Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V_mEf0UblQgde7EW4RuBP7Kcs8I.roa
File: V_mEf0UblQgde7EW4RuBP7Kcs8I.roa (raw, json)
Hash identifier: 31uJU3jz+QVnrB4U/OrMHlHBzo7sGADCuMHBnDWZLXM=
Subject key identifier: 57:F9:84:7F:45:1B:95:08:1D:7B:B1:16:E1:1B:81:3F:B2:9C:B3:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B53424D09C153D37AB887920728394783
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V_mEf0UblQgde7EW4RuBP7Kcs8I.roa
Signing time: Sat 21 Oct 2023 17:22:15 +0000
ROA not before: Sat 21 Oct 2023 17:22:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:42:4d:09:c1:53:d3:7a:b8:87:92:07:28:39:47:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 17:22:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57f9847f451b95081d7bb116e11b813fb29cb3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:47:56:63:8a:9e:3d:52:19:92:66:57:70:
4f:f1:40:73:c6:de:fe:b8:4f:0a:4b:f8:b6:2c:d6:
1e:a0:9f:17:8e:01:cb:55:76:18:68:ba:e4:e4:cb:
c2:f2:75:d1:5b:85:e5:0b:63:02:74:e9:21:68:ea:
8b:77:ac:08:04:7a:4e:50:4a:4d:33:0c:a8:f2:08:
7d:13:72:63:97:9f:fb:be:8a:fd:5c:91:d1:7e:48:
88:f7:7b:37:e2:59:97:61:67:cf:d1:ed:82:23:25:
c2:be:f9:7a:2e:5e:fa:bb:84:bd:11:c4:75:f9:07:
bb:5c:38:9d:e1:fd:ea:a4:ca:6d:77:5f:b4:ed:14:
f9:9c:93:06:89:9d:89:cd:af:05:3b:23:dc:2a:18:
14:19:fb:2f:2c:cd:60:3d:82:36:e5:d0:ae:ab:8f:
45:bf:e6:a7:fe:45:0c:fe:7b:eb:22:54:0e:10:09:
0d:00:38:a2:08:23:11:f4:b6:ed:4e:8c:56:eb:42:
3d:66:66:cb:d8:8b:5b:74:bb:5e:84:bf:f2:00:6f:
2c:53:04:24:b2:c9:c7:13:1e:e1:a1:4b:19:04:a7:
f7:7b:18:82:1d:78:b4:c1:bb:6d:f5:a9:86:bc:7f:
98:4c:bd:2d:ea:d5:73:71:58:db:76:ae:a1:ba:61:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:84:7F:45:1B:95:08:1D:7B:B1:16:E1:1B:81:3F:B2:9C:B3:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V_mEf0UblQgde7EW4RuBP7Kcs8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:60:0c:42:7a:d1:24:5f:7a:79:dd:fe:d5:d9:2d:a6:7f:ef:
30:30:31:50:9b:9f:8d:9a:26:cc:08:2e:75:bb:32:bc:6d:a3:
c9:bb:43:e8:20:1c:32:3c:8f:6b:31:97:53:f9:32:c8:13:1b:
d6:81:e4:45:c8:c4:07:ab:2b:64:95:a8:40:be:09:c2:5f:fa:
62:83:62:52:ab:57:61:3c:aa:53:45:38:52:c4:ec:40:5f:48:
88:17:4f:6e:b9:af:1d:57:56:59:49:4a:2f:c3:d9:8b:fe:af:
3d:8b:4e:7c:28:d0:19:6b:07:f6:3f:e2:ab:4e:a3:0f:3a:59:
76:c8:42:83:53:f7:2a:f5:ea:14:3e:db:06:bf:5c:63:1b:e4:
67:94:6c:38:d0:be:04:ed:be:5c:99:95:19:c2:0f:6f:93:db:
ae:57:9f:4d:e3:0a:a0:b3:f4:8d:af:a1:50:68:98:c9:98:7e:
88:ea:51:a0:6d:13:d1:5a:ba:9f:5a:42:6c:a5:6a:a4:58:29:
b3:fe:b5:a7:35:de:5a:fa:c5:bd:9c:f6:21:b3:82:25:c4:e1:
7f:58:bb:cb:77:3f:e1:6e:af:c5:6d:dc:ce:e5:70:81:5f:3d:
66:fd:f0:78:ad:e4:61:45:70:e2:d5:4d:f5:36:02:48:8a:09:
67:e7:46:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtTQk0JwVPTeriHkgcoOUeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIxMTcyMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Y5ODQ3ZjQ1MWI5NTA4MWQ3YmIxMTZlMTFiODEzZmIyOWNiM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIRHVmOKnj1SGZJmV3BP8UBzxt7+
uE8KS/i2LNYeoJ8XjgHLVXYYaLrk5MvC8nXRW4XlC2MCdOkhaOqLd6wIBHpOUEpN
Mwyo8gh9E3Jjl5/7vor9XJHRfkiI93s34lmXYWfP0e2CIyXCvvl6Ll76u4S9EcR1
+Qe7XDid4f3qpMptd1+07RT5nJMGiZ2Jza8FOyPcKhgUGfsvLM1gPYI25dCuq49F
v+an/kUM/nvrIlQOEAkNADiiCCMR9LbtToxW60I9ZmbL2ItbdLtehL/yAG8sUwQk
ssnHEx7hoUsZBKf3exiCHXi0wbtt9amGvH+YTL0t6tVzcVjbdq6humFI4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFf5hH9FG5UIHXuxFuEbgT+ynLPCMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVl9tRWYwVWJsUWdkZTdFVzRSdUJQN0tjczhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ9gDEJ60SRfennd/tXZ
LaZ/7zAwMVCbn42aJswILnW7Mrxto8m7Q+ggHDI8j2sxl1P5MsgTG9aB5EXIxAer
K2SVqEC+CcJf+mKDYlKrV2E8qlNFOFLE7EBfSIgXT265rx1XVllJSi/D2Yv+rz2L
Tnwo0BlrB/Y/4qtOow86WXbIQoNT9yr16hQ+2wa/XGMb5GeUbDjQvgTtvlyZlRnC
D2+T265Xn03jCqCz9I2voVBomMmYfojqUaBtE9Faup9aQmylaqRYKbP+tac13lr6
xb2c9iGzgiXE4X9Yu8t3P+Fur8Vt3M7lcIFfPWb98Hit5GFFcOLVTfU2AkiKCWfn
RqA=
-----END CERTIFICATE-----
Generated at Sat May 10 11:33:11 2025 by rpki-client