Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ydQ-u7wH7XxTcIu_LpTyej5el3c.roa
File: ydQ-u7wH7XxTcIu_LpTyej5el3c.roa (raw, json)
Hash identifier: peU2YXTuHzrT48FV5y1W6ZpxxkDBQo+HS9XfyxNqwfM=
Subject key identifier: C9:D4:3E:BB:BC:07:ED:7C:53:70:8B:BF:2E:94:F2:7A:3E:5E:97:77
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6ACC4D9193F475E8F3633420FFEFAC6A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ydQ-u7wH7XxTcIu_LpTyej5el3c.roa
Signing time: Thu 26 Oct 2023 07:04:15 +0000
ROA not before: Thu 26 Oct 2023 07:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6acc:43d0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:cc:4d:91:93:f4:75:e8:f3:63:34:20:ff:ef:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 07:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d43ebbbc07ed7c53708bbf2e94f27a3e5e9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:25:f2:33:8e:2c:67:18:ed:6a:90:c2:50:
2f:61:e1:cf:e5:42:4f:0f:0d:db:b3:f3:28:0d:98:
f0:e1:c7:d4:dd:18:ef:18:ee:a3:d9:f5:cc:72:99:
98:c5:2a:ed:64:93:7f:65:f1:55:3d:d7:ce:67:f1:
08:6f:c9:61:01:5f:1f:fe:d7:e7:56:52:0b:cf:fa:
8e:aa:3b:15:e4:70:de:4b:85:a3:02:52:15:be:86:
6c:b6:ab:88:fb:a1:29:5e:31:3c:db:8e:19:c4:06:
33:7d:89:2c:70:dc:3d:c3:84:2a:36:04:0f:f2:b0:
c2:b9:a4:1d:36:bf:92:87:f7:31:98:dd:f2:c7:81:
79:44:d5:e5:bb:14:05:35:c0:b4:ee:eb:e0:94:d9:
0c:d9:60:10:f7:f8:da:43:de:b1:b7:69:a6:f7:38:
a7:31:bc:79:5c:0f:81:27:4c:6d:83:7c:e0:2a:9e:
2e:ed:d1:45:01:c4:aa:ac:ce:0b:f1:a6:94:bd:70:
6d:18:68:6d:45:d8:5e:ef:e4:2a:88:e3:8c:b0:db:
72:8a:f6:32:d1:9b:c5:74:2f:75:7d:3a:d5:e4:a3:
21:df:e0:01:78:bf:5b:1f:e8:17:0c:9a:56:43:a2:
e0:c0:c1:be:53:9f:09:77:cb:3f:db:a8:26:ae:e7:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:3E:BB:BC:07:ED:7C:53:70:8B:BF:2E:94:F2:7A:3E:5E:97:77
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ydQ-u7wH7XxTcIu_LpTyej5el3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:a3:98:a2:1f:a4:d3:a2:6f:b6:ad:b3:74:41:26:9d:8f:d6:
72:55:07:46:ef:46:94:cb:67:6d:13:b3:b1:f3:92:43:5c:6e:
fa:3d:9f:0c:fc:0f:e4:c1:39:e5:cb:cb:29:e7:1b:a2:de:4b:
21:f6:32:1d:8a:c4:95:e1:a2:9d:02:69:90:9d:8c:15:a4:d7:
0e:02:13:dc:e5:6d:6a:c1:1a:27:c3:7d:30:48:c4:63:36:1a:
4d:db:f0:6f:ef:da:98:5d:29:de:c1:b4:d5:ea:d4:70:53:33:
22:14:13:52:10:15:94:4b:07:d2:3e:fb:21:25:3a:30:ca:11:
25:b3:e3:67:5a:e7:ae:5d:5e:60:ab:50:9c:2c:79:91:fd:74:
49:a6:40:54:5b:a0:91:ac:6c:4a:69:ce:98:09:f6:30:84:ac:
b1:09:80:b1:ab:c4:eb:ed:83:42:bc:93:68:fe:fd:70:21:f6:
fd:a1:6c:cd:d4:d3:03:0d:d5:9f:5e:7f:cb:d0:32:06:2a:a1:
aa:10:e1:76:58:43:00:a5:9e:fa:aa:49:d4:ad:7a:54:76:e3:
78:10:de:d1:59:01:3f:51:d1:9a:d1:0a:0b:8e:66:bc:53:26:
ec:c2:0f:60:dc:06:d1:26:5e:32:fb:d1:69:08:8f:79:a0:02:
86:df:c8:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtqzE2Rk/R16PNjNCD/76xqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI2MDcwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWQ0M2ViYmJjMDdlZDdjNTM3MDhiYmYyZTk0ZjI3YTNlNWU5Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeIl8jOOLGcY7WqQwlAvYeHP5UJP
Dw3bs/MoDZjw4cfU3RjvGO6j2fXMcpmYxSrtZJN/ZfFVPdfOZ/EIb8lhAV8f/tfn
VlILz/qOqjsV5HDeS4WjAlIVvoZstquI+6EpXjE8244ZxAYzfYkscNw9w4QqNgQP
8rDCuaQdNr+Sh/cxmN3yx4F5RNXluxQFNcC07uvglNkM2WAQ9/jaQ96xt2mm9zin
Mbx5XA+BJ0xtg3zgKp4u7dFFAcSqrM4L8aaUvXBtGGhtRdhe7+QqiOOMsNtyivYy
0ZvFdC91fTrV5KMh3+ABeL9bH+gXDJpWQ6LgwMG+U58Jd8s/26gmruf15QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMnUPru8B+18U3CLvy6U8no+Xpd3MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveWRRLXU3d0g3WHhUY0l1X0xwVHllajVlbDNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALCjmKIfpNOib7ats3RB
Jp2P1nJVB0bvRpTLZ20Ts7HzkkNcbvo9nwz8D+TBOeXLyynnG6LeSyH2Mh2KxJXh
op0CaZCdjBWk1w4CE9zlbWrBGifDfTBIxGM2Gk3b8G/v2phdKd7BtNXq1HBTMyIU
E1IQFZRLB9I++yElOjDKESWz42da565dXmCrUJwseZH9dEmmQFRboJGsbEppzpgJ
9jCErLEJgLGrxOvtg0K8k2j+/XAh9v2hbM3U0wMN1Z9ef8vQMgYqoaoQ4XZYQwCl
nvqqSdStelR243gQ3tFZAT9R0ZrRCguOZrxTJuzCD2DcBtEmXjL70WkIj3mgAobf
yFo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:54 2025 by rpki-client