Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT26vNVoVFZBQlBs8WERrQ_ELr8.roa
File: kT26vNVoVFZBQlBs8WERrQ_ELr8.roa (raw, json)
Hash identifier: 7LsZ7/sbhfhzl5TmcZID34RriJKnioH9nk5o4MbgFe8=
Subject key identifier: 91:3D:BA:BC:D5:68:54:56:41:42:50:6C:F1:61:11:AD:0F:C4:2E:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB0FC2839ED02A02FABA69BF1C60BE573
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT26vNVoVFZBQlBs8WERrQ_ELr8.roa
Signing time: Wed 08 Nov 2023 22:09:57 +0000
ROA not before: Wed 08 Nov 2023 22:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:fc:28:39:ed:02:a0:2f:ab:a6:9b:f1:c6:0b:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 22:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913dbabcd56854564142506cf16111ad0fc42ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:34:6f:ac:3c:09:b8:1e:2a:76:72:d5:46:
59:77:eb:f4:37:18:50:17:b3:b5:eb:09:2b:9c:27:
84:28:28:9e:87:ce:41:2c:32:a8:49:8c:b5:80:4b:
85:07:a3:1d:fb:aa:47:7d:84:a3:52:27:5b:d2:7e:
7f:2e:6b:9e:1f:3d:59:9d:7c:82:4b:7b:74:3b:15:
12:3d:8e:f7:f4:55:16:be:c1:40:37:81:e8:5a:e2:
85:53:87:b3:e8:99:59:6e:70:64:bd:9b:5b:f5:75:
4b:cf:85:bd:94:04:c3:0c:aa:a2:cd:79:14:9b:fe:
50:eb:7b:95:32:d6:22:cd:63:52:ea:22:bf:5b:aa:
9d:ef:25:e3:eb:c4:41:17:e2:80:f5:de:bb:41:3c:
90:59:0a:f5:10:d9:56:71:0a:fc:fe:5e:e2:59:1b:
96:a5:1b:ea:8b:3e:74:e4:95:6d:2e:e4:cd:90:a3:
09:08:73:d5:f6:ba:d9:0b:de:12:2a:68:2e:3b:c2:
93:45:61:54:fa:73:d9:8c:d0:d9:8f:20:10:67:5d:
5b:9f:bb:23:af:e2:67:1e:0f:f6:64:b2:b7:c5:e0:
28:41:bd:e7:a9:2b:de:cc:c8:3f:c7:9f:23:1b:98:
1c:54:d5:fa:d4:98:72:1f:da:a6:11:d5:c7:57:b2:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3D:BA:BC:D5:68:54:56:41:42:50:6C:F1:61:11:AD:0F:C4:2E:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT26vNVoVFZBQlBs8WERrQ_ELr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:d9:59:a2:88:51:a5:af:9b:07:b8:9e:7c:b2:18:6c:2b:ee:
4e:72:80:b1:df:c0:55:cd:24:95:b5:e5:d0:43:d5:90:f3:6b:
12:df:ab:d3:a6:c4:0c:d8:89:c9:08:f7:f6:2e:45:f4:5a:de:
73:b4:cb:73:8b:66:19:dc:5a:2e:57:a3:42:f3:11:ec:56:d2:
c8:3a:82:17:89:e9:7d:2d:df:8b:97:58:c7:be:4b:cc:51:b4:
9f:79:33:80:63:85:66:4f:26:f4:48:53:d3:66:be:14:05:7d:
34:c9:04:b6:7a:27:93:9c:89:3a:42:fa:6f:42:7f:a1:2a:6a:
22:4f:df:1e:52:e4:99:68:06:73:47:c2:64:4d:8f:1c:a1:42:
9e:d2:a0:34:d4:bd:37:38:f1:a4:f9:60:73:98:73:96:5d:52:
3f:d7:94:6d:f3:13:80:e2:fa:63:34:7f:5c:c1:4f:9e:0a:15:
e8:d8:19:ad:84:09:a9:cc:d5:68:4c:5e:3c:3c:61:4e:1a:f0:
d0:0f:1d:f6:0f:7b:d8:b0:f2:98:3b:60:92:2b:59:2b:a6:88:
04:f5:fd:09:c7:a6:cc:5b:d5:5a:85:29:6f:73:e3:8b:93:b8:
81:f5:1d:1e:f8:5a:89:d8:dd:a0:4a:c0:09:f7:45:6a:85:13:
33:d4:d6:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuw/Cg57QKgL6umm/HGC+VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MjIwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTNkYmFiY2Q1Njg1NDU2NDE0MjUwNmNmMTYxMTFhZDBmYzQyZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRU0b6w8CbgeKnZy1UZZd+v0NxhQ
F7O16wkrnCeEKCieh85BLDKoSYy1gEuFB6Md+6pHfYSjUidb0n5/LmueHz1ZnXyC
S3t0OxUSPY739FUWvsFAN4HoWuKFU4ez6JlZbnBkvZtb9XVLz4W9lATDDKqizXkU
m/5Q63uVMtYizWNS6iK/W6qd7yXj68RBF+KA9d67QTyQWQr1ENlWcQr8/l7iWRuW
pRvqiz505JVtLuTNkKMJCHPV9rrZC94SKmguO8KTRWFU+nPZjNDZjyAQZ11bn7sj
r+JnHg/2ZLK3xeAoQb3nqSvezMg/x58jG5gcVNX61JhyH9qmEdXHV7LkUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJE9urzVaFRWQUJQbPFhEa0PxC6/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEva1QyNnZOVm9WRlpCUWxCczhXRVJyUV9FTHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHjZWaKIUaWvmwe4nnyy
GGwr7k5ygLHfwFXNJJW15dBD1ZDzaxLfq9OmxAzYickI9/YuRfRa3nO0y3OLZhnc
Wi5Xo0LzEexW0sg6gheJ6X0t34uXWMe+S8xRtJ95M4BjhWZPJvRIU9NmvhQFfTTJ
BLZ6J5OciTpC+m9Cf6EqaiJP3x5S5JloBnNHwmRNjxyhQp7SoDTUvTc48aT5YHOY
c5ZdUj/XlG3zE4Di+mM0f1zBT54KFejYGa2ECanM1WhMXjw8YU4a8NAPHfYPe9iw
8pg7YJIrWSumiAT1/QnHpsxb1VqFKW9z44uTuIH1HR74WonY3aBKwAn3RWqFEzPU
1kQ=
-----END CERTIFICATE-----
Generated at Mon May 12 19:27:17 2025 by rpki-client