Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4eB9eIzuG5qE_SXct1VyRTi8l8.roa
File: o4eB9eIzuG5qE_SXct1VyRTi8l8.roa (raw, json)
Hash identifier: fCyvhKF80PBbiBfcEkRwgIN/XKKDtVlgujuZt08Nv2k=
Subject key identifier: A3:87:81:F5:E2:33:B8:6E:6A:13:F4:97:72:DD:55:C9:14:E2:F2:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B859FAD0D1C11F4AB5B9B0E4D6C6F7025
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4eB9eIzuG5qE_SXct1VyRTi8l8.roa
Signing time: Tue 31 Oct 2023 12:05:15 +0000
ROA not before: Tue 31 Oct 2023 12:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:859f:7f8a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:9f:ad:0d:1c:11:f4:ab:5b:9b:0e:4d:6c:6f:70:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 12:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a38781f5e233b86e6a13f49772dd55c914e2f25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:17:ae:92:e2:fd:8d:ce:59:b0:e0:56:bb:
bb:ca:d9:69:42:b1:cb:ca:01:87:5e:6a:e6:1b:c7:
79:96:e3:a1:cc:e5:76:e6:95:d4:3d:76:5e:4f:4a:
bc:e6:9f:81:8a:8c:16:a0:44:c8:b0:68:a2:d6:ac:
36:36:50:61:9d:c4:81:f7:1f:02:71:b3:f6:8f:cd:
fd:3d:c6:f8:65:b2:7b:8b:ce:59:57:5b:4e:15:51:
bf:8d:76:13:57:72:d4:b9:98:93:0c:86:c2:0e:c8:
5c:da:57:4e:65:df:9b:26:11:46:3d:96:a4:05:e2:
07:88:43:40:93:f5:61:bd:08:d1:cc:a2:5f:3e:12:
1c:36:b9:38:79:9b:54:8c:58:f4:4a:57:f7:91:bb:
50:16:e1:18:9e:49:04:c2:ac:41:60:6d:2c:9c:87:
31:96:62:af:df:5c:16:16:c7:98:80:99:b0:45:81:
f3:b3:fa:dc:1a:34:92:67:2b:f1:c6:db:b4:10:f3:
3d:88:65:06:92:db:86:b6:d4:1d:6c:f6:30:43:af:
6a:0e:6e:20:c0:a2:ea:74:60:91:fb:54:52:69:49:
a6:24:3a:00:11:08:b9:22:20:9f:04:c2:61:bd:c3:
09:31:b1:32:70:67:3f:43:49:d8:a0:f0:78:00:63:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:87:81:F5:E2:33:B8:6E:6A:13:F4:97:72:DD:55:C9:14:E2:F2:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4eB9eIzuG5qE_SXct1VyRTi8l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:ff:a8:78:08:35:a6:be:b3:db:e9:7e:af:7e:65:02:01:e3:
28:92:1b:d1:71:d0:6e:78:45:3d:a2:d1:f4:5d:95:ce:b3:fd:
48:47:5d:50:fd:42:59:19:cb:85:fb:2d:f0:54:ce:41:4b:90:
cb:01:fa:9e:7f:5b:23:80:aa:fd:23:bd:44:17:6a:01:f1:3b:
69:69:ee:6d:c4:c1:d6:38:07:92:06:e9:2e:24:ab:ae:ff:fd:
23:60:67:34:ca:eb:e6:30:1a:a0:49:7d:9f:6d:75:fe:a5:da:
ae:ae:77:00:39:a3:60:43:ae:0d:98:26:2d:64:8e:eb:fa:3e:
ec:ee:3b:2f:e6:40:e9:ae:97:fc:f4:3f:a2:88:9b:4a:27:de:
7c:79:88:ef:c5:9a:43:47:c0:35:ae:0d:ee:d5:4e:77:18:9e:
a4:23:fb:48:06:ac:e7:14:b6:c9:22:2d:cd:dd:a8:e4:f3:c2:
6d:8d:e3:c6:4b:72:9c:9b:f9:df:06:be:97:f4:bb:e6:2a:4a:
ea:59:dc:c0:64:27:99:ce:e3:b1:fa:0a:84:39:93:12:a5:72:
a0:14:1d:83:22:79:91:fe:20:0c:ea:19:cf:48:92:1d:45:df:
e4:67:3c:50:22:a1:b1:07:8b:a0:ee:02:02:04:7f:c2:4b:a9:
78:42:55:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuFn60NHBH0q1ubDk1sb3AlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMTIwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzg3ODFmNWUyMzNiODZlNmExM2Y0OTc3MmRkNTVjOTE0ZTJmMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhycXrpLi/Y3OWbDgVru7ytlpQrHL
ygGHXmrmG8d5luOhzOV25pXUPXZeT0q85p+BiowWoETIsGii1qw2NlBhncSB9x8C
cbP2j839Pcb4ZbJ7i85ZV1tOFVG/jXYTV3LUuZiTDIbCDshc2ldOZd+bJhFGPZak
BeIHiENAk/VhvQjRzKJfPhIcNrk4eZtUjFj0Slf3kbtQFuEYnkkEwqxBYG0snIcx
lmKv31wWFseYgJmwRYHzs/rcGjSSZyvxxtu0EPM9iGUGktuGttQdbPYwQ69qDm4g
wKLqdGCR+1RSaUmmJDoAEQi5IiCfBMJhvcMJMbEycGc/Q0nYoPB4AGOHEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKOHgfXiM7huahP0l3LdVckU4vJfMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbzRlQjllSXp1RzVxRV9TWGN0MVZ5UlRpOGw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADX/qHgINaa+s9vpfq9+
ZQIB4yiSG9Fx0G54RT2i0fRdlc6z/UhHXVD9QlkZy4X7LfBUzkFLkMsB+p5/WyOA
qv0jvUQXagHxO2lp7m3EwdY4B5IG6S4kq67//SNgZzTK6+YwGqBJfZ9tdf6l2q6u
dwA5o2BDrg2YJi1kjuv6PuzuOy/mQOmul/z0P6KIm0on3nx5iO/FmkNHwDWuDe7V
TncYnqQj+0gGrOcUtskiLc3dqOTzwm2N48ZLcpyb+d8Gvpf0u+YqSupZ3MBkJ5nO
47H6CoQ5kxKlcqAUHYMieZH+IAzqGc9Ikh1F3+RnPFAiobEHi6DuAgIEf8JLqXhC
VaE=
-----END CERTIFICATE-----
Generated at Tue May 13 04:57:45 2025 by rpki-client