Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez9__U5N5Ity2V1jQFIEVAtSeNk.roa
File: Ez9__U5N5Ity2V1jQFIEVAtSeNk.roa (raw, json)
Hash identifier: +l/0GnIcmZDTJclEn1nwRw/dklvyKzJ6Z1sR//nAYEI=
Subject key identifier: 13:3F:7F:FD:4E:4D:E4:8B:72:D9:5D:63:40:52:04:54:0B:52:78:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDF54D81F23BE5BC1556CC10C32BD562E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez9__U5N5Ity2V1jQFIEVAtSeNk.roa
Signing time: Fri 17 Nov 2023 22:09:21 +0000
ROA not before: Fri 17 Nov 2023 22:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:54:d8:1f:23:be:5b:c1:55:6c:c1:0c:32:bd:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 22:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133f7ffd4e4de48b72d95d63405204540b5278d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:6d:5d:56:29:96:39:ba:1b:b6:78:c6:b5:
66:03:aa:d9:31:38:1c:c5:79:e6:6b:0d:04:14:0d:
ed:1c:4b:89:5e:03:4d:a4:42:6e:0e:11:0e:04:8d:
f9:f8:f4:87:ec:b5:21:85:57:36:02:4f:e2:20:45:
62:8a:08:b2:ab:0c:05:11:a1:b0:3b:75:25:f3:b3:
e7:3b:f8:fa:23:2b:9d:d7:a0:91:00:62:9b:76:cf:
1d:5c:29:67:9a:f7:b8:a4:f2:f8:82:4b:a9:3a:47:
d5:11:08:44:b9:d6:44:ba:5a:a2:06:3f:d5:35:82:
3f:2a:bd:dd:8e:d1:74:91:86:71:23:0e:bc:e3:d0:
fa:58:8b:c3:40:93:6d:06:90:69:ae:4f:af:cd:14:
8e:6f:57:46:d0:de:aa:dd:ef:9e:66:78:57:4a:00:
e2:e0:78:6e:2e:40:b0:7a:13:6e:f7:42:38:4d:11:
16:ef:54:8e:92:c5:72:a0:a5:37:8f:fc:6b:98:e4:
2d:b4:b5:df:90:d1:2c:2d:68:e9:1f:54:fa:81:7f:
1b:bf:e1:e5:3c:ec:16:f2:4a:28:28:1e:f1:0f:17:
b7:be:20:5d:ca:c0:c8:38:da:20:a5:b3:33:db:ec:
14:e8:62:fd:70:1f:9f:bf:b3:0d:ca:f7:04:62:78:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:7F:FD:4E:4D:E4:8B:72:D9:5D:63:40:52:04:54:0B:52:78:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez9__U5N5Ity2V1jQFIEVAtSeNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:92:db:3d:a1:96:54:74:af:07:cf:20:ad:c5:c7:6e:24:37:
70:61:a5:f2:6a:ac:08:13:3f:43:5b:16:15:dd:bc:bb:ca:4e:
f3:86:96:6a:91:a8:fc:c0:d5:1b:1c:5f:ae:49:97:17:2e:2f:
6b:f9:0e:4a:13:e4:0d:e3:4d:3c:eb:e4:f1:ed:94:5d:15:f9:
82:8e:4d:c9:74:9a:bc:e6:24:bd:74:50:9d:c7:3e:a8:5b:0e:
04:47:34:af:61:8f:a5:21:3b:06:63:04:f3:d2:22:19:88:41:
64:27:e0:5c:ff:b6:b3:93:b3:90:37:cd:15:1b:52:f1:15:59:
ea:e1:48:7a:b9:f5:e1:5b:7b:42:72:5c:27:6f:42:c2:8f:94:
aa:73:f9:4f:75:ba:57:c0:86:2e:28:b0:4a:3d:81:a5:d1:38:
f7:4b:7b:0f:c6:56:99:e1:f5:19:5a:94:0e:88:58:8f:27:7b:
98:34:f4:69:8b:73:79:78:37:9c:77:5d:11:cb:ad:84:66:60:
fb:7f:7a:38:04:ef:da:c2:b3:a5:76:6f:48:fe:c1:bc:c2:4a:
96:24:42:d3:ff:7c:b6:cf:f0:70:97:bc:e6:06:88:f5:e0:23:
42:2f:48:85:43:5d:e7:3b:08:e7:5e:14:e2:06:f6:02:a0:2a:
91:a8:2f:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvfVNgfI75bwVVswQwyvVYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE3MjIwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNmN2ZmZDRlNGRlNDhiNzJkOTVkNjM0MDUyMDQ1NDBiNTI3OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+ZtXVYpljm6G7Z4xrVmA6rZMTgc
xXnmaw0EFA3tHEuJXgNNpEJuDhEOBI35+PSH7LUhhVc2Ak/iIEViigiyqwwFEaGw
O3Ul87PnO/j6Iyud16CRAGKbds8dXClnmve4pPL4gkupOkfVEQhEudZEulqiBj/V
NYI/Kr3djtF0kYZxIw6849D6WIvDQJNtBpBprk+vzRSOb1dG0N6q3e+eZnhXSgDi
4HhuLkCwehNu90I4TREW71SOksVyoKU3j/xrmOQttLXfkNEsLWjpH1T6gX8bv+Hl
POwW8kooKB7xDxe3viBdysDIONogpbMz2+wU6GL9cB+fv7MNyvcEYnhx7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBM/f/1OTeSLctldY0BSBFQLUnjZMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRXo5X19VNU41SXR5MlYxalFGSUVWQXRTZU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIWS2z2hllR0rwfPIK3F
x24kN3BhpfJqrAgTP0NbFhXdvLvKTvOGlmqRqPzA1RscX65JlxcuL2v5DkoT5A3j
TTzr5PHtlF0V+YKOTcl0mrzmJL10UJ3HPqhbDgRHNK9hj6UhOwZjBPPSIhmIQWQn
4Fz/trOTs5A3zRUbUvEVWerhSHq59eFbe0JyXCdvQsKPlKpz+U91ulfAhi4osEo9
gaXROPdLew/GVpnh9RlalA6IWI8ne5g09GmLc3l4N5x3XRHLrYRmYPt/ejgE79rC
s6V2b0j+wbzCSpYkQtP/fLbP8HCXvOYGiPXgI0IvSIVDXec7COdeFOIG9gKgKpGo
L8Q=
-----END CERTIFICATE-----
Generated at Sat May 10 11:41:25 2025 by rpki-client