Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VjiDGoj8yv6PDweNvNIF0jZZ3eo.roa
File: VjiDGoj8yv6PDweNvNIF0jZZ3eo.roa (raw, json)
Hash identifier: 0N3WxMO7PkDp/O1ibpyN06djg6/POzbDe0NqeC9fHyo=
Subject key identifier: 56:38:83:1A:88:FC:CA:FE:8F:0F:07:8D:BC:D2:05:D2:36:59:DD:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF72D6BABEBA88B2FF260AF72A6A622BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VjiDGoj8yv6PDweNvNIF0jZZ3eo.roa
Signing time: Tue 03 Oct 2023 20:14:23 +0000
ROA not before: Tue 03 Oct 2023 20:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f7:2d:6b:ab:eb:a8:8b:2f:f2:60:af:72:a6:a6:22:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 20:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5638831a88fccafe8f0f078dbcd205d23659ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:71:24:13:e2:2a:b2:f4:20:e5:e9:a4:47:
82:2d:82:5a:ce:fc:db:f5:8b:8b:d6:47:eb:f9:ee:
ad:4f:68:7c:fd:06:64:6a:87:07:bd:97:70:69:83:
82:e2:b1:cc:bf:95:d5:0b:89:5c:1f:89:78:fa:f9:
7f:f4:d1:07:65:02:2f:93:19:86:9a:01:d6:89:2f:
2d:49:10:7e:e6:0f:a4:5d:8a:2b:39:4e:e7:23:07:
ec:23:aa:e8:88:89:10:e4:18:ff:a4:b5:d1:58:74:
71:8a:96:75:ae:94:17:71:a9:33:8f:11:fe:40:12:
77:de:d0:2b:92:31:55:eb:ce:cc:b6:81:f2:de:9c:
00:14:97:65:46:fc:c6:f9:e1:79:bd:89:a1:a1:5f:
0f:de:8c:83:10:93:19:84:3c:8d:d3:14:df:d9:b8:
5d:94:c5:a6:d7:6d:4e:fd:ff:79:36:1a:ff:cc:e3:
99:52:ee:cc:22:82:b7:cf:17:78:27:2c:3c:10:a6:
82:5e:69:ca:a8:e7:66:80:62:c5:7e:0d:e9:e9:00:
b6:14:97:cf:67:53:01:65:19:94:df:36:04:65:e7:
fe:51:8d:77:c5:35:ce:10:c5:85:65:e4:b7:1a:1e:
e5:a4:f2:29:35:24:fa:fe:91:f0:a7:a1:b4:c3:a2:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:83:1A:88:FC:CA:FE:8F:0F:07:8D:BC:D2:05:D2:36:59:DD:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VjiDGoj8yv6PDweNvNIF0jZZ3eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:a3:a0:b4:88:63:44:44:c5:11:70:4a:a7:c7:05:54:14:e6:
b6:01:df:d8:84:5e:6e:5e:f0:c4:c1:d3:7d:1c:d5:72:2a:12:
17:7a:f3:b3:5a:c6:84:e1:b4:a1:7d:c5:d8:16:7d:26:48:b8:
21:67:e5:bb:d6:aa:db:66:22:8e:57:02:e8:71:04:84:38:ff:
db:96:02:b4:6c:9a:19:ce:d9:e1:12:a6:19:82:04:c6:fe:43:
94:fb:4f:87:ab:0d:72:60:6e:98:b9:73:76:65:86:6b:a7:cb:
52:19:b8:68:7a:ed:6c:47:17:55:e0:cc:3d:34:24:5e:c8:55:
79:55:81:07:17:64:b7:20:d0:49:83:4d:10:7f:36:b0:a8:27:
7c:6e:e5:ed:a4:f7:a2:21:6b:7e:b4:38:37:e1:54:98:46:fc:
7b:b8:2f:62:08:1e:06:0f:81:40:33:6b:ee:a4:a6:26:da:49:
dc:60:18:8d:86:2f:4b:24:19:80:72:a5:14:c7:e5:3a:9a:e5:
a4:85:a5:1e:0b:23:9b:da:c0:73:91:32:f5:5f:81:56:79:7e:
1f:64:c8:f2:2a:74:fb:9b:94:5c:6e:10:35:21:a9:d0:88:b4:
6d:0d:48:fb:c6:74:0c:f2:7a:08:e0:df:6e:46:75:0a:40:a5:
ab:ed:d8:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr3LWur66iLL/Jgr3KmpiK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAzMjAxNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjM4ODMxYTg4ZmNjYWZlOGYwZjA3OGRiY2QyMDVkMjM2NTlkZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim5xJBPiKrL0IOXppEeCLYJazvzb
9YuL1kfr+e6tT2h8/QZkaocHvZdwaYOC4rHMv5XVC4lcH4l4+vl/9NEHZQIvkxmG
mgHWiS8tSRB+5g+kXYorOU7nIwfsI6roiIkQ5Bj/pLXRWHRxipZ1rpQXcakzjxH+
QBJ33tArkjFV687MtoHy3pwAFJdlRvzG+eF5vYmhoV8P3oyDEJMZhDyN0xTf2bhd
lMWm121O/f95Nhr/zOOZUu7MIoK3zxd4Jyw8EKaCXmnKqOdmgGLFfg3p6QC2FJfP
Z1MBZRmU3zYEZef+UY13xTXOEMWFZeS3Gh7lpPIpNST6/pHwp6G0w6KFgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFY4gxqI/Mr+jw8HjbzSBdI2Wd3qMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVmppREdvajh5djZQRHdlTnZOSUYwalpaM2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIKjoLSIY0RExRFwSqfH
BVQU5rYB39iEXm5e8MTB030c1XIqEhd687NaxoThtKF9xdgWfSZIuCFn5bvWqttm
Io5XAuhxBIQ4/9uWArRsmhnO2eESphmCBMb+Q5T7T4erDXJgbpi5c3Zlhmuny1IZ
uGh67WxHF1XgzD00JF7IVXlVgQcXZLcg0EmDTRB/NrCoJ3xu5e2k96Iha360ODfh
VJhG/Hu4L2IIHgYPgUAza+6kpibaSdxgGI2GL0skGYBypRTH5Tqa5aSFpR4LI5va
wHORMvVfgVZ5fh9kyPIqdPublFxuEDUhqdCItG0NSPvGdAzyegjg325GdQpApavt
2P4=
-----END CERTIFICATE-----
Generated at Sun May 11 19:22:18 2025 by rpki-client