Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yN01nUTyBPXcuN-2nHF0fupp7eo.roa
File: yN01nUTyBPXcuN-2nHF0fupp7eo.roa (raw, json)
Hash identifier: APVwOZX8wBRDpt5vWL1KmqfYSjF2r0dPB23YAtLFyME=
Subject key identifier: C8:DD:35:9D:44:F2:04:F5:DC:B8:DF:B6:9C:71:74:7E:EA:69:ED:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABB7D7A6658E37836328E7154CFF1E8F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yN01nUTyBPXcuN-2nHF0fupp7eo.roa
Signing time: Fri 22 Sep 2023 06:04:37 +0000
ROA not before: Fri 22 Sep 2023 06:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:bb7d:5138/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:7d:7a:66:58:e3:78:36:32:8e:71:54:cf:f1:e8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 06:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8dd359d44f204f5dcb8dfb69c71747eea69edea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:a8:7a:7c:56:f7:40:ca:5d:c0:d7:15:13:
4e:42:87:5f:4a:de:81:27:03:fb:01:d4:99:6c:8a:
53:0f:c4:59:c3:d8:05:84:7a:fd:3a:6c:c0:8c:3c:
34:2b:2d:05:99:44:20:a3:c5:6f:7f:c7:76:84:97:
0a:46:58:1a:31:86:82:ae:1d:7d:a7:3d:75:32:41:
91:8c:3b:83:a2:d2:80:46:97:8b:11:28:12:fc:46:
6c:77:34:d2:5b:92:0b:15:2d:28:61:a4:89:3e:a2:
32:89:e8:84:50:e5:7f:2c:43:ea:1c:4a:3b:68:0f:
fd:11:f5:76:27:52:be:21:b6:ef:3d:97:8c:de:9b:
7b:c1:8d:22:dc:05:39:43:35:d6:cb:45:26:95:67:
5f:5e:32:f3:f1:68:7e:28:80:12:65:87:8b:2b:ad:
29:b6:be:3b:1a:f9:07:88:92:72:f4:1f:53:a0:65:
1a:83:64:2a:ce:7c:40:88:2d:6e:19:f8:5a:14:af:
55:0e:5f:24:50:89:a5:8f:73:42:55:6a:b1:b0:01:
a5:c8:d6:9a:b7:33:13:f8:7f:91:d2:88:79:af:12:
7c:7e:b7:75:bb:10:4b:98:1c:c9:7c:68:f5:94:9b:
07:8e:f0:49:72:6a:9c:b2:cb:2f:43:c1:2f:20:22:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:35:9D:44:F2:04:F5:DC:B8:DF:B6:9C:71:74:7E:EA:69:ED:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yN01nUTyBPXcuN-2nHF0fupp7eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:4a:00:13:10:81:2d:08:85:e3:d9:80:17:d1:90:4b:d0:18:
12:9a:e8:40:4f:aa:39:88:1f:85:90:95:70:2c:84:4c:4e:e6:
c2:8b:84:62:7f:d1:95:31:ad:41:7a:f1:a4:98:52:21:6b:c2:
df:8c:c0:11:d4:b6:69:ba:a8:02:60:49:c3:14:ae:46:ea:ca:
0d:b2:e0:c8:6d:27:e9:cc:71:cb:9d:ba:38:40:ce:52:9a:ec:
cc:29:ae:67:35:c2:a7:4b:6b:da:94:83:8c:bc:58:cd:fa:02:
f3:d0:68:95:7f:e9:de:55:af:54:ac:ca:c2:a8:e8:7a:be:5d:
de:6b:3a:6d:84:87:29:85:80:65:99:a5:78:bd:30:fe:45:b7:
8d:42:6a:96:f4:ba:f1:9b:0c:17:e2:13:ac:97:50:4e:1d:50:
29:34:37:5e:4d:81:3f:6a:12:89:55:86:95:54:71:ff:11:a3:
cb:72:01:c1:ce:68:62:7b:98:07:df:ed:d7:ab:61:01:73:be:
5b:3a:4d:7e:b8:b4:6e:43:ed:c0:d8:8c:11:11:85:7f:d0:10:
7e:f5:7d:35:9b:28:11:5b:d1:c1:ab:2a:b8:0a:3f:cb:c9:f1:
a7:91:bf:ae:fc:3c:2b:01:be:0a:8e:a5:8f:da:15:9f:ab:e4:
39:1c:69:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq7fXpmWON4NjKOcVTP8ejxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIyMDYwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGRkMzU5ZDQ0ZjIwNGY1ZGNiOGRmYjY5YzcxNzQ3ZWVhNjllZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUuoenxW90DKXcDXFRNOQodfSt6B
JwP7AdSZbIpTD8RZw9gFhHr9OmzAjDw0Ky0FmUQgo8Vvf8d2hJcKRlgaMYaCrh19
pz11MkGRjDuDotKARpeLESgS/EZsdzTSW5ILFS0oYaSJPqIyieiEUOV/LEPqHEo7
aA/9EfV2J1K+IbbvPZeM3pt7wY0i3AU5QzXWy0UmlWdfXjLz8Wh+KIASZYeLK60p
tr47GvkHiJJy9B9ToGUag2QqznxAiC1uGfhaFK9VDl8kUImlj3NCVWqxsAGlyNaa
tzMT+H+R0oh5rxJ8frd1uxBLmBzJfGj1lJsHjvBJcmqcsssvQ8EvICKWkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMjdNZ1E8gT13LjftpxxdH7qae3qMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveU4wMW5VVHlCUFhjdU4tMm5IRjBmdXBwN2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABhKABMQgS0IhePZgBfR
kEvQGBKa6EBPqjmIH4WQlXAshExO5sKLhGJ/0ZUxrUF68aSYUiFrwt+MwBHUtmm6
qAJgScMUrkbqyg2y4MhtJ+nMccudujhAzlKa7Mwprmc1wqdLa9qUg4y8WM36AvPQ
aJV/6d5Vr1SsysKo6Hq+Xd5rOm2EhymFgGWZpXi9MP5Ft41Capb0uvGbDBfiE6yX
UE4dUCk0N15NgT9qEolVhpVUcf8Ro8tyAcHOaGJ7mAff7derYQFzvls6TX64tG5D
7cDYjBERhX/QEH71fTWbKBFb0cGrKrgKP8vJ8aeRv678PCsBvgqOpY/aFZ+r5Dkc
aQI=
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:17:11 2025 by rpki-client