Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vnPtaRIJxbktykrfMfDXKCEOWQA.roa
File: vnPtaRIJxbktykrfMfDXKCEOWQA.roa (raw, json)
Hash identifier: KB3q0mC8D0b+5G8DFslCBoH/u5OtB7tQsvBd+yW93BQ=
Subject key identifier: BE:73:ED:69:12:09:C5:B9:2D:CA:4A:DF:31:F0:D7:28:21:0E:59:00
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFEAFA30333C3C5C1D1B07AFCACDDB313
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vnPtaRIJxbktykrfMfDXKCEOWQA.roa
Signing time: Thu 05 Oct 2023 07:13:57 +0000
ROA not before: Thu 05 Oct 2023 07:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:af:a3:03:33:c3:c5:c1:d1:b0:7a:fc:ac:dd:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 07:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be73ed691209c5b92dca4adf31f0d728210e5900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:ba:03:a1:18:3b:94:27:ec:30:be:01:ab:
7c:79:32:79:ac:b3:f3:a3:15:8f:31:e0:9f:fc:a5:
b4:ba:92:fc:1f:ab:a7:e1:bd:69:6b:0d:05:53:89:
3b:3d:25:c2:f2:bc:da:81:2d:7a:96:1b:21:03:d9:
66:3e:1f:48:bc:03:66:24:2c:91:74:bf:09:46:36:
97:a3:63:2b:ef:b4:1d:27:80:e6:c1:c3:37:c3:12:
4c:2d:b7:ab:50:bd:94:f4:4e:5e:b7:5f:34:65:4b:
bf:f1:27:50:ff:d7:a1:3e:25:a6:42:1e:d3:8c:66:
aa:7a:e2:92:58:3c:c5:ea:3d:a0:dd:79:94:0e:70:
1a:be:eb:80:18:1f:ea:63:05:4a:6d:f8:3c:36:e8:
8f:34:74:9b:1c:2c:dc:13:9e:e0:2b:56:97:67:ef:
b3:36:32:e7:3e:83:46:0a:c5:29:5f:95:80:aa:83:
a6:8d:66:49:e7:e6:9c:0f:34:1e:52:da:fa:c1:9b:
a1:ef:ee:65:9a:d8:73:01:22:5c:f9:c0:a5:8e:21:
7d:54:5e:12:9c:97:e9:0e:9f:64:a4:b9:a1:49:f5:
a7:74:ed:4f:47:68:13:6c:66:29:b6:95:c0:be:c5:
0e:b3:e8:fe:6f:3c:95:91:af:eb:ee:8e:88:d7:b1:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:ED:69:12:09:C5:B9:2D:CA:4A:DF:31:F0:D7:28:21:0E:59:00
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vnPtaRIJxbktykrfMfDXKCEOWQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:52:f3:02:b0:2a:5b:4e:e8:3d:0b:b5:b4:10:88:12:0b:b0:
5e:84:bc:cd:03:43:52:6a:2d:27:39:95:1f:fa:4d:40:8e:76:
af:de:ae:55:65:f5:4d:79:d6:50:ff:58:19:3c:b3:bb:2f:d2:
21:b8:d1:65:46:78:5f:14:7e:47:7e:81:fe:2b:dc:b1:2c:a8:
95:aa:c8:a0:94:d5:27:c5:34:12:9b:cb:c4:c0:1b:f3:0e:0d:
be:0d:4d:52:9b:24:ae:d3:d9:d5:f4:67:54:8d:c8:bf:96:ff:
61:c6:8e:4a:32:1d:26:b4:31:4e:05:12:74:d0:25:58:f3:ff:
bd:c7:d4:01:56:69:18:ca:61:8f:40:d4:3a:d8:aa:8c:00:83:
45:e7:7a:7a:df:8c:77:44:09:86:73:4a:fb:cc:2e:fb:ce:b9:
87:58:65:a3:fe:f0:d6:aa:22:b7:eb:ca:86:fd:ea:c2:31:df:
7a:55:ca:b8:95:dd:90:f5:85:53:3d:80:08:66:31:66:a2:97:
6a:a7:ee:ef:f4:e4:6c:1c:33:8b:5a:10:54:e2:e7:82:a7:d2:
ef:0b:d5:96:78:d8:c6:92:fd:18:61:cc:c7:17:67:cf:d7:7b:
fb:db:c4:92:06:da:16:e2:dc:ab:26:f1:c2:d2:97:b8:fe:aa:
09:81:40:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr+r6MDM8PFwdGwevys3bMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MDcxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTczZWQ2OTEyMDljNWI5MmRjYTRhZGYzMWYwZDcyODIxMGU1OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurW6A6EYO5Qn7DC+Aat8eTJ5rLPz
oxWPMeCf/KW0upL8H6un4b1paw0FU4k7PSXC8rzagS16lhshA9lmPh9IvANmJCyR
dL8JRjaXo2Mr77QdJ4DmwcM3wxJMLberUL2U9E5et180ZUu/8SdQ/9ehPiWmQh7T
jGaqeuKSWDzF6j2g3XmUDnAavuuAGB/qYwVKbfg8NuiPNHSbHCzcE57gK1aXZ++z
NjLnPoNGCsUpX5WAqoOmjWZJ5+acDzQeUtr6wZuh7+5lmthzASJc+cCljiF9VF4S
nJfpDp9kpLmhSfWndO1PR2gTbGYptpXAvsUOs+j+bzyVka/r7o6I17Gh4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL5z7WkSCcW5LcpK3zHw1yghDlkAMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdm5QdGFSSUp4Ymt0eWtyZk1mRFhLQ0VPV1FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKBS8wKwKltO6D0LtbQQ
iBILsF6EvM0DQ1JqLSc5lR/6TUCOdq/erlVl9U151lD/WBk8s7sv0iG40WVGeF8U
fkd+gf4r3LEsqJWqyKCU1SfFNBKby8TAG/MODb4NTVKbJK7T2dX0Z1SNyL+W/2HG
jkoyHSa0MU4FEnTQJVjz/73H1AFWaRjKYY9A1DrYqowAg0XnenrfjHdECYZzSvvM
LvvOuYdYZaP+8NaqIrfryob96sIx33pVyriV3ZD1hVM9gAhmMWail2qn7u/05Gwc
M4taEFTi54Kn0u8L1ZZ42MaS/RhhzMcXZ8/Xe/vbxJIG2hbi3Ksm8cLSl7j+qgmB
QEQ=
-----END CERTIFICATE-----
Generated at Sun May 11 09:20:51 2025 by rpki-client