Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t08IgYazd3GpnTZmJGB5ak8_zrY.roa
File: t08IgYazd3GpnTZmJGB5ak8_zrY.roa (raw, json)
Hash identifier: 2utg9iu/lV0QROncfRPmj/41leficTteZRd7gBo7fH4=
Subject key identifier: B7:4F:08:81:86:B3:77:71:A9:9D:36:66:24:60:79:6A:4F:3F:CE:B6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6EDE376DC82591BB6C9A9EB76C6E6AA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t08IgYazd3GpnTZmJGB5ak8_zrY.roa
Signing time: Fri 15 Dec 2023 19:05:06 +0000
ROA not before: Fri 15 Dec 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6edd:75bb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:de:37:6d:c8:25:91:bb:6c:9a:9e:b7:6c:6e:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b74f088186b37771a99d36662460796a4f3fceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:1a:d9:58:fc:c9:2c:c2:6f:9b:1f:5b:50:
1d:96:e0:6e:31:b4:fe:b6:bb:db:a4:8d:65:e9:ef:
dc:bd:5b:ef:8f:86:bd:24:3e:eb:73:b3:c4:6e:d8:
3e:a2:0d:8f:39:25:de:11:dd:62:b6:25:3b:58:51:
41:fa:de:b1:df:cd:67:b1:89:58:aa:1d:f4:a8:0f:
5b:f0:27:ab:1c:95:95:96:ff:7c:56:7c:f7:43:a6:
8f:f1:0f:78:b6:f3:41:1a:fe:06:a1:94:75:c9:4f:
7f:6d:fa:cb:84:58:ce:ae:e4:a0:9b:5f:11:c3:cb:
56:30:88:dc:e1:a6:ec:7c:2a:e4:96:0b:70:df:5d:
64:b1:18:c7:11:ec:8c:48:78:f0:d2:da:56:16:39:
6d:79:ee:f0:a1:a8:63:66:4a:71:3f:d4:71:0b:78:
0f:c8:0e:b9:77:95:c3:f5:e6:cc:41:4f:ef:76:d9:
3f:fc:bd:17:9f:b2:c5:75:4e:25:69:35:f0:ba:9c:
72:96:75:b4:d3:7c:ae:76:43:25:3c:75:c4:37:54:
05:60:6e:1c:cd:d7:4c:f4:18:6c:02:e9:b0:78:f4:
42:62:1e:67:03:3a:88:fe:b3:c3:d0:86:c9:80:8c:
29:7e:2e:f2:f8:44:1b:5d:b8:67:98:72:79:10:fe:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:08:81:86:B3:77:71:A9:9D:36:66:24:60:79:6A:4F:3F:CE:B6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t08IgYazd3GpnTZmJGB5ak8_zrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:3c:7a:cf:9e:b0:a4:a3:b4:cf:67:eb:79:05:6e:04:41:14:
14:b4:ee:77:73:90:24:39:3d:26:a4:b7:16:3b:ac:ff:50:1a:
09:a3:a9:40:43:78:31:ed:aa:8f:0e:44:7a:7d:48:c9:e5:3d:
d1:4c:dd:7e:7f:b9:a3:21:f1:38:49:07:7a:c6:14:df:4b:ef:
9a:f6:47:bf:05:76:6e:01:50:a9:1d:f6:69:56:4c:d8:e0:aa:
21:ed:30:91:94:aa:19:85:f1:b5:64:39:05:eb:58:bc:f2:84:
79:dc:bc:37:2a:84:c8:b8:7f:e3:30:fa:38:08:85:2b:6d:82:
75:6c:c0:a7:af:c8:f7:d3:44:e8:c1:c1:8d:8f:af:29:b2:b0:
1a:db:8b:ad:47:b4:a9:0b:96:be:8b:a3:a6:62:ae:3d:5e:f9:
1b:35:51:2f:0e:fa:ef:c2:d9:a7:0f:03:72:42:c4:32:74:f1:
62:44:95:6c:42:5e:ab:b4:21:1e:37:6c:3b:4f:da:62:40:ae:
28:f4:ca:aa:d3:a6:63:63:fe:41:43:df:34:7c:6e:5e:1d:7f:
01:fd:d6:ca:33:2b:bc:0a:63:ed:04:45:db:a0:be:4a:28:72:
2a:d1:0b:d0:df:7c:30:c3:66:38:ae:14:d2:9c:4c:82:d0:17:
3c:76:35:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxu3jdtyCWRu2yanrdsbmqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE1MTkwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzRmMDg4MTg2YjM3NzcxYTk5ZDM2NjYyNDYwNzk2YTRmM2ZjZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKIa2Vj8ySzCb5sfW1AdluBuMbT+
trvbpI1l6e/cvVvvj4a9JD7rc7PEbtg+og2POSXeEd1itiU7WFFB+t6x381nsYlY
qh30qA9b8CerHJWVlv98Vnz3Q6aP8Q94tvNBGv4GoZR1yU9/bfrLhFjOruSgm18R
w8tWMIjc4absfCrklgtw311ksRjHEeyMSHjw0tpWFjltee7woahjZkpxP9RxC3gP
yA65d5XD9ebMQU/vdtk//L0Xn7LFdU4laTXwupxylnW003yudkMlPHXEN1QFYG4c
zddM9BhsAumwePRCYh5nAzqI/rPD0IbJgIwpfi7y+EQbXbhnmHJ5EP5XHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLdPCIGGs3dxqZ02ZiRgeWpPP862MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdDA4SWdZYXpkM0dwblRabUpHQjVhazhfenJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABw8es+esKSjtM9n63kF
bgRBFBS07ndzkCQ5PSaktxY7rP9QGgmjqUBDeDHtqo8ORHp9SMnlPdFM3X5/uaMh
8ThJB3rGFN9L75r2R78Fdm4BUKkd9mlWTNjgqiHtMJGUqhmF8bVkOQXrWLzyhHnc
vDcqhMi4f+Mw+jgIhSttgnVswKevyPfTROjBwY2PrymysBrbi61HtKkLlr6Lo6Zi
rj1e+Rs1US8O+u/C2acPA3JCxDJ08WJElWxCXqu0IR43bDtP2mJArij0yqrTpmNj
/kFD3zR8bl4dfwH91sozK7wKY+0ERdugvkoocirRC9DffDDDZjiuFNKcTILQFzx2
NUQ=
-----END CERTIFICATE-----
Generated at Mon May 12 23:14:24 2025 by rpki-client