Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsTLqBiV4jyKsreMSOc9FMmh0dg.roa
File: lsTLqBiV4jyKsreMSOc9FMmh0dg.roa (raw, json)
Hash identifier: W3yaer79nPeNQWBvXdYEc6uNS5TqDaHW8yD1miRhuHU=
Subject key identifier: 96:C4:CB:A8:18:95:E2:3C:8A:B2:B7:8C:48:E7:3D:14:C9:A1:D1:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B40878A8BF7BD6B906B2E96DE94CF28EE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsTLqBiV4jyKsreMSOc9FMmh0dg.roa
Signing time: Wed 18 Oct 2023 02:05:06 +0000
ROA not before: Wed 18 Oct 2023 02:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:4086:b877/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:87:8a:8b:f7:bd:6b:90:6b:2e:96:de:94:cf:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 02:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c4cba81895e23c8ab2b78c48e73d14c9a1d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:12:1c:df:aa:a5:34:20:16:d4:1a:62:a3:
af:82:26:f3:8a:14:7a:39:dd:9b:d5:de:95:79:22:
b3:a5:39:04:fd:e2:6b:33:29:01:42:d2:89:bb:4d:
88:0b:68:6e:cc:e2:bc:e3:0e:86:44:f2:6c:74:1f:
31:fd:81:41:3f:f1:61:dc:b8:d8:e3:53:ae:1c:52:
8a:70:6e:ff:52:75:e0:40:0a:08:b1:9d:a4:21:7f:
f0:a7:16:2c:1c:1e:be:65:2d:e0:bc:9b:c8:95:6e:
47:7a:7b:26:2e:5a:0c:66:69:7c:1f:b3:96:2b:ce:
57:5f:56:7d:86:a2:91:44:e3:b7:64:32:25:9c:6a:
d7:8b:74:cb:8a:ea:9b:0c:96:26:b4:a8:b0:78:b6:
ab:f7:43:c1:ed:d7:9e:8b:63:73:83:4b:6f:54:7b:
a1:c3:1d:f0:99:a7:10:e3:3c:dd:22:eb:3d:d4:88:
10:eb:de:03:43:a5:a1:94:3d:ac:12:2f:f6:66:ae:
87:e2:1d:1a:03:4f:c4:ce:8f:45:d7:f4:46:1a:03:
99:74:d9:78:96:3b:3c:fc:38:34:f5:59:48:72:58:
74:1c:a9:6e:d2:09:99:f4:99:76:8d:8d:14:e9:0b:
d0:98:8d:37:ef:0a:f5:31:47:26:c3:2f:ba:bf:33:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:CB:A8:18:95:E2:3C:8A:B2:B7:8C:48:E7:3D:14:C9:A1:D1:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lsTLqBiV4jyKsreMSOc9FMmh0dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:95:ce:29:4c:c4:83:9a:44:73:e4:3e:0f:72:e3:fc:8b:bb:
3c:3d:02:34:6b:b9:8d:35:80:6c:56:d8:3d:64:8d:64:51:0b:
49:b1:5c:5b:aa:59:42:a5:cc:e0:99:7a:c9:19:2a:dd:cc:bc:
a5:11:c4:bf:11:d3:ce:45:ce:ce:35:c1:6a:3a:0b:7e:94:0e:
da:15:94:74:06:a0:8c:ed:ee:f0:ef:be:d0:24:63:94:35:db:
84:28:fd:9a:46:e0:8e:a8:f1:34:7a:69:c9:22:90:12:a6:95:
47:a0:66:33:0e:f4:b3:87:93:8c:1b:9e:eb:d7:76:cb:6c:d8:
09:f7:ac:34:01:de:97:9c:73:01:94:3f:bf:5f:53:f6:46:f7:
9f:c3:cb:5f:3e:03:51:92:aa:10:90:4a:4f:d0:17:c4:a3:26:
14:0c:e0:79:2b:c9:f5:60:cd:91:5f:3f:8f:25:ca:fe:9c:94:
41:92:20:e2:40:5e:b8:1b:33:74:65:59:ee:93:4d:65:de:89:
73:d0:e4:b9:15:06:14:21:52:44:83:56:10:79:89:ac:e0:6a:
1e:15:2f:19:b5:d6:4c:d2:62:f5:f6:68:46:33:44:82:d2:16:
07:45:cc:5a:3d:e5:26:18:c9:d8:47:57:93:c2:89:63:2c:c0:
64:3b:13:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtAh4qL971rkGsult6UzyjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE4MDIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmM0Y2JhODE4OTVlMjNjOGFiMmI3OGM0OGU3M2QxNGM5YTFkMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM4SHN+qpTQgFtQaYqOvgibzihR6
Od2b1d6VeSKzpTkE/eJrMykBQtKJu02IC2huzOK84w6GRPJsdB8x/YFBP/Fh3LjY
41OuHFKKcG7/UnXgQAoIsZ2kIX/wpxYsHB6+ZS3gvJvIlW5HensmLloMZml8H7OW
K85XX1Z9hqKRROO3ZDIlnGrXi3TLiuqbDJYmtKiweLar90PB7deei2Nzg0tvVHuh
wx3wmacQ4zzdIus91IgQ694DQ6WhlD2sEi/2Zq6H4h0aA0/Ezo9F1/RGGgOZdNl4
ljs8/Dg09VlIclh0HKlu0gmZ9Jl2jY0U6QvQmI037wr1MUcmwy+6vzPmiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJbEy6gYleI8irK3jEjnPRTJodHYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbHNUTHFCaVY0anlLc3JlTVNPYzlGTW1oMGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABeVzilMxIOaRHPkPg9y
4/yLuzw9AjRruY01gGxW2D1kjWRRC0mxXFuqWUKlzOCZeskZKt3MvKURxL8R085F
zs41wWo6C36UDtoVlHQGoIzt7vDvvtAkY5Q124Qo/ZpG4I6o8TR6ackikBKmlUeg
ZjMO9LOHk4wbnuvXdsts2An3rDQB3peccwGUP79fU/ZG95/Dy18+A1GSqhCQSk/Q
F8SjJhQM4HkryfVgzZFfP48lyv6clEGSIOJAXrgbM3RlWe6TTWXeiXPQ5LkVBhQh
UkSDVhB5iazgah4VLxm11kzSYvX2aEYzRILSFgdFzFo95SYYydhHV5PCiWMswGQ7
E/M=
-----END CERTIFICATE-----
Generated at Sat May 10 11:36:44 2025 by rpki-client