Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lZFJzq23_PPuTEWhAbybtIMaOfI.roa
File: lZFJzq23_PPuTEWhAbybtIMaOfI.roa (raw, json)
Hash identifier: zsV39WJLlGQHTBKncgbqtmz60KtSKJoIcvKw2R70+EI=
Subject key identifier: 95:91:49:CE:AD:B7:FC:F3:EE:4C:45:A1:01:BC:9B:B4:83:1A:39:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9813CC6EAC24EA24F8F41003F7E79F0E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lZFJzq23_PPuTEWhAbybtIMaOfI.roa
Signing time: Sat 04 Nov 2023 02:05:16 +0000
ROA not before: Sat 04 Nov 2023 02:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:9812:f571/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:13:cc:6e:ac:24:ea:24:f8:f4:10:03:f7:e7:9f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 02:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=959149ceadb7fcf3ee4c45a101bc9bb4831a39f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:1e:57:79:c1:45:e7:cb:c6:ea:27:bd:5d:
01:47:bd:47:23:56:f9:f2:60:22:a9:5c:be:43:25:
13:f3:89:78:3c:8d:c0:44:d9:ea:e6:ef:56:e1:02:
0b:9f:52:41:21:c8:a9:31:7e:27:b1:16:d1:6c:b9:
64:11:a0:f7:c3:0f:2e:c6:9c:71:80:33:ca:5f:ab:
f2:77:36:d8:e9:a8:67:38:ec:68:f9:5f:99:af:43:
c7:f5:f1:79:c2:60:20:34:7c:c6:1b:22:7d:b1:96:
e9:9d:43:d0:a9:04:f6:4e:24:a1:28:53:da:fd:18:
31:88:62:d0:d5:1b:27:c4:a8:ae:1f:e5:c7:34:37:
b8:48:5a:f9:d2:e1:fe:79:0a:ef:14:b4:cd:49:ec:
c6:42:d7:5f:00:b7:a0:1e:be:d7:2f:4f:0c:32:19:
d2:48:6c:2c:83:78:49:cd:bc:5e:80:6b:d9:bf:75:
8b:70:61:ba:e9:1e:87:68:18:f2:25:a6:19:fb:42:
1a:b5:bd:76:07:32:7f:a2:3f:09:21:3d:e1:03:2e:
2f:2a:2f:11:d8:ab:27:a8:83:0c:bb:0b:51:49:d4:
90:61:0d:33:ad:18:de:f2:ad:c6:81:6a:ee:5e:ec:
6d:6f:3d:e2:f8:d3:39:0e:ef:33:cb:61:11:bc:62:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:49:CE:AD:B7:FC:F3:EE:4C:45:A1:01:BC:9B:B4:83:1A:39:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lZFJzq23_PPuTEWhAbybtIMaOfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:6e:d0:91:d3:4b:18:e7:7c:ca:5d:d0:65:71:b2:94:37:20:
2b:ce:26:97:95:3c:6e:50:ab:f2:64:d2:60:ca:d7:81:44:72:
88:28:bc:10:64:f6:ff:73:b3:6c:cc:e3:3c:ec:f3:16:3a:65:
b7:46:a8:fe:ec:d9:b6:4e:55:f3:25:3b:97:c4:23:58:bf:dc:
85:22:8a:4b:90:fd:34:03:2c:51:8c:a0:52:a8:a7:84:74:b9:
be:c3:2b:1f:c6:36:2e:95:00:f4:0a:dd:67:76:db:89:53:47:
d4:6e:11:1a:e9:0c:fc:51:c8:58:f6:c5:f5:7f:3d:27:cf:2e:
5c:8a:0a:08:1a:1e:62:10:ca:4e:17:63:25:46:83:4a:cf:7e:
5f:ba:10:96:93:e2:6d:a0:98:71:b2:4e:e2:8d:51:f7:7b:f6:
ab:96:6c:15:74:2c:2a:0e:78:41:15:41:47:34:87:e3:91:5f:
cc:92:c2:9a:1d:7b:63:86:a0:7d:01:93:bb:a6:d3:b8:d9:27:
54:03:cf:f9:b9:69:56:c6:cc:22:2d:0b:8e:19:af:e3:34:d7:
8d:af:d9:a6:4d:c3:5b:7b:1f:34:52:70:74:a8:3f:46:9d:ee:
9a:cd:96:f0:7c:9d:79:5b:02:ea:d9:1d:4d:3b:1f:5e:e6:9b:
9f:b6:26:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuYE8xurCTqJPj0EAP3558OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MDIwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTkxNDljZWFkYjdmY2YzZWU0YzQ1YTEwMWJjOWJiNDgzMWEzOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtEeV3nBRefLxuonvV0BR71HI1b5
8mAiqVy+QyUT84l4PI3ARNnq5u9W4QILn1JBIcipMX4nsRbRbLlkEaD3ww8uxpxx
gDPKX6vydzbY6ahnOOxo+V+Zr0PH9fF5wmAgNHzGGyJ9sZbpnUPQqQT2TiShKFPa
/RgxiGLQ1RsnxKiuH+XHNDe4SFr50uH+eQrvFLTNSezGQtdfALegHr7XL08MMhnS
SGwsg3hJzbxegGvZv3WLcGG66R6HaBjyJaYZ+0Iatb12BzJ/oj8JIT3hAy4vKi8R
2KsnqIMMuwtRSdSQYQ0zrRje8q3GgWruXuxtbz3i+NM5Du8zy2ERvGL36QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWRSc6tt/zz7kxFoQG8m7SDGjnyMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbFpGSnpxMjNfUFB1VEVXaEFieWJ0SU1hT2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANJu0JHTSxjnfMpd0GVx
spQ3ICvOJpeVPG5Qq/Jk0mDK14FEcogovBBk9v9zs2zM4zzs8xY6ZbdGqP7s2bZO
VfMlO5fEI1i/3IUiikuQ/TQDLFGMoFKop4R0ub7DKx/GNi6VAPQK3Wd224lTR9Ru
ERrpDPxRyFj2xfV/PSfPLlyKCggaHmIQyk4XYyVGg0rPfl+6EJaT4m2gmHGyTuKN
Ufd79quWbBV0LCoOeEEVQUc0h+ORX8ySwpode2OGoH0Bk7um07jZJ1QDz/m5aVbG
zCItC44Zr+M0142v2aZNw1t7HzRScHSoP0ad7prNlvB8nXlbAurZHU07H17mm5+2
Jng=
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:13:45 2025 by rpki-client