Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVwcuhyejBIBU5D1w765xT3F520.roa
File: nVwcuhyejBIBU5D1w765xT3F520.roa (raw, json)
Hash identifier: KQMkNYmP35sza40XZqInpVQPIZXJdHAEZ9v32zqqfnw=
Subject key identifier: 9D:5C:1C:BA:1C:9E:8C:12:01:53:90:F5:C3:BE:B9:C5:3D:C5:E7:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6347E95A8DC20BACEC9C982960ED7656
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVwcuhyejBIBU5D1w765xT3F520.roa
Signing time: Wed 13 Dec 2023 13:05:06 +0000
ROA not before: Wed 13 Dec 2023 13:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:6347:40e3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:47:e9:5a:8d:c2:0b:ac:ec:9c:98:29:60:ed:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 13:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5c1cba1c9e8c12015390f5c3beb9c53dc5e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:ab:a6:9c:d4:26:1c:43:3d:7c:90:99:58:
2e:d6:33:52:47:de:0e:f9:9a:03:2b:26:f9:5e:c7:
d8:59:02:32:24:97:c2:6f:87:0c:a8:f9:d5:b7:8c:
ac:6c:5e:4a:07:a9:a2:3f:81:07:ec:42:84:e7:9f:
e7:7a:8c:4c:19:22:1b:3e:68:10:86:5c:61:23:5a:
9a:1a:f3:fe:a4:44:6e:bf:a0:51:b0:35:e4:79:83:
ba:44:0b:ee:99:a0:1f:07:6c:ed:3a:e1:92:25:98:
8d:d9:07:47:83:54:1a:1e:3c:ae:5b:91:00:e3:6f:
ea:8a:eb:f7:b8:16:b9:94:fb:f0:29:fd:c5:c9:52:
ba:67:83:bb:11:ba:14:3f:91:88:23:28:0f:2d:fd:
39:4f:e1:54:ae:b3:43:de:41:bb:6b:18:72:68:be:
2f:3b:97:37:90:dc:43:79:c8:3b:58:ed:ef:4d:f7:
b5:a0:76:46:f4:c1:82:74:35:a2:9e:77:df:85:4f:
1e:4a:fc:fc:85:d9:5b:34:eb:a6:b2:60:9a:b3:2c:
85:d9:22:26:1b:a4:3b:b2:0e:52:8c:b5:61:f3:da:
94:f9:aa:ef:9a:f2:00:ad:36:79:20:9f:d4:da:ce:
c5:9e:44:30:87:95:e5:d6:56:de:ce:4f:9e:16:1d:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5C:1C:BA:1C:9E:8C:12:01:53:90:F5:C3:BE:B9:C5:3D:C5:E7:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVwcuhyejBIBU5D1w765xT3F520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:ea:61:8d:a7:78:01:ba:65:79:16:28:86:ee:13:05:44:cb:
2c:85:69:12:75:95:65:f1:a7:e4:11:a7:00:d3:d3:a9:bd:f0:
30:b1:7b:7d:4e:ec:52:b3:fa:31:27:c1:f4:2d:b3:ad:84:c5:
78:0b:07:a3:7d:47:9b:e0:6c:a5:b6:b1:b9:9c:02:ae:ab:65:
ae:74:6b:13:81:4c:6f:47:22:ce:1c:94:5a:ef:2c:19:68:e9:
65:e1:d0:8f:32:d2:a1:bb:fb:c5:92:b2:34:76:fa:3b:ff:8f:
27:41:73:04:18:27:22:90:2d:c8:6a:96:31:f1:cf:39:e8:16:
5e:dd:a4:03:20:f7:a8:5e:1c:6d:a0:da:75:21:1c:41:44:04:
d9:9d:92:0e:af:04:4d:aa:0f:b2:df:16:61:c1:4f:3e:63:f7:
ed:69:1e:8f:6a:49:9e:53:bf:f8:01:3c:a6:4f:b4:3c:dc:5e:
da:63:4f:92:82:d3:e8:7f:b7:a4:06:80:d0:a0:71:0f:36:a8:
b9:ad:d3:fa:0b:21:73:75:82:b7:1d:39:37:7f:6b:be:9d:5a:
b0:3e:f4:e4:ff:9f:17:c9:41:55:d2:a7:73:39:03:79:91:9d:
f1:48:4f:8c:0b:10:7f:9f:31:28:a9:1c:9f:2c:bf:d9:d5:5b:
ef:58:67:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxjR+lajcILrOycmClg7XZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEzMTMwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDVjMWNiYTFjOWU4YzEyMDE1MzkwZjVjM2JlYjljNTNkYzVlNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwirppzUJhxDPXyQmVgu1jNSR94O
+ZoDKyb5XsfYWQIyJJfCb4cMqPnVt4ysbF5KB6miP4EH7EKE55/neoxMGSIbPmgQ
hlxhI1qaGvP+pERuv6BRsDXkeYO6RAvumaAfB2ztOuGSJZiN2QdHg1QaHjyuW5EA
42/qiuv3uBa5lPvwKf3FyVK6Z4O7EboUP5GIIygPLf05T+FUrrND3kG7axhyaL4v
O5c3kNxDecg7WO3vTfe1oHZG9MGCdDWinnffhU8eSvz8hdlbNOumsmCasyyF2SIm
G6Q7sg5SjLVh89qU+arvmvIArTZ5IJ/U2s7FnkQwh5Xl1lbezk+eFh38MQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ1cHLocnowSAVOQ9cO+ucU9xedtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvblZ3Y3VoeWVqQklCVTVEMXc3NjV4VDNGNTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABnqYY2neAG6ZXkWKIbu
EwVEyyyFaRJ1lWXxp+QRpwDT06m98DCxe31O7FKz+jEnwfQts62ExXgLB6N9R5vg
bKW2sbmcAq6rZa50axOBTG9HIs4clFrvLBlo6WXh0I8y0qG7+8WSsjR2+jv/jydB
cwQYJyKQLchqljHxzznoFl7dpAMg96heHG2g2nUhHEFEBNmdkg6vBE2qD7LfFmHB
Tz5j9+1pHo9qSZ5Tv/gBPKZPtDzcXtpjT5KC0+h/t6QGgNCgcQ82qLmt0/oLIXN1
grcdOTd/a76dWrA+9OT/nxfJQVXSp3M5A3mRnfFIT4wLEH+fMSipHJ8sv9nVW+9Y
Z6k=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:53 2025 by rpki-client