Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qaCQObNXnq5jIB9sw0MYnAQYg54.roa
File: qaCQObNXnq5jIB9sw0MYnAQYg54.roa (raw, json)
Hash identifier: qr9ArbTEkt5jHlOvIsPOwwvG1TGAF6TAd/R6VQPeQGQ=
Subject key identifier: A9:A0:90:39:B3:57:9E:AE:63:20:1F:6C:C3:43:18:9C:04:18:83:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEFAA4A6E871FF8616B184B2A2737BB5D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qaCQObNXnq5jIB9sw0MYnAQYg54.roa
Signing time: Tue 21 Nov 2023 02:16:36 +0000
ROA not before: Tue 21 Nov 2023 02:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:aa:4a:6e:87:1f:f8:61:6b:18:4b:2a:27:37:bb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 02:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9a09039b3579eae63201f6cc343189c0418839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:64:07:bb:23:dd:82:2b:c7:2a:0f:0f:a3:
ac:6c:15:44:fd:d4:f3:51:57:7a:60:39:10:91:a8:
e9:07:61:68:c4:98:c2:8b:96:b8:3e:b1:ea:37:0c:
9c:56:c6:25:68:f6:e0:2a:2d:c7:ae:95:da:b8:b2:
c1:12:d6:bb:28:e6:24:43:68:71:e3:ec:ec:b1:66:
2b:18:07:2e:20:3f:f8:05:a1:d5:f7:09:80:71:fb:
31:3a:30:53:cb:f8:fe:81:17:d6:34:7a:d6:0c:d9:
f8:27:2b:6e:2a:b9:4e:c1:a8:1a:52:17:6f:dc:92:
e4:be:45:bb:17:79:53:8c:6a:30:0c:6b:87:85:86:
5a:63:50:40:c5:78:e4:ed:40:52:0a:4f:5e:78:f3:
02:e5:e3:b2:f6:f5:22:0c:6a:69:48:83:46:1a:f3:
a7:d3:0d:9b:9b:a7:c1:f0:c7:24:0d:b9:91:8e:69:
f7:20:63:14:f0:10:55:76:ab:fe:b0:60:59:f1:55:
91:c0:79:29:77:97:e4:cd:84:b6:48:a6:21:cb:3c:
a6:f0:63:d4:d5:ff:55:e4:64:33:4d:c8:66:8b:3f:
ce:d5:95:84:f3:8e:08:29:f4:88:92:65:b6:86:1a:
e9:a7:ef:0b:79:ca:cd:77:66:ef:75:51:29:a2:25:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:90:39:B3:57:9E:AE:63:20:1F:6C:C3:43:18:9C:04:18:83:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qaCQObNXnq5jIB9sw0MYnAQYg54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:34:fd:4d:2e:43:f7:b9:5a:af:5c:d7:4e:4f:7c:fc:f0:b9:
f8:45:b1:ca:e3:c3:c5:cc:95:56:74:ef:db:51:15:03:82:c2:
5d:40:9e:b8:45:e2:18:97:70:8c:3e:25:32:b5:66:36:25:61:
5c:b5:50:1f:f0:60:e9:16:04:4d:c7:92:d4:3f:29:34:ba:aa:
70:9b:57:02:cd:95:57:cc:2a:97:f8:8d:cf:e3:00:f3:16:52:
c1:a0:6a:ef:70:c6:49:86:78:86:f9:4d:09:31:c9:ab:09:4b:
6e:a0:5f:ba:7c:ae:46:27:3a:29:22:86:c8:b6:50:7e:7f:d1:
d1:24:2c:ff:18:04:78:32:3c:d9:7e:74:71:33:3c:a0:7d:82:
c1:6b:d1:f3:94:3e:66:b4:31:e0:66:6e:46:ae:4f:59:64:e9:
9d:d7:a5:ca:22:67:90:80:d3:dc:ea:e5:a3:79:7b:89:6e:1b:
77:4e:35:bd:33:03:dd:7b:1d:f2:88:5b:4a:02:09:b2:be:4c:
6d:4d:44:3d:29:43:f6:a1:92:a1:14:7b:f6:9d:17:33:cd:10:
1b:81:b5:7d:d2:43:0b:46:2f:2c:09:55:e7:87:7c:2e:62:ed:
a9:cf:c0:a1:a1:b9:01:58:18:5a:dc:70:98:61:f7:f7:be:02:
79:05:8a:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvvqkpuhx/4YWsYSyonN7tdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIxMDIxNjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWEwOTAzOWIzNTc5ZWFlNjMyMDFmNmNjMzQzMTg5YzA0MTg4MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCVkB7sj3YIrxyoPD6OsbBVE/dTz
UVd6YDkQkajpB2FoxJjCi5a4PrHqNwycVsYlaPbgKi3HrpXauLLBEta7KOYkQ2hx
4+zssWYrGAcuID/4BaHV9wmAcfsxOjBTy/j+gRfWNHrWDNn4JytuKrlOwagaUhdv
3JLkvkW7F3lTjGowDGuHhYZaY1BAxXjk7UBSCk9eePMC5eOy9vUiDGppSINGGvOn
0w2bm6fB8MckDbmRjmn3IGMU8BBVdqv+sGBZ8VWRwHkpd5fkzYS2SKYhyzym8GPU
1f9V5GQzTchmiz/O1ZWE844IKfSIkmW2hhrpp+8LecrNd2bvdVEpoiWd6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKmgkDmzV56uYyAfbMNDGJwEGIOeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcWFDUU9iTlhucTVqSUI5c3cwTVluQVFZZzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM80/U0uQ/e5Wq9c105P
fPzwufhFscrjw8XMlVZ079tRFQOCwl1AnrhF4hiXcIw+JTK1ZjYlYVy1UB/wYOkW
BE3HktQ/KTS6qnCbVwLNlVfMKpf4jc/jAPMWUsGgau9wxkmGeIb5TQkxyasJS26g
X7p8rkYnOikihsi2UH5/0dEkLP8YBHgyPNl+dHEzPKB9gsFr0fOUPma0MeBmbkau
T1lk6Z3XpcoiZ5CA09zq5aN5e4luG3dONb0zA917HfKIW0oCCbK+TG1NRD0pQ/ah
kqEUe/adFzPNEBuBtX3SQwtGLywJVeeHfC5i7anPwKGhuQFYGFrccJhh9/e+AnkF
ito=
-----END CERTIFICATE-----
Generated at Sun May 11 12:27:00 2025 by rpki-client