Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QoWBfngr84ZLNHSFy3yUOmxyoS0.roa
File: QoWBfngr84ZLNHSFy3yUOmxyoS0.roa (raw, json)
Hash identifier: cwoCGgWQSczQNYKqHIFNTx7amqpM+z6TAia0rl/bTU0=
Subject key identifier: 42:85:81:7E:78:2B:F3:86:4B:34:74:85:CB:7C:94:3A:6C:72:A1:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEA0BC43AC66488865BF4911F804B0A8E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QoWBfngr84ZLNHSFy3yUOmxyoS0.roa
Signing time: Mon 20 Nov 2023 00:05:21 +0000
ROA not before: Mon 20 Nov 2023 00:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:ea0a:de6d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:0b:c4:3a:c6:64:88:86:5b:f4:91:1f:80:4b:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 00:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4285817e782bf3864b347485cb7c943a6c72a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:2a:73:51:90:f4:15:9e:60:56:1b:41:f1:
65:87:9e:0f:18:77:f0:f4:53:62:6b:f4:82:c7:e4:
ed:14:ab:39:60:55:46:c8:39:26:7a:36:66:37:21:
30:50:53:2d:96:08:4c:8c:26:10:60:f2:d1:48:ce:
0c:4c:32:33:65:e5:2f:0d:fb:4b:1a:1c:fc:ee:40:
18:ba:bf:9f:6e:14:88:8c:b3:4e:a1:3a:a9:5f:67:
f0:1e:37:e0:99:97:29:02:8c:03:25:ea:48:cf:89:
4e:dd:b8:53:97:33:57:2e:73:a5:d3:a4:6e:5b:1f:
98:7b:40:e7:2b:7e:16:9c:0f:78:a1:42:f7:e9:36:
d9:1b:ec:6b:86:e6:a5:a1:4f:de:2a:10:8f:83:53:
1c:e0:86:22:ec:3e:ec:7c:b3:e9:83:77:f7:3d:db:
21:07:1c:f3:e3:45:a0:50:66:b4:6c:0b:36:6d:6a:
56:87:51:54:c7:4b:b6:36:c8:03:ff:07:59:40:8e:
c1:e2:08:dd:87:a3:1f:86:6a:fb:b3:c3:51:d2:7d:
20:71:7a:00:3a:8b:57:f0:57:6b:02:3e:97:08:9e:
07:37:4d:44:48:73:61:c8:f9:4e:56:ee:70:88:8c:
27:25:d0:a7:82:6d:67:61:6d:21:f0:21:3e:20:80:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:85:81:7E:78:2B:F3:86:4B:34:74:85:CB:7C:94:3A:6C:72:A1:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QoWBfngr84ZLNHSFy3yUOmxyoS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:80:dd:68:0d:f0:02:68:74:9c:0d:ae:74:0c:97:92:b8:b2:
d9:d1:73:fa:d2:0b:94:42:f1:92:db:6e:fd:e9:43:89:16:df:
07:bc:6d:1a:c8:c0:a7:6f:6b:3a:3b:00:52:0c:54:cd:48:db:
41:29:d0:8a:d9:83:ff:dc:eb:ee:0c:36:93:9c:76:9c:05:c9:
a3:e8:a2:c9:c2:6d:42:0f:bc:7f:be:10:2d:93:41:9e:df:4a:
36:d0:f7:39:ab:fc:02:aa:ab:6e:0c:f7:be:82:b0:78:3d:64:
b2:81:81:70:fc:ed:23:b9:af:01:1e:9e:d2:76:55:a2:b1:14:
d8:27:a9:8b:23:91:90:6a:00:e5:52:13:1a:44:c0:1f:45:43:
cd:0a:8a:7b:ab:81:ea:8a:fc:25:c6:f9:cf:c4:77:22:11:9d:
fa:6b:68:f9:82:8d:89:b8:ec:b1:e8:73:39:e0:d5:df:45:3c:
1d:cb:ab:23:bb:fd:1e:d9:73:37:f2:c6:8e:68:0d:0f:cd:ce:
d3:b1:41:67:ea:b0:b6:69:fb:0f:6b:90:61:a8:16:ab:d9:d2:
5d:cb:85:37:87:56:06:ae:3e:0c:e4:34:28:b7:79:ba:cd:84:
8e:82:dc:97:b2:29:36:33:5a:06:23:7e:ab:ec:03:bf:d1:01:
dc:e6:c6:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvqC8Q6xmSIhlv0kR+ASwqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIwMDAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjg1ODE3ZTc4MmJmMzg2NGIzNDc0ODVjYjdjOTQzYTZjNzJhMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu24qc1GQ9BWeYFYbQfFlh54PGHfw
9FNia/SCx+TtFKs5YFVGyDkmejZmNyEwUFMtlghMjCYQYPLRSM4MTDIzZeUvDftL
Ghz87kAYur+fbhSIjLNOoTqpX2fwHjfgmZcpAowDJepIz4lO3bhTlzNXLnOl06Ru
Wx+Ye0DnK34WnA94oUL36TbZG+xrhualoU/eKhCPg1Mc4IYi7D7sfLPpg3f3Pdsh
Bxzz40WgUGa0bAs2bWpWh1FUx0u2NsgD/wdZQI7B4gjdh6Mfhmr7s8NR0n0gcXoA
OotX8FdrAj6XCJ4HN01ESHNhyPlOVu5wiIwnJdCngm1nYW0h8CE+IICaFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEKFgX54K/OGSzR0hct8lDpscqEtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUW9XQmZuZ3I4NFpMTkhTRnkzeVVPbXh5b1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJeA3WgN8AJodJwNrnQM
l5K4stnRc/rSC5RC8ZLbbv3pQ4kW3we8bRrIwKdvazo7AFIMVM1I20Ep0IrZg//c
6+4MNpOcdpwFyaPoosnCbUIPvH++EC2TQZ7fSjbQ9zmr/AKqq24M976CsHg9ZLKB
gXD87SO5rwEentJ2VaKxFNgnqYsjkZBqAOVSExpEwB9FQ80KinurgeqK/CXG+c/E
dyIRnfpraPmCjYm47LHoczng1d9FPB3LqyO7/R7Zczfyxo5oDQ/NztOxQWfqsLZp
+w9rkGGoFqvZ0l3LhTeHVgauPgzkNCi3ebrNhI6C3JeyKTYzWgYjfqvsA7/RAdzm
xmw=
-----END CERTIFICATE-----
Generated at Sat May 10 11:17:37 2025 by rpki-client