Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h6L4fwyGb4G_ySV4j45YM9x0w7k.roa
File: h6L4fwyGb4G_ySV4j45YM9x0w7k.roa (raw, json)
Hash identifier: ajjGP76B/Tc4cAlA8WKQDB4wwhnYHNpkAeGRBPCkCQg=
Subject key identifier: 87:A2:F8:7F:0C:86:6F:81:BF:C9:25:78:8F:8E:58:33:DC:74:C3:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B28481AA60AC78E530A608B62591553C7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h6L4fwyGb4G_ySV4j45YM9x0w7k.roa
Signing time: Fri 13 Oct 2023 09:04:55 +0000
ROA not before: Fri 13 Oct 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:2847:e684/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:48:1a:a6:0a:c7:8e:53:0a:60:8b:62:59:15:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87a2f87f0c866f81bfc925788f8e5833dc74c3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:51:6e:b9:10:85:63:cb:93:98:40:f8:4d:
1a:04:64:51:d4:02:38:ce:62:99:20:39:09:79:bf:
5e:33:c4:6c:b0:fa:20:4b:b4:39:4a:5b:9e:58:f5:
74:7d:cb:4f:2b:98:40:f4:a4:84:48:fa:b0:a2:8b:
e7:ed:ec:73:44:28:a7:af:74:03:c2:ce:ec:5e:b9:
f1:33:38:26:7c:34:f6:16:be:dd:22:e3:55:4a:77:
05:9c:9d:31:0c:ec:12:16:62:39:f9:da:8a:95:23:
ec:3d:b4:3d:fa:5d:6d:f3:58:f4:4e:a3:db:a0:39:
b3:a6:cd:8b:11:72:66:c6:5f:91:83:7f:d8:ad:01:
65:88:d0:2f:2d:95:0d:4a:22:48:79:e8:3e:9d:77:
86:ef:eb:bf:a8:c2:5b:d6:1f:34:4b:e6:b5:c3:64:
f0:83:9a:43:bf:c4:94:05:1b:b2:ba:5f:21:b3:2f:
4f:f5:3c:d4:e0:ab:10:2a:98:87:ae:f2:6c:c3:ff:
07:04:9b:c6:43:14:1b:07:c9:cf:45:7c:46:d3:87:
02:0d:49:57:2d:dd:c1:86:d6:88:65:bd:5c:d2:8a:
dc:3c:e6:a0:00:64:73:2d:01:81:af:be:33:2b:af:
05:5c:2a:bf:19:b8:87:d6:45:9e:0b:f6:54:db:74:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A2:F8:7F:0C:86:6F:81:BF:C9:25:78:8F:8E:58:33:DC:74:C3:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h6L4fwyGb4G_ySV4j45YM9x0w7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:82:13:19:68:a3:b7:95:15:01:65:1f:7a:0a:49:b9:f6:e6:
3e:55:d8:aa:7b:1b:e1:5a:d1:12:07:0a:46:4d:d6:0a:eb:6a:
ec:78:31:f9:53:79:b6:32:6c:30:a5:54:dd:a1:ee:25:ae:6d:
59:d2:68:97:08:a4:aa:1e:a2:1d:b1:51:65:02:10:01:a5:d9:
3f:a4:a2:1b:33:bb:25:3e:ad:a0:34:3f:e7:63:2b:58:4c:c2:
a0:9c:95:fd:c9:11:9e:da:98:38:48:d6:8e:73:32:a3:73:43:
1d:98:df:5f:7e:8c:09:d9:5f:46:41:b4:a9:7e:7e:f7:af:55:
81:f3:fa:e6:46:3d:a6:63:b1:c8:af:56:74:9e:df:e7:cc:83:
20:1f:e8:1e:e0:0d:5d:08:16:00:18:ab:16:ed:82:f0:9a:e6:
92:a0:bf:b6:9e:4c:61:38:1e:5c:75:e1:85:74:9c:79:46:20:
7c:17:91:8f:4e:82:d9:ec:83:ba:2a:31:6a:ea:36:be:3c:0a:
fd:5d:54:5b:8e:07:5f:b0:04:a2:cc:f5:8d:77:c0:0e:e3:22:
bf:a5:6d:13:1a:8c:2c:6d:d4:26:91:58:61:e3:77:f3:a1:48:
45:3a:9a:49:dd:7e:06:2d:4b:5e:ee:c1:b7:27:3e:f0:dc:3a:
62:62:5b:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsoSBqmCseOUwpgi2JZFVPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEzMDkwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2EyZjg3ZjBjODY2ZjgxYmZjOTI1Nzg4ZjhlNTgzM2RjNzRjM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1RbrkQhWPLk5hA+E0aBGRR1AI4
zmKZIDkJeb9eM8RssPogS7Q5SlueWPV0fctPK5hA9KSESPqwoovn7exzRCinr3QD
ws7sXrnxMzgmfDT2Fr7dIuNVSncFnJ0xDOwSFmI5+dqKlSPsPbQ9+l1t81j0TqPb
oDmzps2LEXJmxl+Rg3/YrQFliNAvLZUNSiJIeeg+nXeG7+u/qMJb1h80S+a1w2Tw
g5pDv8SUBRuyul8hsy9P9TzU4KsQKpiHrvJsw/8HBJvGQxQbB8nPRXxG04cCDUlX
Ld3BhtaIZb1c0orcPOagAGRzLQGBr74zK68FXCq/GbiH1kWeC/ZU23RBnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIei+H8Mhm+Bv8kleI+OWDPcdMO5MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaDZMNGZ3eUdiNEdfeVNWNGo0NVlNOXgwdzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABqCExloo7eVFQFlH3oK
Sbn25j5V2Kp7G+Fa0RIHCkZN1grraux4MflTebYybDClVN2h7iWubVnSaJcIpKoe
oh2xUWUCEAGl2T+kohszuyU+raA0P+djK1hMwqCclf3JEZ7amDhI1o5zMqNzQx2Y
319+jAnZX0ZBtKl+fvevVYHz+uZGPaZjscivVnSe3+fMgyAf6B7gDV0IFgAYqxbt
gvCa5pKgv7aeTGE4Hlx14YV0nHlGIHwXkY9Ogtnsg7oqMWrqNr48Cv1dVFuOB1+w
BKLM9Y13wA7jIr+lbRMajCxt1CaRWGHjd/OhSEU6mkndfgYtS17uwbcnPvDcOmJi
Wws=
-----END CERTIFICATE-----
Generated at Wed May 14 10:16:12 2025 by rpki-client