Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-0GyTydgULdtkTUKQJ_nqnu4f2A.roa
File: 1-0GyTydgULdtkTUKQJ_nqnu4f2A.roa (raw, json)
Hash identifier: sQ3oTV+YKo74JuIc2hGuH43ClLt3lZxQ147higdqYVQ=
Subject key identifier: FB:41:B2:4F:27:60:50:B7:6D:91:35:0A:40:9F:E7:AA:7B:B8:7F:60
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA60882989C72C5609B948AE354ECF173
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-0GyTydgULdtkTUKQJ_nqnu4f2A.roa
Signing time: Mon 18 Sep 2023 02:04:50 +0000
ROA not before: Mon 18 Sep 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:a607:eaa7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:08:82:98:9c:72:c5:60:9b:94:8a:e3:54:ec:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb41b24f276050b76d91350a409fe7aa7bb87f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:d8:cd:2c:5b:a4:43:40:2e:92:d9:b4:f0:
48:22:5e:e5:a1:9b:d9:63:d1:7a:2b:ba:b4:75:7e:
47:de:8f:00:b5:fa:d9:a6:0d:61:6f:dc:a7:40:41:
7f:48:dd:8b:fe:e0:03:cf:9b:88:8a:c5:f4:04:2b:
67:a0:cc:42:28:0f:fc:2d:64:25:4b:bf:a1:d6:1c:
c2:d4:59:ea:49:f5:69:f6:1b:29:57:ab:bc:de:5d:
f0:09:84:4c:c3:ec:26:d2:f9:84:b6:f4:50:77:04:
4b:ab:1d:50:fc:54:73:dd:a7:d5:82:e6:fe:06:ac:
e5:33:c4:a5:92:25:6c:ca:69:98:81:a1:db:9b:9d:
48:42:de:76:12:87:3f:bd:7e:44:82:1e:a7:21:02:
0b:54:b2:b2:f0:65:ab:34:34:62:31:00:77:fa:28:
b5:b7:53:70:60:7d:24:fa:9a:ce:f9:f6:ce:cf:f9:
4c:5d:28:9d:4a:0c:36:a5:d4:68:40:6c:8e:fb:22:
c4:77:5e:c9:d9:91:22:c0:e6:ab:bd:09:aa:f5:25:
23:a2:91:07:5e:50:1a:fa:3d:3f:95:ff:77:5f:66:
a7:26:90:9e:0c:78:38:ca:94:45:6f:a2:b0:84:6e:
0a:46:21:ac:ca:d2:39:ec:19:d5:90:61:3a:9c:b4:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:B2:4F:27:60:50:B7:6D:91:35:0A:40:9F:E7:AA:7B:B8:7F:60
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1-0GyTydgULdtkTUKQJ_nqnu4f2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:87:c1:d3:8d:2e:d7:8b:4c:4c:0f:83:0f:6f:50:0d:01:2b:
75:e6:b0:85:c3:6f:ed:31:65:e7:f2:0a:51:97:ab:07:58:49:
43:f5:2a:ef:bd:1e:1d:38:6d:99:bd:89:d4:cb:4f:23:6c:41:
83:50:84:e3:2c:ce:32:c1:bd:bb:1e:9b:16:9e:9f:53:bd:ad:
8d:68:60:dd:1d:38:14:a8:26:91:57:4c:9f:93:00:ba:a3:bb:
3c:f8:a8:63:0f:fd:ce:5d:60:f0:51:a1:60:f6:2c:09:6e:01:
0e:22:56:ef:e0:f2:d7:1c:c2:d1:30:1f:bf:2a:5c:92:34:fb:
8f:3f:8a:4a:26:73:5e:dd:45:a9:2f:e1:ac:32:41:df:a6:a0:
99:f9:75:3c:5d:17:59:25:66:80:36:75:15:e0:3b:6a:21:59:
43:91:c3:5b:51:aa:70:c4:76:7d:82:23:84:93:1a:4d:a2:71:
2d:9a:32:02:39:de:e0:8b:a3:3c:7f:e1:bc:a1:c6:19:30:e7:
98:bc:3d:41:6e:57:f3:eb:25:75:e2:07:03:8c:02:61:39:f4:
ca:ab:ef:f2:00:8c:49:5b:1f:6f:65:e9:a4:c8:81:bf:8e:e0:
0c:d1:1e:24:e0:5b:49:02:11:71:33:b3:6f:0a:e2:7a:9e:ee:
a2:55:5b:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYqmCIKYnHLFYJuUiuNU7PFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE4MDIwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQxYjI0ZjI3NjA1MGI3NmQ5MTM1MGE0MDlmZTdhYTdiYjg3ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ3YzSxbpENALpLZtPBIIl7loZvZ
Y9F6K7q0dX5H3o8AtfrZpg1hb9ynQEF/SN2L/uADz5uIisX0BCtnoMxCKA/8LWQl
S7+h1hzC1FnqSfVp9hspV6u83l3wCYRMw+wm0vmEtvRQdwRLqx1Q/FRz3afVgub+
BqzlM8SlkiVsymmYgaHbm51IQt52Eoc/vX5Egh6nIQILVLKy8GWrNDRiMQB3+ii1
t1NwYH0k+prO+fbOz/lMXSidSgw2pdRoQGyO+yLEd17J2ZEiwOarvQmq9SUjopEH
XlAa+j0/lf93X2anJpCeDHg4ypRFb6KwhG4KRiGsytI57BnVkGE6nLS6uQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPtBsk8nYFC3bZE1CkCf56p7uH9gMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMS0wR3lUeWRnVUxkdGtUVUtRSl9ucW51NGYyQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjYvOGJmOWM1LTFkMjItNDM5ZS1iMGJkLTgzZmNkMjI1NDgy
YS8xL3FoOFV5RkIwV253eExxTHJDLUF3VXVTV2NuVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAqh8HTjS7Xi0xMD4MP
b1ANASt15rCFw2/tMWXn8gpRl6sHWElD9SrvvR4dOG2ZvYnUy08jbEGDUITjLM4y
wb27HpsWnp9Tva2NaGDdHTgUqCaRV0yfkwC6o7s8+KhjD/3OXWDwUaFg9iwJbgEO
Ilbv4PLXHMLRMB+/KlySNPuPP4pKJnNe3UWpL+GsMkHfpqCZ+XU8XRdZJWaANnUV
4DtqIVlDkcNbUapwxHZ9giOEkxpNonEtmjICOd7gi6M8f+G8ocYZMOeYvD1Bblfz
6yV14gcDjAJhOfTKq+/yAIxJWx9vZemkyIG/juAM0R4k4FtJAhFxM7NvCuJ6nu6i
VVs/
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:37:53 2025 by rpki-client