Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6Fwk7Q_Ztyl_KiylkhvECMc6nw.roa
File: 1-6Fwk7Q_Ztyl_KiylkhvECMc6nw.roa (raw, json)
Hash identifier: rdzRBq/DPO3uUAk15uMCyyzpvGZpSpM3OgsAN15hPUE=
Subject key identifier: FB:A1:70:93:B4:3F:66:DC:A5:FC:A8:B2:96:48:6F:10:23:1C:EA:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C77E7C19972D3C9D99FBAA890E993F350
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6Fwk7Q_Ztyl_KiylkhvECMc6nw.roa
Signing time: Sun 17 Dec 2023 13:12:06 +0000
ROA not before: Sun 17 Dec 2023 13:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:e7:c1:99:72:d3:c9:d9:9f:ba:a8:90:e9:93:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 13:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba17093b43f66dca5fca8b296486f10231cea7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:f8:c8:89:fd:1c:8f:f2:0a:20:dd:6e:99:
40:ca:c9:75:02:7b:b1:08:3c:6b:4c:6b:c5:72:7c:
0f:ae:88:79:25:9e:22:a2:78:97:35:f1:1d:d8:02:
cb:56:ed:be:7f:0c:5a:36:01:10:97:c2:9f:23:0c:
94:cf:6d:60:f0:9b:31:b2:85:96:e1:f4:8a:83:35:
09:dd:cd:c4:6b:f9:2a:a4:5b:59:f2:e0:84:6f:ed:
4f:6d:09:e4:c8:69:c4:24:bd:07:53:f6:bf:6d:98:
15:69:0f:4e:a2:b0:b5:81:37:01:ff:28:41:b0:03:
82:a9:d8:02:a1:3c:d5:12:20:88:d3:98:8a:0b:0a:
2b:7d:0f:95:7c:2b:eb:36:73:55:61:45:99:80:b5:
f7:0a:bb:19:93:b3:79:4e:e7:8e:a2:51:5b:d5:e1:
28:9c:b0:2a:97:b0:76:1c:0d:42:e1:4d:5b:25:2f:
c1:b6:7c:61:e9:d3:38:4a:58:88:86:ea:e1:2c:37:
4b:bb:c8:15:a2:68:92:82:32:01:ae:8c:15:69:61:
60:af:89:b1:ac:ab:41:ea:8e:7f:38:bc:a7:67:83:
1f:14:b6:81:c5:da:b6:76:70:65:b9:6c:43:5f:69:
1c:e0:da:fd:6d:78:49:71:be:37:19:d0:8f:ab:98:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:70:93:B4:3F:66:DC:A5:FC:A8:B2:96:48:6F:10:23:1C:EA:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6Fwk7Q_Ztyl_KiylkhvECMc6nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:fc:fd:70:26:3b:72:53:fb:24:f6:17:39:d5:5f:cf:cc:2e:
e6:19:65:77:94:a8:31:58:ec:cc:e3:aa:fc:40:52:bd:5b:40:
72:51:d2:2f:09:6d:12:55:16:f5:25:80:ea:a3:ee:f2:01:a8:
92:ed:9e:5f:5d:06:b9:e8:6c:43:e9:a2:bd:ae:09:75:fc:6c:
59:c4:80:05:6a:d6:56:bb:6f:80:cb:b6:db:ac:91:49:f7:74:
3b:2b:e9:6f:82:c1:ba:80:db:d7:30:a5:2d:dd:9b:e1:fe:ce:
27:4f:69:f4:ad:37:b0:6e:5d:5b:70:57:bb:51:66:db:f8:e8:
6f:fc:bd:0a:1f:31:c5:96:d2:ed:f9:8e:68:02:71:cc:5e:88:
72:80:2f:05:15:4a:d8:70:d8:d4:13:81:7d:00:e4:5d:4f:7c:
d0:8e:54:a8:c8:b9:a2:4b:43:53:04:05:45:55:a3:34:eb:14:
7c:a3:d2:32:60:91:ea:1a:05:eb:0c:d7:76:bf:22:92:0b:5f:
7f:2e:96:87:2d:63:79:d1:69:bf:51:5d:5e:c0:12:c6:d0:ed:
04:e8:db:6e:4d:e5:ff:fd:2b:42:70:38:90:a5:ed:9e:e0:a5:
2e:24:58:18:0e:5a:09:79:1a:da:65:cb:6d:a2:33:04:c2:55:
29:55:1e:4a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYx358GZctPJ2Z+6qJDpk/NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE3MTMxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmExNzA5M2I0M2Y2NmRjYTVmY2E4YjI5NjQ4NmYxMDIzMWNlYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/34yIn9HI/yCiDdbplAysl1Anux
CDxrTGvFcnwProh5JZ4ioniXNfEd2ALLVu2+fwxaNgEQl8KfIwyUz21g8JsxsoWW
4fSKgzUJ3c3Ea/kqpFtZ8uCEb+1PbQnkyGnEJL0HU/a/bZgVaQ9OorC1gTcB/yhB
sAOCqdgCoTzVEiCI05iKCworfQ+VfCvrNnNVYUWZgLX3CrsZk7N5TueOolFb1eEo
nLAql7B2HA1C4U1bJS/Btnxh6dM4SliIhurhLDdLu8gVomiSgjIBrowVaWFgr4mx
rKtB6o5/OLynZ4MfFLaBxdq2dnBluWxDX2kc4Nr9bXhJcb43GdCPq5gUswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPuhcJO0P2bcpfyospZIbxAjHOp8MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS02RndrN1FfWnR5bF9LaXlsa2h2RUNNYzZudy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQDM/P1wJjtyU/sk9hc5
1V/PzC7mGWV3lKgxWOzM46r8QFK9W0ByUdIvCW0SVRb1JYDqo+7yAaiS7Z5fXQa5
6GxD6aK9rgl1/GxZxIAFatZWu2+Ay7bbrJFJ93Q7K+lvgsG6gNvXMKUt3Zvh/s4n
T2n0rTewbl1bcFe7UWbb+Ohv/L0KHzHFltLt+Y5oAnHMXohygC8FFUrYcNjUE4F9
AORdT3zQjlSoyLmiS0NTBAVFVaM06xR8o9IyYJHqGgXrDNd2vyKSC19/LpaHLWN5
0Wm/UV1ewBLG0O0E6NtuTeX//StCcDiQpe2e4KUuJFgYDloJeRraZcttojMEwlUp
VR5K
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:54:14 2025 by rpki-client