Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IjiZmzeMUeT4t2-hC49a0-8hzHU.roa
File: IjiZmzeMUeT4t2-hC49a0-8hzHU.roa (raw, json)
Hash identifier: KUesVxMMViLkD5WA6vz1klaCB4lG1gjvKpRPyhnV8Hg=
Subject key identifier: 22:38:99:9B:37:8C:51:E4:F8:B7:6F:A1:0B:8F:5A:D3:EF:21:CC:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDB4124C9B7E564DFA6985C1C44D8744F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IjiZmzeMUeT4t2-hC49a0-8hzHU.roa
Signing time: Fri 17 Nov 2023 03:09:21 +0000
ROA not before: Fri 17 Nov 2023 03:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:db:41:24:c9:b7:e5:64:df:a6:98:5c:1c:44:d8:74:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 03:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2238999b378c51e4f8b76fa10b8f5ad3ef21cc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:60:c7:9d:06:9f:32:ab:29:56:c9:a2:e6:
62:45:05:ec:31:93:68:fc:d1:4b:a8:74:82:ee:a8:
ec:23:af:53:c4:13:4e:d0:27:0b:fc:2c:3c:d0:c3:
44:d1:eb:7b:c6:2e:b3:31:91:32:56:38:33:9d:7f:
2e:f7:fd:e0:e4:21:e1:ee:8c:38:42:6a:98:a1:bc:
74:cb:22:66:1c:28:f5:35:37:3b:18:f5:51:78:8e:
71:27:8c:26:1c:7f:d3:f4:38:c0:8f:43:18:20:2a:
c5:c3:40:bc:31:ae:df:bc:fb:13:06:31:7e:3c:f9:
2d:d3:bc:e6:8e:db:f1:38:ac:61:0d:29:10:1b:9f:
ca:02:ae:ce:8f:58:de:ff:28:22:bd:5d:7a:a4:44:
b8:91:a0:de:4b:82:ec:d1:d7:96:d1:3b:75:41:af:
84:b0:99:1f:fd:91:89:cb:b1:38:97:1a:e0:80:41:
c9:4a:76:fb:32:0d:2d:0f:00:ce:8f:e9:c2:99:bc:
26:83:b3:a9:00:30:e2:56:1b:57:1a:cc:2f:37:ce:
a2:b1:7b:19:bc:7f:66:d8:ce:9a:73:d7:c2:0e:68:
d2:91:e5:01:2b:6a:6b:e3:01:9b:fc:6e:56:79:38:
61:9d:4d:b6:3a:92:91:45:65:00:3e:0b:0f:f2:01:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:99:9B:37:8C:51:E4:F8:B7:6F:A1:0B:8F:5A:D3:EF:21:CC:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IjiZmzeMUeT4t2-hC49a0-8hzHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:fa:39:7a:05:a5:ce:0d:77:16:4d:c1:a7:94:71:f6:2f:d4:
8f:2c:a9:3b:5f:35:9a:6b:f1:13:74:24:83:f0:52:84:c8:fc:
3d:47:85:2d:99:be:2c:28:e9:2a:e8:f3:60:8f:aa:6c:8a:3c:
2e:d8:eb:80:de:3a:3f:ab:44:e8:1f:82:35:25:fe:7f:49:5d:
cd:3e:28:1e:9d:34:b1:29:53:79:96:db:32:21:e8:63:c0:4b:
4e:a4:ac:e9:54:28:8b:3a:fc:90:6f:60:36:04:3c:4e:8a:3c:
8c:30:ee:2d:14:b2:f4:d2:f8:37:d6:67:1c:99:d2:6e:bb:a3:
1e:eb:6b:0e:99:04:88:28:d6:f6:67:38:e3:12:dc:97:d6:a2:
1a:6b:c0:52:b1:ba:75:1a:3b:22:05:3c:2c:f7:dd:43:21:f3:
be:f7:19:e8:cc:f5:4c:7d:72:f0:42:1c:3c:03:c8:41:00:46:
33:cc:10:b1:bf:e6:87:6c:22:59:de:73:db:12:28:e0:b2:e1:
d1:b4:16:2a:b1:eb:36:28:01:6b:e3:5e:e1:18:c5:7a:b5:40:
2f:73:e1:97:8d:9a:8b:23:65:ec:d9:df:81:e8:68:cc:af:78:
a7:6a:65:e1:5a:b6:c2:0f:52:b9:cd:4a:23:26:45:15:1f:79:
f6:1f:fa:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvbQSTJt+Vk36aYXBxE2HRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE3MDMwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjM4OTk5YjM3OGM1MWU0ZjhiNzZmYTEwYjhmNWFkM2VmMjFjYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocNgx50GnzKrKVbJouZiRQXsMZNo
/NFLqHSC7qjsI69TxBNO0CcL/Cw80MNE0et7xi6zMZEyVjgznX8u9/3g5CHh7ow4
QmqYobx0yyJmHCj1NTc7GPVReI5xJ4wmHH/T9DjAj0MYICrFw0C8Ma7fvPsTBjF+
PPkt07zmjtvxOKxhDSkQG5/KAq7Oj1je/ygivV16pES4kaDeS4Ls0deW0Tt1Qa+E
sJkf/ZGJy7E4lxrggEHJSnb7Mg0tDwDOj+nCmbwmg7OpADDiVhtXGswvN86isXsZ
vH9m2M6ac9fCDmjSkeUBK2pr4wGb/G5WeThhnU22OpKRRWUAPgsP8gHwYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCI4mZs3jFHk+LdvoQuPWtPvIcx1MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSWppWm16ZU1VZVQ0dDItaEM0OWEwLThoekhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMP6OXoFpc4NdxZNwaeU
cfYv1I8sqTtfNZpr8RN0JIPwUoTI/D1HhS2Zviwo6Sro82CPqmyKPC7Y64DeOj+r
ROgfgjUl/n9JXc0+KB6dNLEpU3mW2zIh6GPAS06krOlUKIs6/JBvYDYEPE6KPIww
7i0UsvTS+DfWZxyZ0m67ox7raw6ZBIgo1vZnOOMS3JfWohprwFKxunUaOyIFPCz3
3UMh8773GejM9Ux9cvBCHDwDyEEARjPMELG/5odsIlnec9sSKOCy4dG0Fiqx6zYo
AWvjXuEYxXq1QC9z4ZeNmosjZezZ34HoaMyveKdqZeFatsIPUrnNSiMmRRUfefYf
+sw=
-----END CERTIFICATE-----
Generated at Mon May 12 19:55:57 2025 by rpki-client