Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwH5NcuTz25HkS2Veo3IfyQ86qQ.roa
File: fwH5NcuTz25HkS2Veo3IfyQ86qQ.roa (raw, json)
Hash identifier: EA0M1PJL1Douv3Mx8nmhTG6SXHFQwqk0ivBSwZpEvmU=
Subject key identifier: 7F:01:F9:35:CB:93:CF:6E:47:91:2D:95:7A:8D:C8:7F:24:3C:EA:A4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1D95C26616D5A73D613965F53FC62997
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwH5NcuTz25HkS2Veo3IfyQ86qQ.roa
Signing time: Thu 30 Nov 2023 00:16:42 +0000
ROA not before: Thu 30 Nov 2023 00:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:95:c2:66:16:d5:a7:3d:61:39:65:f5:3f:c6:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 00:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f01f935cb93cf6e47912d957a8dc87f243ceaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:ed:35:a3:2f:0d:5c:c6:2e:80:71:f6:67:
34:8c:aa:30:2b:b4:c8:fb:58:43:94:de:2a:ea:3d:
79:2b:ba:c9:f8:8c:07:c5:63:94:50:9b:7d:8e:29:
7c:ca:16:f8:d5:c2:ab:b8:0a:68:0b:aa:03:c9:5d:
a0:5c:b3:fe:01:78:58:ec:ca:57:14:e0:a1:2f:82:
28:af:00:cb:ad:35:b7:dc:59:58:ec:e7:23:f6:8f:
ce:28:8b:13:7b:43:32:1d:32:b1:ce:54:4f:d1:e7:
1f:18:80:0d:a1:c8:02:ed:4d:e0:7a:f4:91:50:14:
dd:7d:c7:aa:78:17:41:77:7e:15:7c:e0:51:2b:bc:
60:c4:37:dc:fc:60:c3:38:6d:8d:f4:4e:3d:13:46:
4a:77:34:b2:ff:d8:d6:fb:a8:0e:51:7f:e4:91:b3:
fe:e5:4d:60:42:52:c6:a5:9a:74:83:9a:59:04:24:
7e:47:69:55:76:a1:ff:83:73:19:30:44:86:4c:35:
66:6a:0b:01:d5:b5:cf:a1:dc:23:39:6b:5d:c4:25:
83:10:fe:3c:a6:e0:f4:1b:e3:a9:58:11:95:f6:a3:
79:7d:f4:4b:ee:9e:f8:50:3e:1a:5d:77:23:60:77:
ff:c4:3c:0a:93:76:16:67:e1:ad:8a:dc:63:4d:0d:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:F9:35:CB:93:CF:6E:47:91:2D:95:7A:8D:C8:7F:24:3C:EA:A4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwH5NcuTz25HkS2Veo3IfyQ86qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:7a:91:4f:e2:ad:69:2d:a8:20:d7:c9:79:5b:a2:ac:e9:fe:
9c:e8:00:34:05:6d:b6:ce:b7:47:5f:5c:c4:1c:44:35:bd:d4:
31:e9:81:c4:86:5f:0b:39:cd:de:e0:a3:a5:8e:c3:cb:47:8e:
49:14:9a:14:8e:b7:a2:ae:bd:19:6d:31:d8:0b:58:8e:e0:a0:
a1:89:50:6f:19:54:81:80:7a:5b:af:6c:74:98:36:0f:84:48:
e0:32:e0:1b:e3:aa:89:20:68:fe:66:dc:50:4c:80:d1:ad:5a:
0a:45:42:e1:c2:be:de:ed:59:19:68:f1:41:68:17:a6:8d:2a:
a9:03:e1:db:c3:15:1e:47:b3:86:43:62:a2:98:6d:cb:51:c6:
4c:91:e4:21:ab:96:12:f6:bd:83:8a:ff:fc:05:fe:59:1e:97:
ac:a4:bd:6a:c9:c0:7a:1c:c6:41:59:22:f9:2d:2d:94:66:e7:
36:0a:2a:1e:6d:0d:66:29:00:70:28:4e:28:e2:1f:16:d2:65:
8e:99:8e:0b:ab:d8:eb:1d:85:28:7a:64:13:c1:a3:97:81:8f:
2e:63:37:2f:b7:95:70:b1:a5:c8:d7:dd:da:80:03:cc:7c:63:
39:6e:37:29:db:34:be:1a:f7:47:de:3a:01:77:b8:41:1e:5d:
fe:7f:85:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwdlcJmFtWnPWE5ZfU/ximXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTMwMDAxNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjAxZjkzNWNiOTNjZjZlNDc5MTJkOTU3YThkYzg3ZjI0M2NlYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiHtNaMvDVzGLoBx9mc0jKowK7TI
+1hDlN4q6j15K7rJ+IwHxWOUUJt9jil8yhb41cKruApoC6oDyV2gXLP+AXhY7MpX
FOChL4IorwDLrTW33FlY7Ocj9o/OKIsTe0MyHTKxzlRP0ecfGIANocgC7U3gevSR
UBTdfceqeBdBd34VfOBRK7xgxDfc/GDDOG2N9E49E0ZKdzSy/9jW+6gOUX/kkbP+
5U1gQlLGpZp0g5pZBCR+R2lVdqH/g3MZMESGTDVmagsB1bXPodwjOWtdxCWDEP48
puD0G+OpWBGV9qN5ffRL7p74UD4aXXcjYHf/xDwKk3YWZ+GtitxjTQ2IgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH8B+TXLk89uR5EtlXqNyH8kPOqkMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZndINU5jdVR6MjVIa1MyVmVvM0lmeVE4NnFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA96kU/irWktqCDXyXlb
oqzp/pzoADQFbbbOt0dfXMQcRDW91DHpgcSGXws5zd7go6WOw8tHjkkUmhSOt6Ku
vRltMdgLWI7goKGJUG8ZVIGAeluvbHSYNg+ESOAy4BvjqokgaP5m3FBMgNGtWgpF
QuHCvt7tWRlo8UFoF6aNKqkD4dvDFR5Hs4ZDYqKYbctRxkyR5CGrlhL2vYOK//wF
/lkel6ykvWrJwHocxkFZIvktLZRm5zYKKh5tDWYpAHAoTijiHxbSZY6Zjgur2Osd
hSh6ZBPBo5eBjy5jNy+3lXCxpcjX3dqAA8x8YzluNynbNL4a90feOgF3uEEeXf5/
hYQ=
-----END CERTIFICATE-----
Generated at Tue May 13 11:09:21 2025 by rpki-client