Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3_unnflHSX2IBYSkU1iAZLGVKxg.roa
File: 3_unnflHSX2IBYSkU1iAZLGVKxg.roa (raw, json)
Hash identifier: bHq81IivcgPnK7Ts3Rfb3luFYTdrYqUi6jxitghx8rM=
Subject key identifier: DF:FB:A7:9D:F9:47:49:7D:88:05:84:A4:53:58:80:64:B1:95:2B:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C205EA0B201132EE4706466647F824A05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3_unnflHSX2IBYSkU1iAZLGVKxg.roa
Signing time: Thu 30 Nov 2023 13:15:21 +0000
ROA not before: Thu 30 Nov 2023 13:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:5e:a0:b2:01:13:2e:e4:70:64:66:64:7f:82:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 13:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dffba79df947497d880584a453588064b1952b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:f8:6e:ac:a9:3e:7c:86:da:3a:52:ab:81:
c5:c8:86:54:2f:77:d1:d0:00:cd:2a:88:1c:b4:f4:
7f:e9:ef:cb:8f:a8:2e:77:92:c8:d2:0d:fb:73:84:
4b:61:7c:6a:75:62:6b:5f:44:10:03:23:28:6f:83:
40:0c:1c:f1:fe:e4:19:49:62:89:e9:28:21:4b:a5:
b9:91:08:75:51:43:8a:a2:45:78:5b:5d:45:ae:70:
92:2b:18:e2:59:90:28:66:2c:64:54:19:30:af:70:
3d:ca:89:e2:b1:3b:60:df:cc:ef:e0:0b:fe:a0:1f:
7e:af:c6:46:ba:f6:00:9f:fd:cb:89:e9:d7:83:31:
8f:42:5a:b0:0e:1d:1b:82:cf:99:da:b1:72:5b:9b:
93:e3:cc:6a:09:7a:cd:dd:b7:f6:af:68:0e:01:ed:
d1:4e:7f:df:bd:f7:84:b8:20:72:19:e7:ce:be:ea:
f9:b6:b6:d6:59:2d:fe:7b:8c:91:5b:4f:08:19:33:
3b:d3:dc:26:22:9d:58:ad:7f:be:4a:97:25:23:06:
43:1c:c9:c0:b5:d3:b5:13:d0:7d:aa:77:7d:5c:0c:
08:1e:da:d4:7b:89:95:95:7a:ed:53:8c:70:8a:94:
5e:8d:74:e0:04:48:5c:50:62:0b:15:77:ed:39:bc:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:A7:9D:F9:47:49:7D:88:05:84:A4:53:58:80:64:B1:95:2B:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3_unnflHSX2IBYSkU1iAZLGVKxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:10:ab:04:99:8b:f4:8f:d9:9b:ef:8c:7c:ae:31:f0:3f:39:
25:86:9d:be:33:ae:18:d6:0a:9d:f7:e3:7f:67:79:73:2c:03:
14:a7:c3:b7:6a:be:0a:97:8d:a8:5f:c0:30:bb:87:22:ac:36:
a1:b1:bb:3b:b3:05:05:b2:76:d3:9e:93:d8:33:af:39:22:d5:
73:d1:b0:85:eb:b0:63:d6:4e:54:22:01:e9:6c:b8:02:c9:95:
c8:a6:44:71:82:a8:a3:87:58:6e:b4:10:75:18:6d:09:2b:db:
0b:8d:4a:c1:60:bc:44:fb:00:b0:bf:44:fc:57:b0:24:3f:86:
28:e5:59:4f:e5:c8:4a:ce:6c:4a:ba:80:b2:43:8d:20:f9:72:
36:97:1f:c4:7b:47:66:93:a2:ce:ea:c6:3e:4c:78:45:6e:7e:
8d:6b:5e:e9:ea:3c:cb:ac:ad:d9:83:a3:3d:77:69:85:17:72:
c1:c6:94:2e:ed:59:c4:47:d9:b8:8b:93:4c:7d:f3:3e:9d:50:
c7:75:76:fd:c1:c2:62:21:3e:cf:2e:7e:9e:86:5e:fb:fc:86:
fa:d3:7c:95:ce:83:87:b9:6a:05:c8:52:c6:01:66:24:0f:a8:
ce:59:25:44:eb:61:ef:b3:a8:16:f4:a9:19:05:6e:09:3d:8b:
48:91:a7:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwgXqCyARMu5HBkZmR/gkoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTMwMTMxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmZiYTc5ZGY5NDc0OTdkODgwNTg0YTQ1MzU4ODA2NGIxOTUyYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/4bqypPnyG2jpSq4HFyIZUL3fR
0ADNKogctPR/6e/Lj6gud5LI0g37c4RLYXxqdWJrX0QQAyMob4NADBzx/uQZSWKJ
6SghS6W5kQh1UUOKokV4W11FrnCSKxjiWZAoZixkVBkwr3A9yonisTtg38zv4Av+
oB9+r8ZGuvYAn/3LienXgzGPQlqwDh0bgs+Z2rFyW5uT48xqCXrN3bf2r2gOAe3R
Tn/fvfeEuCByGefOvur5trbWWS3+e4yRW08IGTM709wmIp1YrX++SpclIwZDHMnA
tdO1E9B9qnd9XAwIHtrUe4mVlXrtU4xwipRejXTgBEhcUGILFXftObyLoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN/7p535R0l9iAWEpFNYgGSxlSsYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvM191bm5mbEhTWDJJQllTa1UxaUFaTEdWS3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKEQqwSZi/SP2ZvvjHyu
MfA/OSWGnb4zrhjWCp33439neXMsAxSnw7dqvgqXjahfwDC7hyKsNqGxuzuzBQWy
dtOek9gzrzki1XPRsIXrsGPWTlQiAelsuALJlcimRHGCqKOHWG60EHUYbQkr2wuN
SsFgvET7ALC/RPxXsCQ/hijlWU/lyErObEq6gLJDjSD5cjaXH8R7R2aTos7qxj5M
eEVufo1rXunqPMusrdmDoz13aYUXcsHGlC7tWcRH2biLk0x98z6dUMd1dv3BwmIh
Ps8ufp6GXvv8hvrTfJXOg4e5agXIUsYBZiQPqM5ZJUTrYe+zqBb0qRkFbgk9i0iR
p2o=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:42 2025 by rpki-client