Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sai2x6RXaRaKivMTN3y8Z8ErtdQ.roa
File: sai2x6RXaRaKivMTN3y8Z8ErtdQ.roa (raw, json)
Hash identifier: 58HL3N47ceHLlKQyGn9EcjWmzDvWVZHsHnylclyLJF4=
Subject key identifier: B1:A8:B6:C7:A4:57:69:16:8A:8A:F3:13:37:7C:BC:67:C1:2B:B5:D4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2E526D488FE18E4DEB5452E39DF71DE5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sai2x6RXaRaKivMTN3y8Z8ErtdQ.roa
Signing time: Sat 14 Oct 2023 13:13:55 +0000
ROA not before: Sat 14 Oct 2023 13:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:52:6d:48:8f:e1:8e:4d:eb:54:52:e3:9d:f7:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 13:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a8b6c7a45769168a8af313377cbc67c12bb5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:90:b9:04:99:9d:1a:5a:f0:24:6e:73:3f:
95:63:69:27:8d:3a:69:28:1c:24:77:c0:f1:f6:ee:
22:0f:16:3e:17:e8:86:19:b1:b8:1c:2f:4d:a9:50:
f0:de:79:0d:e5:0b:af:a9:0c:f0:7b:6b:a2:71:05:
20:e7:63:5a:bd:d1:ba:5a:14:75:7a:29:f9:e4:25:
53:6b:bb:ad:20:a6:f7:34:e3:d1:21:a3:39:6e:74:
97:cb:eb:59:09:e3:82:36:c9:d7:56:e3:82:29:47:
78:71:60:a2:dc:21:93:a8:45:ec:ac:a9:fa:f7:95:
d9:c5:82:5c:89:58:07:17:ca:41:d5:97:3c:3e:8c:
11:aa:e1:87:ec:53:89:17:65:80:cb:42:5a:65:6f:
98:f9:7f:4c:6f:4d:97:70:d3:30:70:b7:ea:3b:8a:
54:20:44:6e:e9:cd:e4:29:0b:e4:74:15:d2:b7:62:
8d:b7:e0:8f:52:98:c7:89:d5:91:74:f1:85:1c:30:
30:79:d3:49:4e:fe:25:57:66:e1:be:53:b7:0a:7c:
b6:2c:5b:e6:cb:84:ad:54:6b:4d:75:47:11:b0:e6:
b5:5c:ba:d7:6e:d0:43:01:ac:a7:bd:b1:91:84:e0:
97:c3:d1:b2:d7:23:7e:0b:23:e7:1c:ac:93:4e:a1:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:B6:C7:A4:57:69:16:8A:8A:F3:13:37:7C:BC:67:C1:2B:B5:D4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sai2x6RXaRaKivMTN3y8Z8ErtdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:93:7c:72:4f:69:70:97:43:ad:cf:d0:e1:e6:3f:85:65:a9:
e9:72:3e:6b:5e:ce:ee:48:49:8f:90:18:eb:67:2a:fd:f7:a2:
ab:b3:49:22:3e:d5:6e:73:eb:d4:19:9f:d3:47:1b:b8:76:29:
4c:70:47:fa:11:fd:c3:88:9a:56:3f:82:f2:e7:42:2e:eb:e9:
39:c2:97:4f:71:ac:64:68:5f:f6:48:b3:26:47:24:58:bc:60:
34:74:60:db:6b:74:17:c9:57:f9:a0:b7:27:e0:21:be:ec:76:
e4:b8:4b:07:e9:c1:f4:69:ee:a5:f5:c2:05:a4:30:f7:e3:ab:
2b:ca:4f:a2:68:0d:65:6e:1f:ee:74:b9:ad:5e:35:be:09:22:
dc:0b:f9:0e:74:66:10:0a:60:c7:0d:99:b4:4b:24:ae:8d:3e:
43:ac:ba:0a:c0:07:1d:62:47:df:04:84:bf:53:b6:a1:93:24:
dc:58:b2:97:48:fe:cf:c6:80:25:c2:22:43:38:f0:2f:60:13:
7d:0f:f8:a3:c6:82:d5:f6:69:18:46:86:06:1f:04:65:2e:27:
90:2b:fe:c1:c8:aa:5b:f8:6a:3d:80:4b:63:e9:02:b3:9b:a7:
d3:c9:d8:9e:07:fc:40:5b:5f:af:6d:b3:76:21:84:c4:f0:b7:
59:02:de:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsuUm1Ij+GOTetUUuOd9x3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTMxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE4YjZjN2E0NTc2OTE2OGE4YWYzMTMzNzdjYmM2N2MxMmJiNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCyQuQSZnRpa8CRucz+VY2knjTpp
KBwkd8Dx9u4iDxY+F+iGGbG4HC9NqVDw3nkN5QuvqQzwe2uicQUg52NavdG6WhR1
ein55CVTa7utIKb3NOPRIaM5bnSXy+tZCeOCNsnXVuOCKUd4cWCi3CGTqEXsrKn6
95XZxYJciVgHF8pB1Zc8PowRquGH7FOJF2WAy0JaZW+Y+X9Mb02XcNMwcLfqO4pU
IERu6c3kKQvkdBXSt2KNt+CPUpjHidWRdPGFHDAwedNJTv4lV2bhvlO3Cny2LFvm
y4StVGtNdUcRsOa1XLrXbtBDAaynvbGRhOCXw9Gy1yN+CyPnHKyTTqEQAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLGotsekV2kWiorzEzd8vGfBK7XUMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc2FpMng2UlhhUmFLaXZNVE4zeThaOEVydGRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAACTfHJPaXCXQ63P0OHm
P4VlqelyPmtezu5ISY+QGOtnKv33oquzSSI+1W5z69QZn9NHG7h2KUxwR/oR/cOI
mlY/gvLnQi7r6TnCl09xrGRoX/ZIsyZHJFi8YDR0YNtrdBfJV/mgtyfgIb7sduS4
SwfpwfRp7qX1wgWkMPfjqyvKT6JoDWVuH+50ua1eNb4JItwL+Q50ZhAKYMcNmbRL
JK6NPkOsugrABx1iR98EhL9TtqGTJNxYspdI/s/GgCXCIkM48C9gE30P+KPGgtX2
aRhGhgYfBGUuJ5Ar/sHIqlv4aj2AS2PpArObp9PJ2J4H/EBbX69ts3YhhMTwt1kC
3u4=
-----END CERTIFICATE-----
Generated at Thu May 15 21:24:28 2025 by rpki-client