Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mwsPdcAimTumgthjTDf6ed0k6s.roa
File: 4mwsPdcAimTumgthjTDf6ed0k6s.roa (raw, json)
Hash identifier: ZXXvoVzTWETH49V74AGeEaigDFCXa2uFl6UA7aFKUlY=
Subject key identifier: E2:6C:2C:3D:D7:00:8A:64:EE:9A:0B:61:8D:30:DF:E9:E7:74:93:AB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B747524F6C0599BA602F1A5BB12565092
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mwsPdcAimTumgthjTDf6ed0k6s.roa
Signing time: Sat 28 Oct 2023 04:05:16 +0000
ROA not before: Sat 28 Oct 2023 04:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7474:5238/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:75:24:f6:c0:59:9b:a6:02:f1:a5:bb:12:56:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 04:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e26c2c3dd7008a64ee9a0b618d30dfe9e77493ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:f3:71:de:a5:d1:b9:15:91:aa:c1:18:4a:
ba:eb:4b:24:fb:26:71:9a:ec:e2:b3:fb:8c:73:bd:
ee:36:a4:51:0d:e9:4b:ec:3d:35:6b:1b:d4:21:30:
7b:a0:6e:84:c2:d2:67:4e:8a:85:69:28:b3:f6:13:
0b:25:4a:e4:51:c4:89:78:30:40:1e:c4:a6:57:9b:
ba:5b:09:db:9f:fd:a1:22:b7:9c:c4:42:55:87:2d:
36:25:f8:3e:e0:fa:d6:57:82:51:9a:cc:ec:1c:b1:
a3:1c:e6:ed:45:b0:69:3e:00:28:cb:98:0e:60:ef:
d5:67:83:e1:57:0b:f0:6f:f8:a2:96:95:75:3f:39:
aa:e7:2c:55:f9:99:c4:9e:d1:f1:24:31:a8:ac:c8:
1f:9e:bd:4e:25:1a:9a:37:84:57:db:3c:4d:1b:4d:
04:e0:11:6b:b0:fc:f5:5e:e7:ff:49:9b:00:47:31:
bb:e1:0f:9d:7b:db:26:a5:81:5a:f2:a7:73:9b:92:
c4:19:be:fb:e9:c7:40:26:12:47:74:41:1e:eb:9c:
37:e5:b7:87:09:04:d1:89:76:6b:ca:4a:fe:82:03:
bc:c3:48:79:11:50:42:0f:27:a3:08:23:01:f8:b4:
ac:94:b2:fe:7b:a0:fb:0c:20:d8:b9:37:3b:3b:f5:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:2C:3D:D7:00:8A:64:EE:9A:0B:61:8D:30:DF:E9:E7:74:93:AB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mwsPdcAimTumgthjTDf6ed0k6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:13:71:40:c2:c6:c2:87:aa:c9:09:d7:77:93:b7:96:3d:43:
e7:ce:b6:04:04:59:ce:bb:29:93:f8:37:2d:32:83:68:ac:be:
ee:2e:7e:8b:d4:6d:85:f0:c2:1d:4a:66:cf:37:c0:ff:64:fa:
30:b6:72:69:a0:25:03:f8:36:ee:ec:75:68:36:6a:64:95:55:
38:69:02:7e:f0:e5:32:45:9d:6f:70:a8:ab:c8:85:79:f6:b3:
1a:5d:39:02:4a:41:e9:75:84:bb:e9:13:af:26:af:8a:56:8e:
13:35:fc:27:d8:93:bf:14:5e:05:bf:fc:87:6a:09:da:d9:85:
ba:49:87:78:1d:36:30:c0:ac:c0:48:24:d8:7e:28:8e:42:f2:
b2:e3:2d:c7:3b:e4:7e:a6:54:1f:dc:b0:1f:7b:8a:86:ab:72:
c6:99:6a:84:2e:f7:42:e7:eb:73:98:63:2a:6c:71:b1:54:2d:
0d:83:71:74:77:fe:76:2b:f8:d1:d1:6a:ab:1b:39:0f:1b:e2:
0e:80:99:14:24:5a:bf:c4:99:3a:4c:f8:6d:76:e2:20:cc:6d:
07:25:9e:01:45:93:1a:84:e1:e6:c8:57:c6:51:aa:7a:20:2a:
69:9f:35:52:32:e2:59:22:cb:c4:b9:01:7b:48:ba:e7:55:bd:
dc:43:97:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt0dST2wFmbpgLxpbsSVlCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI4MDQwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjZjMmMzZGQ3MDA4YTY0ZWU5YTBiNjE4ZDMwZGZlOWU3NzQ5M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvzcd6l0bkVkarBGEq660sk+yZx
muzis/uMc73uNqRRDelL7D01axvUITB7oG6EwtJnToqFaSiz9hMLJUrkUcSJeDBA
HsSmV5u6Wwnbn/2hIrecxEJVhy02Jfg+4PrWV4JRmszsHLGjHObtRbBpPgAoy5gO
YO/VZ4PhVwvwb/iilpV1Pzmq5yxV+ZnEntHxJDGorMgfnr1OJRqaN4RX2zxNG00E
4BFrsPz1Xuf/SZsARzG74Q+de9smpYFa8qdzm5LEGb776cdAJhJHdEEe65w35beH
CQTRiXZrykr+ggO8w0h5EVBCDyejCCMB+LSslLL+e6D7DCDYuTc7O/UxHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOJsLD3XAIpk7poLYY0w3+nndJOrMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNG13c1BkY0FpbVR1bWd0aGpURGY2ZWQwazZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC0TcUDCxsKHqskJ13eT
t5Y9Q+fOtgQEWc67KZP4Ny0yg2isvu4ufovUbYXwwh1KZs83wP9k+jC2cmmgJQP4
Nu7sdWg2amSVVThpAn7w5TJFnW9wqKvIhXn2sxpdOQJKQel1hLvpE68mr4pWjhM1
/CfYk78UXgW//IdqCdrZhbpJh3gdNjDArMBIJNh+KI5C8rLjLcc75H6mVB/csB97
ioarcsaZaoQu90Ln63OYYypscbFULQ2DcXR3/nYr+NHRaqsbOQ8b4g6AmRQkWr/E
mTpM+G124iDMbQclngFFkxqE4ebIV8ZRqnogKmmfNVIy4lkiy8S5AXtIuudVvdxD
l9s=
-----END CERTIFICATE-----
Generated at Sun May 11 18:37:33 2025 by rpki-client