Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BTlh24RaeUL_rcgzPYLvCLRuc5U.roa
File: BTlh24RaeUL_rcgzPYLvCLRuc5U.roa (raw, json)
Hash identifier: HmJVmtRGZbrLqnc2YxiuGlhAGAWTDtEMK2bxe3JluNg=
Subject key identifier: 05:39:61:DB:84:5A:79:42:FF:AD:C8:33:3D:82:EF:08:B4:6E:73:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF23C9770256C4A65CFB44A951B2FE512
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BTlh24RaeUL_rcgzPYLvCLRuc5U.roa
Signing time: Mon 02 Oct 2023 21:12:51 +0000
ROA not before: Mon 02 Oct 2023 21:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f2:3c:97:70:25:6c:4a:65:cf:b4:4a:95:1b:2f:e5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 21:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053961db845a7942ffadc8333d82ef08b46e7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:af:b9:41:7e:f0:be:66:39:9c:96:02:b2:
70:e2:bc:f4:e9:e0:a7:24:06:6b:d5:10:b0:21:d2:
4d:7e:00:ea:6f:32:f8:e2:82:4f:50:ca:77:98:67:
d1:30:7d:34:9e:a4:70:e3:18:49:f2:aa:22:49:75:
0c:de:84:e3:f7:5d:15:3d:b7:c6:10:ee:5a:ec:35:
aa:91:26:5a:86:de:35:95:d6:53:52:6f:b3:fa:14:
c7:f6:33:8f:17:52:2b:41:36:07:8f:62:1f:3a:52:
20:20:21:04:40:1d:0a:c7:c8:01:e6:cd:38:c7:7a:
f1:a6:64:b2:c5:62:82:d9:5c:b7:43:6f:8e:58:31:
b5:bc:57:56:5f:f5:c6:30:ff:6b:5b:01:e0:38:10:
f2:d3:6d:60:26:10:be:df:e4:20:13:06:28:6e:39:
65:91:b6:e5:6b:0e:47:aa:cb:3c:35:6b:c0:54:e8:
99:f6:80:6c:5f:53:67:18:c0:87:c7:06:26:56:5c:
ac:16:3e:4d:1a:de:93:9f:e2:7e:08:68:fe:92:57:
a0:90:0d:1a:74:53:27:bb:92:ae:33:d4:b2:c8:f4:
42:ef:c7:d1:25:3f:2a:d6:0c:ef:ba:e6:ef:21:c7:
1a:59:5e:d6:45:66:eb:f8:8f:f1:4b:84:4c:09:65:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:61:DB:84:5A:79:42:FF:AD:C8:33:3D:82:EF:08:B4:6E:73:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BTlh24RaeUL_rcgzPYLvCLRuc5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:5e:de:fd:40:c8:db:63:72:01:7a:05:81:27:bf:35:2f:55:
30:51:eb:b0:80:1c:01:3c:2a:b5:a8:5c:ac:7c:84:f6:c6:ce:
70:d0:d8:40:80:a8:9b:10:53:6e:2c:c4:04:aa:9f:32:35:6b:
ea:ca:bb:01:59:fa:a7:94:58:be:5f:03:0c:35:a2:37:4b:7d:
6d:f6:40:e4:ed:c9:22:5b:80:61:18:a9:4a:e1:89:af:48:a0:
e9:a4:91:e5:f9:52:8c:ca:20:ca:fd:ec:08:2e:d3:5b:86:cc:
28:8d:f8:1d:51:bd:01:f4:14:c5:0c:53:55:2f:e8:f1:6b:d7:
ec:47:5f:f4:ab:be:aa:11:a1:4b:ab:ec:a3:cd:d3:67:0a:de:
31:bf:e3:c0:aa:b4:0c:82:b1:7c:16:6b:83:2f:f2:a6:7c:51:
7e:32:81:0b:1b:02:76:6f:3b:bc:ac:92:ea:88:a5:d2:e7:a0:
8a:63:0e:ff:e2:db:99:76:77:95:30:af:fa:70:18:fa:0e:2a:
62:ee:5e:c2:a0:c9:bd:4f:cf:01:1d:3e:dd:2b:88:3d:be:27:
12:43:9e:dd:13:8a:46:ec:db:8a:a2:db:12:32:a4:db:89:3f:
08:18:e3:9f:81:d0:63:7c:00:63:80:05:ee:cf:53:d9:66:14:
c0:27:8c:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYryPJdwJWxKZc+0SpUbL+USMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMjExMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTM5NjFkYjg0NWE3OTQyZmZhZGM4MzMzZDgyZWYwOGI0NmU3Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcWvuUF+8L5mOZyWArJw4rz06eCn
JAZr1RCwIdJNfgDqbzL44oJPUMp3mGfRMH00nqRw4xhJ8qoiSXUM3oTj910VPbfG
EO5a7DWqkSZaht41ldZTUm+z+hTH9jOPF1IrQTYHj2IfOlIgICEEQB0Kx8gB5s04
x3rxpmSyxWKC2Vy3Q2+OWDG1vFdWX/XGMP9rWwHgOBDy021gJhC+3+QgEwYobjll
kbblaw5Hqss8NWvAVOiZ9oBsX1NnGMCHxwYmVlysFj5NGt6Tn+J+CGj+klegkA0a
dFMnu5KuM9SyyPRC78fRJT8q1gzvuubvIccaWV7WRWbr+I/xS4RMCWU9vQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAU5YduEWnlC/63IMz2C7wi0bnOVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQlRsaDI0UmFlVUxfcmNnelBZTHZDTFJ1YzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALde3v1AyNtjcgF6BYEn
vzUvVTBR67CAHAE8KrWoXKx8hPbGznDQ2ECAqJsQU24sxASqnzI1a+rKuwFZ+qeU
WL5fAww1ojdLfW32QOTtySJbgGEYqUrhia9IoOmkkeX5UozKIMr97Agu01uGzCiN
+B1RvQH0FMUMU1Uv6PFr1+xHX/SrvqoRoUur7KPN02cK3jG/48CqtAyCsXwWa4Mv
8qZ8UX4ygQsbAnZvO7yskuqIpdLnoIpjDv/i25l2d5Uwr/pwGPoOKmLuXsKgyb1P
zwEdPt0riD2+JxJDnt0Tikbs24qi2xIypNuJPwgY45+B0GN8AGOABe7PU9lmFMAn
jD0=
-----END CERTIFICATE-----
Generated at Tue May 13 02:18:31 2025 by rpki-client