Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vgV9xCmq0Cv3bk7gLjEQwB_oY4.roa
File: 9vgV9xCmq0Cv3bk7gLjEQwB_oY4.roa (raw, json)
Hash identifier: 0AEEcXflB5SODIyYnayfAWUh2BhKqppXUNgSiJoxaB4=
Subject key identifier: F6:F8:15:F7:10:A6:AB:40:AF:DD:B9:3B:80:B8:C4:43:00:7F:A1:8E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6BA63F0FA62F289F689A363CB9EB5F31
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vgV9xCmq0Cv3bk7gLjEQwB_oY4.roa
Signing time: Fri 15 Dec 2023 04:05:06 +0000
ROA not before: Fri 15 Dec 2023 04:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6ba5:89ff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:a6:3f:0f:a6:2f:28:9f:68:9a:36:3c:b9:eb:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 04:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f815f710a6ab40afddb93b80b8c443007fa18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:90:b1:40:8f:48:39:cb:f5:0d:cc:33:e0:
18:c8:2c:0f:9c:91:ce:92:50:ef:73:e6:ae:76:26:
90:01:01:e2:e4:7e:81:6a:e0:09:4d:87:6d:67:06:
1b:05:23:60:94:3e:64:f3:6b:8c:04:9f:a4:cd:51:
34:5d:03:9c:1e:d0:72:ff:6c:45:4d:dd:b1:9e:15:
aa:41:4e:16:cf:f9:cd:74:c1:ab:10:df:21:9d:6f:
3a:8b:92:24:44:a4:91:fc:51:51:5c:46:89:d6:27:
fd:43:ec:3d:af:d6:08:83:45:ef:4f:6c:83:8f:1f:
81:bb:56:8d:68:00:ed:35:0c:51:1f:0b:36:38:a5:
fa:ab:7a:60:00:13:e7:e9:2b:df:f6:01:df:ab:f7:
2f:73:25:dc:99:7a:ec:60:aa:a4:2c:83:8f:40:3c:
83:60:dd:95:7d:a4:87:08:33:ca:a4:a9:96:03:6a:
b1:fb:91:67:d6:e8:88:c7:54:36:8d:04:68:d8:1c:
14:3a:1d:39:09:b7:56:3d:3c:28:d6:15:18:77:3f:
c7:a2:41:af:86:b6:c7:03:dc:2d:66:e8:9e:71:13:
2c:3f:68:bc:db:22:41:2a:06:a2:26:0a:a1:f2:48:
8b:5c:73:a7:5f:9a:dc:58:b8:ae:3f:76:23:f4:ff:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:15:F7:10:A6:AB:40:AF:DD:B9:3B:80:B8:C4:43:00:7F:A1:8E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vgV9xCmq0Cv3bk7gLjEQwB_oY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:b6:69:3c:e6:24:0b:7f:49:1f:6f:7b:25:38:e4:f0:33:c0:
d5:5b:52:1e:78:b1:b4:83:cc:a7:19:a5:7c:f3:f1:55:c5:d4:
2c:b2:4c:11:9e:41:6b:25:e3:19:c4:5b:ed:58:61:d0:f2:c6:
af:f9:1d:e4:00:21:98:52:a2:25:25:5c:61:78:72:67:c4:1a:
49:1e:6b:d1:41:68:8b:2e:0c:33:65:9e:24:69:57:6f:d0:be:
56:0c:c5:3d:90:a1:cf:79:3a:10:59:af:a6:32:a2:73:3c:11:
94:34:45:77:8f:31:ab:cf:4a:cb:86:f6:ed:a2:67:03:45:9e:
a6:8a:b6:7f:f6:30:80:47:d6:69:dc:ba:7f:25:8a:9b:c5:b7:
bb:14:83:b2:92:2a:e5:37:99:9b:a5:25:34:72:c6:12:f9:32:
5d:86:d1:03:65:52:1c:3d:00:ea:47:9e:ed:2d:a1:24:fb:67:
40:ad:72:a2:ca:8a:eb:63:1c:3f:85:7f:11:83:4c:9a:6a:4d:
01:b8:af:e0:5b:04:86:85:c8:df:92:fd:45:24:97:29:6e:fe:
2c:72:a6:6a:bd:ed:c3:40:3c:84:6a:61:65:b7:17:d1:83:a6:
18:41:71:a6:08:c7:07:93:c3:3a:10:fb:55:d8:4f:d6:18:21:
1c:9c:5e:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxrpj8Ppi8on2iaNjy5618xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE1MDQwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY4MTVmNzEwYTZhYjQwYWZkZGI5M2I4MGI4YzQ0MzAwN2ZhMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6+QsUCPSDnL9Q3MM+AYyCwPnJHO
klDvc+audiaQAQHi5H6BauAJTYdtZwYbBSNglD5k82uMBJ+kzVE0XQOcHtBy/2xF
Td2xnhWqQU4Wz/nNdMGrEN8hnW86i5IkRKSR/FFRXEaJ1if9Q+w9r9YIg0XvT2yD
jx+Bu1aNaADtNQxRHws2OKX6q3pgABPn6Svf9gHfq/cvcyXcmXrsYKqkLIOPQDyD
YN2VfaSHCDPKpKmWA2qx+5Fn1uiIx1Q2jQRo2BwUOh05CbdWPTwo1hUYdz/HokGv
hrbHA9wtZuiecRMsP2i82yJBKgaiJgqh8kiLXHOnX5rcWLiuP3Yj9P8d3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPb4FfcQpqtAr925O4C4xEMAf6GOMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOXZnVjl4Q21xMEN2M2JrN2dMakVRd0Jfb1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABi2aTzmJAt/SR9veyU4
5PAzwNVbUh54sbSDzKcZpXzz8VXF1CyyTBGeQWsl4xnEW+1YYdDyxq/5HeQAIZhS
oiUlXGF4cmfEGkkea9FBaIsuDDNlniRpV2/QvlYMxT2Qoc95OhBZr6YyonM8EZQ0
RXePMavPSsuG9u2iZwNFnqaKtn/2MIBH1mncun8lipvFt7sUg7KSKuU3mZulJTRy
xhL5Ml2G0QNlUhw9AOpHnu0toST7Z0CtcqLKiutjHD+FfxGDTJpqTQG4r+BbBIaF
yN+S/UUklylu/ixypmq97cNAPIRqYWW3F9GDphhBcaYIxweTwzoQ+1XYT9YYIRyc
XgY=
-----END CERTIFICATE-----
Generated at Mon May 12 04:18:34 2025 by rpki-client