78SkbC0LZ8rLeLSHF08iw
llQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:51:46 2025 by rpki-client