Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sddbKx9fCmr4Y5FUzkLMoQ07Pkk.roa
File: sddbKx9fCmr4Y5FUzkLMoQ07Pkk.roa (raw, json)
Hash identifier: aL6oxvXkTDNtgtEiIlp1jRAbvIOKo5QlkGwtdMF1LhQ=
Subject key identifier: B1:D7:5B:2B:1F:5F:0A:6A:F8:63:91:54:CE:42:CC:A1:0D:3B:3E:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBBB6BC981E0FE55C02C456224E6B3CC0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sddbKx9fCmr4Y5FUzkLMoQ07Pkk.roa
Signing time: Sat 11 Nov 2023 00:09:57 +0000
ROA not before: Sat 11 Nov 2023 00:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:b6:bc:98:1e:0f:e5:5c:02:c4:56:22:4e:6b:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 00:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1d75b2b1f5f0a6af8639154ce42cca10d3b3e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:9b:56:7b:ae:cb:32:ee:32:1e:9e:1e:1e:
ab:23:0a:83:cd:fc:67:74:bf:88:09:93:9f:6e:ac:
72:18:e1:22:e1:b5:80:b0:67:14:83:24:7c:59:76:
74:83:7e:e4:76:7b:4f:c1:cb:33:63:96:b3:f4:6d:
88:a7:74:a3:9f:d4:80:9c:cf:73:63:18:9e:e4:dd:
79:25:a8:cd:ba:3d:b1:b1:83:55:e3:8f:81:a7:6f:
d6:b9:52:06:f5:7b:47:3d:c3:0e:03:18:94:3b:ad:
cd:9b:1f:7b:06:47:9f:38:a6:95:b8:cd:3b:48:8f:
09:96:3b:8d:a8:11:45:5d:a2:85:3b:d3:ed:7d:9a:
0f:58:a3:37:23:76:09:58:b3:65:1d:1f:74:99:e5:
24:16:61:47:2e:20:e3:8b:70:98:4c:7d:f3:91:29:
b7:45:d3:f9:ff:3d:2a:42:0b:9e:3d:94:91:6b:f2:
ad:19:3c:c5:56:ad:98:d7:22:88:f8:3d:3f:e8:29:
f3:2c:30:65:f1:80:67:2e:6f:a4:99:2e:ac:98:c8:
a2:30:66:7d:0c:23:8a:4e:18:15:eb:be:d7:a2:55:
c3:26:02:93:97:f9:55:8e:bf:7c:89:44:0b:fe:ee:
d3:7a:41:06:44:0c:ac:b9:28:dd:b9:b6:89:81:a2:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:5B:2B:1F:5F:0A:6A:F8:63:91:54:CE:42:CC:A1:0D:3B:3E:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sddbKx9fCmr4Y5FUzkLMoQ07Pkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:ce:4b:43:50:90:6a:1a:4a:14:d2:cc:c8:0f:c1:0e:30:63:
cf:5e:db:68:45:ac:5c:73:b8:31:b0:fa:f3:24:7c:c4:56:5e:
57:1e:fe:ba:51:6b:41:48:2a:c9:40:a8:06:52:81:68:d8:a3:
7a:7f:1c:09:71:3c:66:ea:ef:27:61:dc:64:dc:03:7b:16:9e:
61:89:7d:42:62:c5:06:9f:b6:fe:c8:76:ac:0f:55:b1:59:10:
e7:cd:e2:db:e8:0a:64:38:82:d8:ea:dd:88:67:ac:e3:de:a0:
3f:75:42:f1:e2:a3:42:c6:70:9c:b4:d4:f0:fb:3c:00:62:e1:
8c:09:4e:47:f0:7b:01:3c:4a:72:84:30:1d:99:da:d3:67:7f:
d2:98:61:eb:bd:56:33:dd:13:7f:c1:c5:c6:ea:de:49:7a:bc:
4b:53:99:2e:74:66:e8:59:c5:c3:af:3e:84:c0:57:ff:07:a4:
5f:d7:b4:57:73:b1:86:95:26:f1:58:7e:3d:87:06:fa:5b:e2:
e3:1d:88:d3:c3:75:b8:c9:ea:3a:a4:ac:fa:ff:96:be:5f:e7:
13:d6:28:3f:24:05:81:07:00:d5:08:fa:49:42:f5:17:9c:1a:
c4:5a:68:8e:0b:20:44:86:4a:02:1d:bc:d5:65:80:68:89:32:
58:75:37:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu7tryYHg/lXALEViJOazzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTExMDAwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQ3NWIyYjFmNWYwYTZhZjg2MzkxNTRjZTQyY2NhMTBkM2IzZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLabVnuuyzLuMh6eHh6rIwqDzfxn
dL+ICZOfbqxyGOEi4bWAsGcUgyR8WXZ0g37kdntPwcszY5az9G2Ip3Sjn9SAnM9z
Yxie5N15JajNuj2xsYNV44+Bp2/WuVIG9XtHPcMOAxiUO63Nmx97BkefOKaVuM07
SI8JljuNqBFFXaKFO9PtfZoPWKM3I3YJWLNlHR90meUkFmFHLiDji3CYTH3zkSm3
RdP5/z0qQguePZSRa/KtGTzFVq2Y1yKI+D0/6CnzLDBl8YBnLm+kmS6smMiiMGZ9
DCOKThgV677XolXDJgKTl/lVjr98iUQL/u7TekEGRAysuSjdubaJgaKTRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLHXWysfXwpq+GORVM5CzKENOz5JMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc2RkYkt4OWZDbXI0WTVGVXprTE1vUTA3UGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH7OS0NQkGoaShTSzMgP
wQ4wY89e22hFrFxzuDGw+vMkfMRWXlce/rpRa0FIKslAqAZSgWjYo3p/HAlxPGbq
7ydh3GTcA3sWnmGJfUJixQaftv7IdqwPVbFZEOfN4tvoCmQ4gtjq3YhnrOPeoD91
QvHio0LGcJy01PD7PABi4YwJTkfwewE8SnKEMB2Z2tNnf9KYYeu9VjPdE3/Bxcbq
3kl6vEtTmS50ZuhZxcOvPoTAV/8HpF/XtFdzsYaVJvFYfj2HBvpb4uMdiNPDdbjJ
6jqkrPr/lr5f5xPWKD8kBYEHANUI+klC9RecGsRaaI4LIESGSgIdvNVlgGiJMlh1
N1c=
-----END CERTIFICATE-----
Generated at Sun May 11 12:22:41 2025 by rpki-client