Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RqWbv4hFyrGubaqp9oW7v1LgYLM.roa
File: RqWbv4hFyrGubaqp9oW7v1LgYLM.roa (raw, json)
Hash identifier: jPit+YIiOgHSlO/wsO4eAbkMAXpsrVVbr+JT1iIhpjY=
Subject key identifier: 46:A5:9B:BF:88:45:CA:B1:AE:6D:AA:A9:F6:85:BB:BF:52:E0:60:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B98872670BCBDF6BC6A94426493E49178
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RqWbv4hFyrGubaqp9oW7v1LgYLM.roa
Signing time: Sat 04 Nov 2023 04:11:15 +0000
ROA not before: Sat 04 Nov 2023 04:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:87:26:70:bc:bd:f6:bc:6a:94:42:64:93:e4:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 04:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46a59bbf8845cab1ae6daaa9f685bbbf52e060b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:9a:cc:ab:4f:b3:7a:6d:06:ca:08:08:de:
e0:26:94:f2:88:98:c2:73:71:aa:1c:f7:b5:83:98:
ee:ea:e6:a9:23:40:14:e6:43:fc:97:31:f3:6e:24:
af:4f:7d:70:97:50:ec:5e:4f:55:2f:29:3b:e1:b2:
d7:9c:75:51:b1:82:6e:18:cb:2b:1c:89:c0:0e:8b:
47:e7:3b:1d:60:1f:42:39:59:f0:2a:88:3b:30:df:
95:61:ea:df:a4:fb:1a:ff:31:67:c3:b6:a4:9e:ce:
6a:70:7b:84:40:57:b8:a2:e4:6b:73:3e:32:ea:41:
f5:ca:27:80:fd:d8:a8:39:26:64:2b:3b:6a:a8:3a:
3a:ea:ce:7b:bd:bb:ab:a6:62:df:86:bc:a7:2e:28:
56:e8:0f:ed:8a:30:45:f1:65:1d:d0:5b:ff:15:8b:
7b:a4:a8:77:79:97:ac:b3:49:b8:6f:c1:9a:64:6e:
49:8f:a0:db:9d:28:4b:b7:b4:05:11:dc:63:bc:50:
db:ce:f3:84:a2:d2:1a:e8:69:3a:60:cb:a9:76:ca:
0c:c6:4f:06:79:1d:36:33:3e:ff:94:36:2b:22:22:
27:80:f4:2f:f4:b0:c5:7e:96:90:d1:f6:98:9e:be:
80:55:9b:61:7e:e3:ea:17:56:5b:32:a8:63:2b:62:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:9B:BF:88:45:CA:B1:AE:6D:AA:A9:F6:85:BB:BF:52:E0:60:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RqWbv4hFyrGubaqp9oW7v1LgYLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:46:62:7d:19:c2:53:53:82:a8:6c:ec:33:3f:cb:f7:de:48:
53:fb:dc:bd:c5:1b:ad:e3:c0:5e:39:df:1f:b2:a2:60:0d:a5:
85:eb:05:8b:c2:36:5e:d9:61:fc:52:6c:50:25:f8:6a:f5:5e:
04:92:d1:6c:94:94:c7:14:92:b7:25:e0:a5:69:3d:54:7b:4c:
c0:9a:45:39:02:b1:9d:bf:15:7a:7d:fa:ff:1e:cc:fc:04:fd:
59:65:0b:ee:58:72:51:b4:38:5f:4e:d6:d3:45:8c:fd:35:d8:
b3:26:88:41:8a:50:15:87:f1:66:ea:7e:65:d0:a0:97:a1:41:
33:6a:a0:a0:7a:d2:57:22:4a:62:a6:50:da:a7:57:0f:9b:b4:
51:97:55:c8:24:d6:bf:f3:c5:92:e0:53:72:c2:98:29:df:b3:
11:cd:fb:07:8c:c9:ff:87:1e:cf:06:04:0e:5c:a3:a2:f2:bc:
aa:10:05:5a:bb:f1:53:33:64:33:e3:ca:47:55:1e:10:ce:40:
39:5b:d1:c8:96:3e:6d:2e:4f:d7:1d:ad:51:e6:46:6d:c1:67:
bb:64:b9:f0:7f:79:97:b6:8b:7e:f9:8c:c6:4e:be:5e:e4:2e:
f4:23:a9:58:a9:c5:90:b0:cc:ad:28:75:56:4e:b7:14:fc:1a:
e2:68:3b:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuYhyZwvL32vGqUQmST5JF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MDQxMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmE1OWJiZjg4NDVjYWIxYWU2ZGFhYTlmNjg1YmJiZjUyZTA2MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKeazKtPs3ptBsoICN7gJpTyiJjC
c3GqHPe1g5ju6uapI0AU5kP8lzHzbiSvT31wl1DsXk9VLyk74bLXnHVRsYJuGMsr
HInADotH5zsdYB9COVnwKog7MN+VYerfpPsa/zFnw7akns5qcHuEQFe4ouRrcz4y
6kH1yieA/dioOSZkKztqqDo66s57vburpmLfhrynLihW6A/tijBF8WUd0Fv/FYt7
pKh3eZess0m4b8GaZG5Jj6DbnShLt7QFEdxjvFDbzvOEotIa6Gk6YMupdsoMxk8G
eR02Mz7/lDYrIiIngPQv9LDFfpaQ0faYnr6AVZthfuPqF1ZbMqhjK2Jl5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEalm7+IRcqxrm2qqfaFu79S4GCzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUnFXYnY0aEZ5ckd1YmFxcDlvVzd2MUxnWUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAJGYn0ZwlNTgqhs7DM/
y/feSFP73L3FG63jwF453x+yomANpYXrBYvCNl7ZYfxSbFAl+Gr1XgSS0WyUlMcU
krcl4KVpPVR7TMCaRTkCsZ2/FXp9+v8ezPwE/VllC+5YclG0OF9O1tNFjP012LMm
iEGKUBWH8WbqfmXQoJehQTNqoKB60lciSmKmUNqnVw+btFGXVcgk1r/zxZLgU3LC
mCnfsxHN+weMyf+HHs8GBA5co6LyvKoQBVq78VMzZDPjykdVHhDOQDlb0ciWPm0u
T9cdrVHmRm3BZ7tkufB/eZe2i375jMZOvl7kLvQjqVipxZCwzK0odVZOtxT8GuJo
O7Y=
-----END CERTIFICATE-----
Generated at Sat May 10 12:18:02 2025 by rpki-client