Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wAaL81UrenBpKdJnTScLWlG6qU.roa
File: 0wAaL81UrenBpKdJnTScLWlG6qU.roa (raw, json)
Hash identifier: g4exIVOkE5wmed3qTSV/z7zVv4JNpFp/wa/78/k9gx4=
Subject key identifier: D3:00:1A:2F:CD:54:AD:E9:C1:A4:A7:49:9D:34:9C:2D:69:46:EA:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C631A228A2B841031C554D10447537A30
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wAaL81UrenBpKdJnTScLWlG6qU.roa
Signing time: Wed 13 Dec 2023 12:15:06 +0000
ROA not before: Wed 13 Dec 2023 12:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:1a:22:8a:2b:84:10:31:c5:54:d1:04:47:53:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 12:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3001a2fcd54ade9c1a4a7499d349c2d6946eaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:ab:7d:f5:9f:5e:36:91:d9:a2:cb:ec:35:
bb:7b:f9:40:ee:a9:e2:49:ba:de:b7:1d:f8:39:ba:
83:ba:a6:ad:8e:af:15:2c:46:74:91:fe:86:66:3f:
5e:ac:f4:84:de:ae:9e:47:16:98:d0:a6:54:a8:df:
1c:af:41:cf:45:52:9c:4b:81:ed:fa:3c:91:b3:78:
9d:d5:98:88:a1:c6:4b:eb:79:5d:45:b3:b6:63:d2:
79:ed:83:45:f4:1a:76:d3:1e:ea:cc:81:f2:46:15:
3d:a0:40:ed:93:b4:eb:6b:4f:39:e3:31:45:34:99:
3c:7a:3f:bb:61:35:4d:2b:fb:df:c9:c9:bc:df:49:
aa:bb:35:91:c6:f1:fa:6c:c8:93:34:0b:86:f7:59:
25:93:aa:ee:25:93:1b:91:79:c0:1e:7c:46:10:e2:
c8:8c:85:81:01:7f:b3:16:a4:ca:f1:ff:a8:ba:83:
29:a7:b7:b5:2d:8c:70:d1:c3:89:1b:1f:c9:5d:8a:
fb:2f:71:8c:91:f3:17:4e:30:42:90:a4:df:1d:ad:
27:ba:e4:68:8f:7a:84:1d:10:56:24:31:b2:fa:c5:
c6:88:81:e2:45:c9:bf:bf:9c:0a:55:e5:85:4e:34:
9b:ed:28:f8:3d:ce:05:b2:b4:d0:f4:3b:c8:1c:fe:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:1A:2F:CD:54:AD:E9:C1:A4:A7:49:9D:34:9C:2D:69:46:EA:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0wAaL81UrenBpKdJnTScLWlG6qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:cf:32:38:63:d3:da:ec:cf:04:4b:b5:c8:23:ea:e0:80:fc:
ea:5f:b7:78:00:c5:41:c4:a7:4c:0c:48:cd:75:fa:93:0b:10:
03:a8:a5:bd:bd:db:0f:0a:20:56:5c:c2:43:2c:16:48:86:c4:
9c:b0:1a:8a:ec:f2:f4:3e:bb:ff:4b:5f:83:db:66:51:d0:88:
67:64:24:cf:60:45:a4:4d:bf:1b:b0:68:96:3f:b1:4d:8e:4d:
fa:1f:c1:dd:f8:8a:47:41:78:8f:58:5d:6b:cd:e5:09:15:f3:
e6:84:3b:13:34:dc:08:62:58:63:bf:0d:da:cc:40:2a:62:a4:
80:e8:4c:4a:bd:42:d5:b6:4b:22:01:f2:0c:c0:d2:30:6f:b3:
a3:9b:82:a4:37:02:dc:cf:bb:72:c3:02:d4:11:66:5d:b8:ef:
da:d8:eb:e7:85:b2:59:5f:d1:20:df:f1:f8:3e:77:6b:c3:98:
9b:4d:78:fc:4f:03:37:05:fc:67:bd:8c:4e:03:0d:cf:63:b8:
eb:10:cb:1c:07:6b:08:d8:21:40:59:35:37:20:2b:37:16:51:
51:97:72:43:73:8a:bd:5b:f5:25:3a:d1:13:c2:69:01:60:7d:
2d:6f:27:e8:59:bf:85:18:a8:a3:12:61:b6:f7:f5:44:81:94:
55:4a:e3:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxjGiKKK4QQMcVU0QRHU3owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEzMTIxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzAwMWEyZmNkNTRhZGU5YzFhNGE3NDk5ZDM0OWMyZDY5NDZlYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwarffWfXjaR2aLL7DW7e/lA7qni
Sbretx34ObqDuqatjq8VLEZ0kf6GZj9erPSE3q6eRxaY0KZUqN8cr0HPRVKcS4Ht
+jyRs3id1ZiIocZL63ldRbO2Y9J57YNF9Bp20x7qzIHyRhU9oEDtk7Tra0854zFF
NJk8ej+7YTVNK/vfycm830mquzWRxvH6bMiTNAuG91klk6ruJZMbkXnAHnxGEOLI
jIWBAX+zFqTK8f+ouoMpp7e1LYxw0cOJGx/JXYr7L3GMkfMXTjBCkKTfHa0nuuRo
j3qEHRBWJDGy+sXGiIHiRcm/v5wKVeWFTjSb7Sj4Pc4FsrTQ9DvIHP7pswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNMAGi/NVK3pwaSnSZ00nC1pRuqlMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMHdBYUw4MVVyZW5CcEtkSm5UU2NMV2xHNnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMDPMjhj09rszwRLtcgj
6uCA/Opft3gAxUHEp0wMSM11+pMLEAOopb292w8KIFZcwkMsFkiGxJywGors8vQ+
u/9LX4PbZlHQiGdkJM9gRaRNvxuwaJY/sU2OTfofwd34ikdBeI9YXWvN5QkV8+aE
OxM03AhiWGO/DdrMQCpipIDoTEq9QtW2SyIB8gzA0jBvs6ObgqQ3AtzPu3LDAtQR
Zl2479rY6+eFsllf0SDf8fg+d2vDmJtNePxPAzcF/Ge9jE4DDc9juOsQyxwHawjY
IUBZNTcgKzcWUVGXckNzir1b9SU60RPCaQFgfS1vJ+hZv4UYqKMSYbb39USBlFVK
46c=
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:59:03 2025 by rpki-client