Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwe4fcgfLVAJ-9enXSRn4kNSKYU.roa
File: xwe4fcgfLVAJ-9enXSRn4kNSKYU.roa (raw, json)
Hash identifier: 7UWhdNsZuVUmVOn91lp3/j6wRbUhCpWk3/OecaViioE=
Subject key identifier: C7:07:B8:7D:C8:1F:2D:50:09:FB:D7:A7:5D:24:67:E2:43:52:29:85
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA90FAAAB465341EF7FA169242008004D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwe4fcgfLVAJ-9enXSRn4kNSKYU.roa
Signing time: Tue 07 Nov 2023 09:14:17 +0000
ROA not before: Tue 07 Nov 2023 09:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:0f:aa:ab:46:53:41:ef:7f:a1:69:24:20:08:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 09:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c707b87dc81f2d5009fbd7a75d2467e243522985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:66:6d:a3:a6:12:02:34:67:80:69:7e:3d:
91:22:13:3c:7e:b8:d5:4f:8d:a3:66:78:15:b9:a3:
ad:de:7e:31:45:52:e2:7f:a3:9d:f5:b0:84:ed:10:
83:b8:c5:1f:52:38:86:66:71:e0:1c:f8:9a:d3:97:
66:75:89:da:a1:4b:6e:ac:d8:82:3f:8f:74:ce:97:
8c:e3:06:91:cc:9e:a6:c5:0e:af:a0:9c:08:25:66:
85:60:b7:3a:4a:50:b8:6f:be:98:90:b2:d9:fd:c4:
05:11:e4:40:69:f4:75:66:18:55:27:d2:6f:8a:59:
e9:c2:62:22:d7:86:13:f9:bb:75:72:54:57:3a:ad:
e4:9d:12:72:48:25:4f:d4:fe:62:da:9d:06:38:5a:
0e:09:75:67:60:6f:e4:d6:71:32:cc:cc:06:21:8e:
35:31:7b:dd:f6:3d:59:54:32:13:a0:28:1d:79:6b:
73:bc:2a:0c:ca:c2:dd:c7:dc:fc:0d:3d:ca:02:6f:
90:91:e7:ca:31:51:63:24:c6:ab:cd:6c:b2:d0:5b:
f5:52:72:8d:c1:f6:de:32:b2:43:43:ef:57:ef:75:
e1:db:02:9c:6f:3b:b5:c7:d7:85:0e:b8:b3:72:db:
83:92:1d:49:ff:2c:77:43:0c:8f:a2:72:91:97:0d:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:B8:7D:C8:1F:2D:50:09:FB:D7:A7:5D:24:67:E2:43:52:29:85
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xwe4fcgfLVAJ-9enXSRn4kNSKYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:1f:7d:51:3a:22:f1:96:07:e8:3e:17:8b:35:3d:2a:f9:92:
5d:8f:2a:ae:40:93:37:76:69:10:2c:8c:80:09:9f:27:b2:1a:
6c:76:5c:05:3b:7a:b8:f7:6d:f2:49:21:25:06:8e:62:36:64:
b1:51:da:66:bf:29:ed:61:39:6c:63:9a:88:d1:1d:00:e9:2a:
05:b8:f4:ba:2c:d6:5e:bf:4c:fb:a1:41:02:e6:10:a1:33:02:
79:b4:f6:cd:56:8a:9b:a3:31:3d:23:b5:a4:36:31:d5:11:fb:
13:58:7d:6b:be:9a:41:a1:74:16:c6:43:39:f2:d1:15:0b:2d:
b7:32:5d:7e:79:f4:26:8c:a2:84:7c:06:85:46:a8:52:f7:30:
05:63:93:09:0e:64:52:29:37:9b:7b:df:2e:55:b5:b0:08:c4:
de:bb:fa:ae:0a:e7:50:db:81:cb:46:9a:ab:46:f1:db:e1:f0:
38:3d:24:57:81:9c:4c:65:d9:d0:f4:00:c3:e7:e6:28:c6:26:
1f:4e:3c:e2:58:71:ab:65:0b:a0:65:8d:3f:fd:2f:54:73:6e:
b0:2d:f1:35:61:ab:01:51:c1:a2:6e:48:e4:6c:06:22:33:46:
c0:83:87:00:a3:df:86:8d:11:b0:fa:8a:a0:ef:79:96:f8:0b:
c6:87:c9:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYupD6qrRlNB73+haSQgCABNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA3MDkxNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzA3Yjg3ZGM4MWYyZDUwMDlmYmQ3YTc1ZDI0NjdlMjQzNTIyOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzhmbaOmEgI0Z4Bpfj2RIhM8frjV
T42jZngVuaOt3n4xRVLif6Od9bCE7RCDuMUfUjiGZnHgHPia05dmdYnaoUturNiC
P490zpeM4waRzJ6mxQ6voJwIJWaFYLc6SlC4b76YkLLZ/cQFEeRAafR1ZhhVJ9Jv
ilnpwmIi14YT+bt1clRXOq3knRJySCVP1P5i2p0GOFoOCXVnYG/k1nEyzMwGIY41
MXvd9j1ZVDIToCgdeWtzvCoMysLdx9z8DT3KAm+QkefKMVFjJMarzWyy0Fv1UnKN
wfbeMrJDQ+9X73Xh2wKcbzu1x9eFDrizctuDkh1J/yx3QwyPonKRlw3gOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMcHuH3IHy1QCfvXp10kZ+JDUimFMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveHdlNGZjZ2ZMVkFKLTllblhTUm40a05TS1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMAffVE6IvGWB+g+F4s1
PSr5kl2PKq5Akzd2aRAsjIAJnyeyGmx2XAU7erj3bfJJISUGjmI2ZLFR2ma/Ke1h
OWxjmojRHQDpKgW49Los1l6/TPuhQQLmEKEzAnm09s1WipujMT0jtaQ2MdUR+xNY
fWu+mkGhdBbGQzny0RULLbcyXX559CaMooR8BoVGqFL3MAVjkwkOZFIpN5t73y5V
tbAIxN67+q4K51DbgctGmqtG8dvh8Dg9JFeBnExl2dD0AMPn5ijGJh9OPOJYcatl
C6BljT/9L1RzbrAt8TVhqwFRwaJuSORsBiIzRsCDhwCj34aNEbD6iqDveZb4C8aH
ySs=
-----END CERTIFICATE-----
Generated at Sun May 11 22:18:19 2025 by rpki-client