Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLVEgHBwmZtmVhpeyfQHRtqLrqI.roa
File: vLVEgHBwmZtmVhpeyfQHRtqLrqI.roa (raw, json)
Hash identifier: C97cXChdFM6WPpfB6ypV2aQVM5UVi860mnloU77TnNk=
Subject key identifier: BC:B5:44:80:70:70:99:9B:66:56:1A:5E:C9:F4:07:46:DA:8B:AE:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2E1C691F5A70DD1C69EB669AD95AC718
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLVEgHBwmZtmVhpeyfQHRtqLrqI.roa
Signing time: Sat 14 Oct 2023 12:14:55 +0000
ROA not before: Sat 14 Oct 2023 12:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:1c:69:1f:5a:70:dd:1c:69:eb:66:9a:d9:5a:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 12:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb544807070999b66561a5ec9f40746da8baea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:ab:c7:3c:eb:95:44:f5:49:9f:c2:0b:f5:
7d:f4:8a:92:7f:02:53:e3:12:ed:d4:46:44:86:11:
77:0e:39:e9:2f:3b:82:fd:69:a8:8c:35:04:7b:44:
e2:5a:ef:f4:ba:04:f2:49:a3:ee:ea:c7:58:3b:a9:
42:84:ab:32:43:2a:51:0a:2a:db:9f:50:91:78:23:
02:06:fe:f7:0a:73:cd:87:fa:18:07:8b:8c:12:b2:
d7:32:ba:9b:a3:8d:7b:0b:88:8c:dc:31:00:87:0b:
72:12:7e:f9:07:71:ee:44:b8:b7:b7:b2:a7:5a:12:
78:a9:7f:06:67:0b:60:6c:d0:82:2c:0e:f8:f8:73:
dc:5f:03:2e:7a:9b:62:2d:5d:30:fd:ff:2b:5a:3d:
1a:71:6f:11:70:fd:43:60:b2:89:ee:ab:bf:99:42:
1e:cf:ca:44:13:87:48:2b:59:e0:5f:8e:7e:07:b3:
c3:ec:8b:39:01:ae:7f:5c:66:df:7e:61:6f:8e:fd:
80:c8:46:3b:8b:cf:16:34:e2:74:4d:97:c3:45:0f:
41:28:08:b6:84:87:bc:d3:25:42:39:cc:7f:bd:40:
1c:64:98:33:a3:8d:61:09:5e:4d:00:9b:77:76:d0:
12:dd:36:70:27:6c:10:fe:dd:6c:c0:0b:71:84:01:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:44:80:70:70:99:9B:66:56:1A:5E:C9:F4:07:46:DA:8B:AE:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLVEgHBwmZtmVhpeyfQHRtqLrqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:7e:38:a5:a8:2b:19:47:89:82:55:38:09:21:d0:e2:48:20:
97:6b:a3:46:13:1e:53:1a:e4:21:fd:d9:5f:f7:ee:d5:6f:32:
f9:90:c5:e3:2d:9b:52:91:b2:7d:21:2f:6f:eb:a8:34:9f:ca:
5c:f8:63:2e:97:f7:a0:fa:db:dd:29:89:09:c9:54:4c:d0:49:
46:6a:09:fb:8b:cf:a7:ac:8c:e2:4d:fe:47:2a:0d:82:70:17:
96:7f:e5:c3:69:5f:fe:24:fd:da:c6:3a:cb:37:83:b1:d6:2a:
d6:f1:06:53:45:8f:7d:27:40:07:d6:28:10:63:ed:fd:9f:5e:
21:d5:41:0f:69:27:03:6c:c2:d7:08:18:01:01:ab:15:50:e7:
90:54:d0:5f:d5:57:41:fc:2c:43:89:97:d9:20:32:e9:9d:12:
91:28:e8:e7:d9:33:0e:16:39:14:46:3f:10:53:f7:96:bc:93:
73:c1:e6:78:f9:2a:bd:19:aa:b3:b2:0a:27:e3:36:a5:a9:14:
e5:64:e4:6e:e5:64:72:7e:ae:a1:52:7c:c1:a6:b6:ec:ad:bf:
dc:1f:e2:76:31:f0:c9:1d:3b:02:19:0c:76:01:0e:8d:eb:d1:
47:13:a4:67:fb:2b:3d:27:ed:d4:e8:d1:46:4d:11:0f:83:a9:
40:83:f3:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsuHGkfWnDdHGnrZprZWscYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MTIxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2I1NDQ4MDcwNzA5OTliNjY1NjFhNWVjOWY0MDc0NmRhOGJhZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKrxzzrlUT1SZ/CC/V99IqSfwJT
4xLt1EZEhhF3DjnpLzuC/WmojDUEe0TiWu/0ugTySaPu6sdYO6lChKsyQypRCirb
n1CReCMCBv73CnPNh/oYB4uMErLXMrqbo417C4iM3DEAhwtyEn75B3HuRLi3t7Kn
WhJ4qX8GZwtgbNCCLA74+HPcXwMueptiLV0w/f8rWj0acW8RcP1DYLKJ7qu/mUIe
z8pEE4dIK1ngX45+B7PD7Is5Aa5/XGbffmFvjv2AyEY7i88WNOJ0TZfDRQ9BKAi2
hIe80yVCOcx/vUAcZJgzo41hCV5NAJt3dtAS3TZwJ2wQ/t1swAtxhAERXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLy1RIBwcJmbZlYaXsn0B0bai66iMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdkxWRWdIQndtWnRtVmhwZXlmUUhSdHFMcnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABV+OKWoKxlHiYJVOAkh
0OJIIJdro0YTHlMa5CH92V/37tVvMvmQxeMtm1KRsn0hL2/rqDSfylz4Yy6X96D6
290piQnJVEzQSUZqCfuLz6esjOJN/kcqDYJwF5Z/5cNpX/4k/drGOss3g7HWKtbx
BlNFj30nQAfWKBBj7f2fXiHVQQ9pJwNswtcIGAEBqxVQ55BU0F/VV0H8LEOJl9kg
MumdEpEo6OfZMw4WORRGPxBT95a8k3PB5nj5Kr0ZqrOyCifjNqWpFOVk5G7lZHJ+
rqFSfMGmtuytv9wf4nYx8MkdOwIZDHYBDo3r0UcTpGf7Kz0n7dTo0UZNEQ+DqUCD
8w4=
-----END CERTIFICATE-----
Generated at Sun May 11 19:10:13 2025 by rpki-client