Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5ioq5715wuZZxvHh0yjDoI2bVDg.roa
File: 5ioq5715wuZZxvHh0yjDoI2bVDg.roa (raw, json)
Hash identifier: OZILX66fvrbnoFYgqVclWM78O7R1YgPTQtGiiIydTAY=
Subject key identifier: E6:2A:2A:E7:BD:79:C2:E6:59:C6:F1:E1:D3:28:C3:A0:8D:9B:54:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7697C20100E7C809974014B02D2DF232
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5ioq5715wuZZxvHh0yjDoI2bVDg.roa
Signing time: Sun 17 Dec 2023 07:05:06 +0000
ROA not before: Sun 17 Dec 2023 07:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:7696:d8ec/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:76:97:c2:01:00:e7:c8:09:97:40:14:b0:2d:2d:f2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 07:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e62a2ae7bd79c2e659c6f1e1d328c3a08d9b5438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:5f:42:82:e0:a1:5e:50:ff:36:a3:cd:ff:
dd:c0:e5:e3:98:0b:c9:76:83:11:c3:a1:3d:1e:77:
eb:f1:f1:9d:4c:7c:da:c3:2b:cd:9a:d2:5d:fc:f3:
6e:07:d9:db:fe:03:d4:b9:48:0b:5e:05:6a:a5:37:
a7:29:f0:d8:ca:3c:1b:89:cd:a8:53:f5:f6:63:b7:
ff:7c:68:97:59:fb:95:b3:75:84:94:dd:db:fa:4b:
c5:eb:07:33:f5:65:5f:9f:1c:a9:7d:d5:29:cd:bb:
3f:35:14:9a:4e:61:6d:a5:da:22:3e:a2:af:eb:eb:
07:0b:99:7f:46:15:68:48:d3:06:26:47:8c:e5:d6:
e7:1f:0a:62:ea:bf:a3:a3:cb:4c:fe:ee:66:57:22:
16:52:c0:04:5b:d5:c3:5e:38:69:ae:21:1b:78:63:
4b:90:08:2a:5d:c1:72:54:2d:b9:52:3c:8f:03:0b:
de:5a:17:5a:ed:36:26:85:94:4f:8e:5a:94:54:bf:
54:5a:08:41:f0:9d:f5:a4:88:e6:d3:b6:fc:d5:1b:
31:ec:12:d2:2e:b8:bb:81:87:c8:22:8a:61:9f:79:
75:bd:56:34:66:cc:07:69:ed:e7:ec:ef:82:75:c2:
d6:c2:f1:c6:31:51:ba:cf:d0:2e:ff:a8:34:86:42:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:2A:E7:BD:79:C2:E6:59:C6:F1:E1:D3:28:C3:A0:8D:9B:54:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5ioq5715wuZZxvHh0yjDoI2bVDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:66:39:13:e4:2c:69:65:a5:8e:4f:01:e0:4c:60:61:ae:7d:
60:f6:4a:87:bd:10:12:01:04:72:86:10:3f:16:29:e0:ea:a7:
de:ab:76:bf:cf:32:b7:b5:b9:f7:8f:31:ec:a5:14:28:f4:0a:
b5:51:c6:34:13:c5:f3:86:12:3e:29:b0:44:9b:74:25:68:c1:
e6:96:30:8c:13:c0:28:af:07:f2:ba:f4:6b:6b:35:48:40:94:
22:e0:38:59:78:9c:b8:34:52:7f:55:f3:cb:f0:e0:e0:bd:52:
5b:4f:89:54:03:c0:75:d6:f9:60:ad:de:90:3a:84:53:c0:b2:
03:54:cc:6f:13:65:23:59:78:3e:6d:3e:9a:21:d0:1f:69:dc:
d9:e1:a2:49:85:de:da:e0:4b:db:0e:1c:c9:63:59:3b:98:b1:
cb:95:92:12:f2:b2:6b:e4:2d:9f:7f:a6:15:03:57:41:f3:ea:
91:28:75:d9:8b:79:84:45:a6:dd:3c:1c:a2:52:76:8d:02:3c:
05:a9:24:6e:ff:04:ce:01:19:a2:0b:1f:91:34:73:e0:7b:b2:
f9:95:5f:92:12:cd:51:df:72:47:f5:2c:c7:23:ee:62:52:da:
79:ec:f7:73:f6:6c:ac:ed:da:02:04:b0:6f:f8:2e:ae:46:db:
35:90:74:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx2l8IBAOfICZdAFLAtLfIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MDcwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjJhMmFlN2JkNzljMmU2NTljNmYxZTFkMzI4YzNhMDhkOWI1NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVfQoLgoV5Q/zajzf/dwOXjmAvJ
doMRw6E9Hnfr8fGdTHzawyvNmtJd/PNuB9nb/gPUuUgLXgVqpTenKfDYyjwbic2o
U/X2Y7f/fGiXWfuVs3WElN3b+kvF6wcz9WVfnxypfdUpzbs/NRSaTmFtpdoiPqKv
6+sHC5l/RhVoSNMGJkeM5dbnHwpi6r+jo8tM/u5mVyIWUsAEW9XDXjhpriEbeGNL
kAgqXcFyVC25UjyPAwveWhda7TYmhZRPjlqUVL9UWghB8J31pIjm07b81Rsx7BLS
Lri7gYfIIophn3l1vVY0ZswHae3n7O+CdcLWwvHGMVG6z9Au/6g0hkJFFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOYqKue9ecLmWcbx4dMow6CNm1Q4MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNWlvcTU3MTV3dVpaeHZIaDB5akRvSTJiVkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG9mORPkLGllpY5PAeBM
YGGufWD2Soe9EBIBBHKGED8WKeDqp96rdr/PMre1ufePMeylFCj0CrVRxjQTxfOG
Ej4psESbdCVoweaWMIwTwCivB/K69GtrNUhAlCLgOFl4nLg0Un9V88vw4OC9UltP
iVQDwHXW+WCt3pA6hFPAsgNUzG8TZSNZeD5tPpoh0B9p3NnhokmF3trgS9sOHMlj
WTuYscuVkhLysmvkLZ9/phUDV0Hz6pEoddmLeYRFpt08HKJSdo0CPAWpJG7/BM4B
GaILH5E0c+B7svmVX5ISzVHfckf1LMcj7mJS2nns93P2bKzt2gIEsG/4Lq5G2zWQ
dBw=
-----END CERTIFICATE-----
Generated at Mon May 12 04:11:06 2025 by rpki-client