Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsmFGPM8HLyj5GBpIfYRZKv7UOI.roa
File: lsmFGPM8HLyj5GBpIfYRZKv7UOI.roa (raw, json)
Hash identifier: bKCoO4C6Fds7m4LsSNc9ZKjuTC4izgKFhwhal70XKZk=
Subject key identifier: 96:C9:85:18:F3:3C:1C:BC:A3:E4:60:69:21:F6:11:64:AB:FB:50:E2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B20C57E7B7756707408DE4530E86F4C5F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsmFGPM8HLyj5GBpIfYRZKv7UOI.roa
Signing time: Wed 11 Oct 2023 22:04:55 +0000
ROA not before: Wed 11 Oct 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:20c4:de46/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:c5:7e:7b:77:56:70:74:08:de:45:30:e8:6f:4c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c98518f33c1cbca3e4606921f61164abfb50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:82:08:5e:31:e8:c5:3f:39:ee:4b:80:7b:
d5:e8:80:3d:58:21:18:7e:1c:c3:03:2d:44:57:09:
3e:4b:3f:4f:8f:04:1c:c2:3a:12:ea:d5:51:b7:fb:
6d:6d:53:93:a8:fc:66:34:f8:d6:52:f1:25:d1:c6:
26:c3:42:47:a6:0b:93:1e:86:f7:35:0e:07:91:41:
15:c8:3b:23:56:ee:fd:ee:06:e3:85:ac:71:69:05:
c4:eb:10:27:6b:95:63:93:8b:94:00:cc:40:0d:e0:
c4:e0:2c:4f:44:16:84:11:e1:d3:98:5a:1b:17:58:
a5:69:ae:9e:0b:a1:f0:aa:74:3b:00:a4:a4:54:a0:
9d:f5:81:5a:2a:a7:1e:e6:39:89:40:23:e5:01:60:
ab:f6:5b:f6:09:d4:7a:aa:fe:10:98:b1:4a:68:19:
9c:43:1d:65:7d:ca:32:80:f7:2f:9c:81:95:a5:10:
08:5b:e5:f6:f6:bd:4e:96:b9:92:f1:4d:10:c9:76:
7d:03:bd:78:e4:6b:f6:4c:48:ad:93:4e:2a:9f:66:
e7:c4:6b:f1:e7:1b:86:08:63:fe:38:32:29:f8:1b:
0a:5a:a0:a2:6a:f1:64:5c:98:e4:c7:30:f6:34:5b:
c8:a7:80:de:2b:fb:fc:b4:75:50:43:30:9c:e9:b9:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:85:18:F3:3C:1C:BC:A3:E4:60:69:21:F6:11:64:AB:FB:50:E2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsmFGPM8HLyj5GBpIfYRZKv7UOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:c7:51:8f:ab:ca:46:bc:48:92:02:91:f2:6a:21:7e:97:72:
97:b9:1e:0e:33:0f:b6:a5:71:87:de:54:e1:85:44:1b:8f:78:
39:c6:50:aa:82:09:39:8c:d9:c5:ed:54:1b:cd:1e:2a:aa:18:
e7:40:df:c5:75:7e:41:f9:79:8c:88:cb:8c:46:ce:73:33:9e:
5d:3a:4d:b7:38:e1:ac:e9:7f:63:b7:4c:74:32:0d:70:ef:3c:
54:fc:04:48:9e:69:d8:c8:2a:d9:f0:7c:d2:55:19:01:1e:cb:
d7:52:e6:6c:00:43:70:a5:78:df:65:0b:02:1f:57:ed:7a:b8:
fa:8e:a8:7a:d2:7d:c1:a1:9a:72:08:42:0f:c6:8d:08:82:c2:
52:fa:a2:e2:0d:5e:b4:16:73:b4:4c:3d:ec:b8:09:74:67:95:
26:74:22:77:f3:e3:56:61:12:ac:2a:e4:1b:b8:d3:74:11:1c:
89:38:a6:5d:b7:4f:bf:a9:80:48:4c:07:ba:81:26:e1:5d:28:
43:c4:2c:e3:7e:94:5f:8b:3f:ca:55:7d:f4:bf:f6:c1:ab:d7:
7e:75:aa:92:b1:26:e1:92:6f:ce:a6:3b:ae:64:db:f8:7f:d3:
7f:2f:c6:17:da:da:05:b6:fa:1f:b0:77:02:f1:cc:a8:69:cd:
4c:51:2b:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsgxX57d1ZwdAjeRTDob0xfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMjIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmM5ODUxOGYzM2MxY2JjYTNlNDYwNjkyMWY2MTE2NGFiZmI1MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxiCCF4x6MU/Oe5LgHvV6IA9WCEY
fhzDAy1EVwk+Sz9PjwQcwjoS6tVRt/ttbVOTqPxmNPjWUvEl0cYmw0JHpguTHob3
NQ4HkUEVyDsjVu797gbjhaxxaQXE6xAna5Vjk4uUAMxADeDE4CxPRBaEEeHTmFob
F1ilaa6eC6HwqnQ7AKSkVKCd9YFaKqce5jmJQCPlAWCr9lv2CdR6qv4QmLFKaBmc
Qx1lfcoygPcvnIGVpRAIW+X29r1OlrmS8U0QyXZ9A7145Gv2TEitk04qn2bnxGvx
5xuGCGP+ODIp+BsKWqCiavFkXJjkxzD2NFvIp4DeK/v8tHVQQzCc6bkEswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJbJhRjzPBy8o+RgaSH2EWSr+1DiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbHNtRkdQTThITHlqNUdCcElmWVJaS3Y3VU9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANDHUY+ryka8SJICkfJq
IX6Xcpe5Hg4zD7alcYfeVOGFRBuPeDnGUKqCCTmM2cXtVBvNHiqqGOdA38V1fkH5
eYyIy4xGznMznl06Tbc44azpf2O3THQyDXDvPFT8BEieadjIKtnwfNJVGQEey9dS
5mwAQ3CleN9lCwIfV+16uPqOqHrSfcGhmnIIQg/GjQiCwlL6ouINXrQWc7RMPey4
CXRnlSZ0Infz41ZhEqwq5Bu403QRHIk4pl23T7+pgEhMB7qBJuFdKEPELON+lF+L
P8pVffS/9sGr1351qpKxJuGSb86mO65k2/h/038vxhfa2gW2+h+wdwLxzKhpzUxR
K/A=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:34:58 2025 by rpki-client