Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_PrXT5H2LSYOy7vErXmciG8E-U.roa
File: v_PrXT5H2LSYOy7vErXmciG8E-U.roa (raw, json)
Hash identifier: QztmDmIaz5ifQqL803x/sq+asq2DqFu+fIIDQFeHdxI=
Subject key identifier: BF:F3:EB:5D:3E:47:D8:B4:98:3B:2E:EF:12:B5:E6:72:21:BC:13:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B540D8C78E97DF0FBC40895A1CAD9EACD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_PrXT5H2LSYOy7vErXmciG8E-U.roa
Signing time: Sat 21 Oct 2023 21:04:15 +0000
ROA not before: Sat 21 Oct 2023 21:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:540d:7b0e/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:0d:8c:78:e9:7d:f0:fb:c4:08:95:a1:ca:d9:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 21:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff3eb5d3e47d8b4983b2eef12b5e67221bc13e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:8a:34:95:fb:62:82:08:e2:a9:75:d2:aa:
13:48:d0:14:34:6c:64:96:84:13:06:42:d6:34:b4:
66:03:73:0f:6a:a5:f9:f1:4f:6c:47:e3:fc:db:a3:
c8:aa:c7:1c:aa:b2:43:4b:ff:25:6e:92:90:dc:32:
be:e4:08:b0:62:cb:3e:b4:8a:4e:1d:94:ea:e7:20:
b1:94:75:c3:4d:e3:c6:6b:1c:32:7f:5b:e1:3f:4b:
73:5d:5c:23:03:b6:c8:4f:eb:19:b5:20:02:34:44:
1b:61:d6:79:b1:b4:0c:b9:ff:1f:98:a9:c7:f6:80:
db:09:12:41:63:f8:9d:ff:00:04:72:da:77:4d:75:
52:34:de:5b:2b:75:bd:a4:fe:68:72:f5:8d:5c:cb:
88:f1:3b:67:90:a8:4b:78:70:d1:ee:08:c9:c3:32:
18:be:ac:e3:8c:3e:6e:d3:88:5f:40:15:45:41:b5:
85:31:b9:7e:8e:66:37:55:40:d6:d8:61:35:bf:7d:
b7:74:fb:27:c0:3c:04:1b:a7:f8:52:4f:16:69:1b:
74:f6:57:66:35:a4:e6:21:b2:36:77:a8:aa:36:05:
0f:58:f8:ff:4a:97:5a:f2:ed:0c:f1:78:b9:13:18:
5c:70:92:50:f5:64:0d:ee:29:e8:21:40:f6:88:ed:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:EB:5D:3E:47:D8:B4:98:3B:2E:EF:12:B5:E6:72:21:BC:13:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_PrXT5H2LSYOy7vErXmciG8E-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:9b:df:f3:38:82:be:59:da:70:7d:04:02:c5:2b:d7:97:fc:
a5:4e:8f:1a:7e:a1:ae:db:2a:28:59:13:d4:e9:9c:55:a1:7a:
2d:0b:a1:4d:7a:10:7b:9d:72:d0:61:09:24:41:94:c6:82:7d:
c3:a5:b1:d8:08:44:ba:f9:51:72:c0:d9:89:3a:29:e8:45:cd:
9f:e1:a7:b7:aa:1f:c4:38:d0:c1:5b:61:29:a4:e2:23:80:63:
30:8a:ee:25:f3:e8:3b:e0:f9:84:8e:0e:b9:de:8b:13:ea:aa:
74:29:ba:0b:98:c3:84:95:24:87:18:7d:b6:4a:23:67:9f:9d:
e1:f0:e0:7a:d9:26:c0:d8:38:37:07:f1:c2:37:da:eb:9c:d0:
35:b6:61:ef:0e:f3:db:70:63:6f:56:85:f2:25:bf:31:0b:f1:
e5:38:8a:47:82:17:5e:4e:72:5f:7e:c0:c5:e2:c3:61:96:7e:
b1:2b:97:f1:10:1e:b6:52:7e:13:ca:20:83:2f:24:05:ae:4f:
f3:ff:05:16:77:3d:3c:8b:d3:d5:e5:f6:9c:9b:d4:c8:2b:6e:
0c:95:3f:ed:9f:bb:d0:ba:6a:d7:87:5c:b3:87:29:78:98:0e:
92:52:84:d8:e6:31:2f:93:a5:13:ae:91:a6:bd:12:dc:84:5f:
71:fc:4b:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtUDYx46X3w+8QIlaHK2erNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMjEwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmYzZWI1ZDNlNDdkOGI0OTgzYjJlZWYxMmI1ZTY3MjIxYmMxM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46KNJX7YoII4ql10qoTSNAUNGxk
loQTBkLWNLRmA3MPaqX58U9sR+P826PIqsccqrJDS/8lbpKQ3DK+5AiwYss+tIpO
HZTq5yCxlHXDTePGaxwyf1vhP0tzXVwjA7bIT+sZtSACNEQbYdZ5sbQMuf8fmKnH
9oDbCRJBY/id/wAEctp3TXVSNN5bK3W9pP5ocvWNXMuI8TtnkKhLeHDR7gjJwzIY
vqzjjD5u04hfQBVFQbWFMbl+jmY3VUDW2GE1v323dPsnwDwEG6f4Uk8WaRt09ldm
NaTmIbI2d6iqNgUPWPj/Spda8u0M8Xi5ExhccJJQ9WQN7inoIUD2iO0HxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL/z610+R9i0mDsu7xK15nIhvBPlMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdl9QclhUNUgyTFNZT3k3dkVyWG1jaUc4RS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEKb3/M4gr5Z2nB9BALF
K9eX/KVOjxp+oa7bKihZE9TpnFWhei0LoU16EHudctBhCSRBlMaCfcOlsdgIRLr5
UXLA2Yk6KehFzZ/hp7eqH8Q40MFbYSmk4iOAYzCK7iXz6Dvg+YSODrneixPqqnQp
uguYw4SVJIcYfbZKI2efneHw4HrZJsDYODcH8cI32uuc0DW2Ye8O89twY29WhfIl
vzEL8eU4ikeCF15Ocl9+wMXiw2GWfrErl/EQHrZSfhPKIIMvJAWuT/P/BRZ3PTyL
09Xl9pyb1MgrbgyVP+2fu9C6ateHXLOHKXiYDpJShNjmMS+TpROukaa9EtyEX3H8
S1s=
-----END CERTIFICATE-----
Generated at Thu Jun 19 22:03:19 2025 by rpki-client