Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OX8-_aJLqkrhaDG5tO3Mc_099Cg.roa
File: OX8-_aJLqkrhaDG5tO3Mc_099Cg.roa (raw, json)
Hash identifier: b5WFAa4eSwpTCAoJEC6OvVPkSb89PZUWIzZP12suuKI=
Subject key identifier: 39:7F:3E:FD:A2:4B:AA:4A:E1:68:31:B9:B4:ED:CC:73:FD:3D:F4:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6310FA4A543740D5F459283FEE8568DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OX8-_aJLqkrhaDG5tO3Mc_099Cg.roa
Signing time: Wed 13 Dec 2023 12:05:06 +0000
ROA not before: Wed 13 Dec 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:6310:787f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:10:fa:4a:54:37:40:d5:f4:59:28:3f:ee:85:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=397f3efda24baa4ae16831b9b4edcc73fd3df428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:c4:ba:1c:93:34:38:c6:28:8c:3a:47:9b:
39:c9:f6:a9:35:cc:25:2f:3e:8f:93:b8:00:95:10:
2e:2f:25:8c:a3:1b:5c:22:7d:ce:40:ac:d1:fd:9a:
34:6b:f5:e5:3e:90:b7:c5:75:1a:f6:18:8a:b4:b0:
f2:90:44:71:fe:a2:c3:7a:f2:27:c8:51:fb:88:de:
77:a9:0e:8b:54:42:a2:85:ed:2e:3d:e5:cd:1f:97:
f8:b1:4c:cf:87:a2:b4:97:64:5b:6c:d7:62:6f:c4:
1a:ed:84:a8:c1:a6:b6:a5:04:4c:61:c8:33:2b:b6:
c6:34:e1:40:06:a0:e5:b6:23:39:20:18:f5:51:24:
5a:6d:69:a9:92:88:ba:14:09:97:40:06:98:aa:8f:
2c:0f:ea:76:f6:2a:b9:a7:0c:c7:4c:40:f4:90:09:
09:ea:2c:5a:71:6f:1c:1c:cd:a1:5d:a9:38:b5:2e:
37:e9:d3:ed:dc:6d:11:4f:2e:ca:c7:aa:06:9c:56:
7d:91:b5:df:5d:4b:e5:37:8b:e9:d3:e6:21:f6:10:
0b:c0:c4:6e:3a:59:2b:68:9b:4f:fc:7e:24:96:5b:
84:05:f3:51:1a:67:e0:f2:4b:83:18:62:c3:61:51:
d3:1d:39:76:a3:d4:f3:f4:b3:78:34:53:95:1a:a4:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:3E:FD:A2:4B:AA:4A:E1:68:31:B9:B4:ED:CC:73:FD:3D:F4:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OX8-_aJLqkrhaDG5tO3Mc_099Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a4:b1:05:a3:40:56:b2:c1:c6:b2:7e:73:dc:5c:08:6c:24:
1f:7c:a3:d1:de:e9:58:f8:e5:19:fd:2c:04:fd:7d:d1:9d:ea:
77:ca:7c:63:ca:22:00:5a:04:06:3e:0d:e3:dd:b0:94:c3:2d:
bd:8a:63:b0:a7:d7:1b:ea:b8:bc:38:24:69:ab:a7:3f:ed:2c:
18:7b:22:73:5a:5e:51:e8:45:80:c0:fb:cf:f1:20:ef:54:cb:
e6:7d:59:fb:a2:76:50:2d:72:08:4c:55:c4:4b:11:8f:1e:ae:
e5:59:df:f9:67:4d:bc:0c:1a:2e:bc:7b:f4:ad:74:12:95:1e:
be:57:6e:2d:dd:fc:f8:36:01:b3:76:4d:e8:c3:45:1f:bc:27:
1c:bb:c8:e0:61:91:e9:c6:1f:46:d5:5c:ff:03:fb:dd:cf:b8:
6b:77:09:55:56:c1:65:62:0b:cf:69:10:1c:48:d0:c1:00:09:
0f:8a:00:15:99:b0:94:8a:dd:be:91:74:49:03:b2:71:1c:22:
c3:1c:11:e0:15:be:ce:a6:d1:0a:8c:d5:c1:49:80:84:a8:df:
d2:06:0d:30:87:5c:90:c5:b5:fe:93:b4:ae:24:2b:70:49:77:
d1:28:85:6c:2b:5c:f0:e4:23:ad:c4:f0:be:2d:ac:63:dc:af:
2e:26:52:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxjEPpKVDdA1fRZKD/uhWjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEzMTIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTdmM2VmZGEyNGJhYTRhZTE2ODMxYjliNGVkY2M3M2ZkM2RmNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKrEuhyTNDjGKIw6R5s5yfapNcwl
Lz6Pk7gAlRAuLyWMoxtcIn3OQKzR/Zo0a/XlPpC3xXUa9hiKtLDykERx/qLDevIn
yFH7iN53qQ6LVEKihe0uPeXNH5f4sUzPh6K0l2RbbNdib8Qa7YSowaa2pQRMYcgz
K7bGNOFABqDltiM5IBj1USRabWmpkoi6FAmXQAaYqo8sD+p29iq5pwzHTED0kAkJ
6ixacW8cHM2hXak4tS436dPt3G0RTy7Kx6oGnFZ9kbXfXUvlN4vp0+Yh9hALwMRu
OlkraJtP/H4klluEBfNRGmfg8kuDGGLDYVHTHTl2o9Tz9LN4NFOVGqSBlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDl/Pv2iS6pK4WgxubTtzHP9PfQoMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvT1g4LV9hSkxxa3JoYURHNXRPM01jXzA5OUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEyksQWjQFaywcayfnPc
XAhsJB98o9He6Vj45Rn9LAT9fdGd6nfKfGPKIgBaBAY+DePdsJTDLb2KY7Cn1xvq
uLw4JGmrpz/tLBh7InNaXlHoRYDA+8/xIO9Uy+Z9WfuidlAtcghMVcRLEY8eruVZ
3/lnTbwMGi68e/StdBKVHr5Xbi3d/Pg2AbN2TejDRR+8Jxy7yOBhkenGH0bVXP8D
+93PuGt3CVVWwWViC89pEBxI0MEACQ+KABWZsJSK3b6RdEkDsnEcIsMcEeAVvs6m
0QqM1cFJgISo39IGDTCHXJDFtf6TtK4kK3BJd9EohWwrXPDkI63E8L4trGPcry4m
Uss=
-----END CERTIFICATE-----
Generated at Sun May 11 17:02:51 2025 by rpki-client