Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/56vIJ8koyCHXCMVaKzPVJ_KBK8w.roa
File: 56vIJ8koyCHXCMVaKzPVJ_KBK8w.roa (raw, json)
Hash identifier: x6hNOGri9T6S8WwCTtCmRzOscxjtaLfad50S0MTN3fc=
Subject key identifier: E7:AB:C8:27:C9:28:C8:21:D7:08:C5:5A:2B:33:D5:27:F2:81:2B:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BACAD43A5649E84B83B60D9F692416550
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/56vIJ8koyCHXCMVaKzPVJ_KBK8w.roa
Signing time: Wed 08 Nov 2023 02:05:17 +0000
ROA not before: Wed 08 Nov 2023 02:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:acac:6168/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:ad:43:a5:64:9e:84:b8:3b:60:d9:f6:92:41:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 02:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7abc827c928c821d708c55a2b33d527f2812bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:68:51:6f:1d:c4:e9:c6:2f:12:91:c6:20:
ef:8c:20:bc:da:ac:f7:0e:a3:69:54:1b:17:ad:39:
f7:68:03:9c:7c:44:4a:07:48:ef:90:f2:90:e9:08:
78:9e:f1:30:58:b3:36:a9:fe:d5:8f:dd:6a:a4:65:
d9:4e:91:0c:03:da:b2:2d:a9:df:31:83:51:75:dc:
56:6a:05:3c:f9:8d:2e:f0:6b:ed:5e:3b:60:4d:03:
43:f6:f5:fa:6a:9c:3c:8c:dd:f3:db:74:d4:93:26:
4c:57:4d:ca:4b:d2:23:a6:e8:ce:5b:2e:a6:36:c4:
a7:b4:e7:6f:ba:2f:9a:d8:f3:3b:0f:75:7c:56:ad:
c6:a0:86:3b:ab:14:b1:c5:8c:45:14:2c:5e:d4:b3:
0d:75:05:5e:c3:1a:74:7b:6e:ee:02:9c:f3:48:a6:
a1:26:7e:cc:a3:cd:4c:21:ea:70:da:6f:8e:37:53:
4d:1a:51:7c:52:7b:86:00:ea:94:e5:2f:ff:12:0b:
f1:42:bd:27:72:e1:b2:3a:23:e0:ac:e8:c9:f9:cb:
75:70:ed:67:61:50:e7:3f:e2:19:9b:51:8f:e3:8f:
3f:bb:09:5e:41:6f:8a:4e:88:3e:1b:bd:25:db:40:
74:01:a7:d3:98:5b:78:1a:4b:77:a8:f0:68:3c:06:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:C8:27:C9:28:C8:21:D7:08:C5:5A:2B:33:D5:27:F2:81:2B:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/56vIJ8koyCHXCMVaKzPVJ_KBK8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d7:e4:d6:0b:32:66:e9:09:cf:3a:40:78:53:6a:b9:af:40:
e8:a0:78:f3:b0:85:85:7c:56:bb:45:d2:e8:bf:1c:69:52:1e:
33:f0:d1:f4:ec:11:73:c3:b4:1c:14:71:2d:20:a8:2e:ec:5e:
67:32:c6:dd:5c:54:37:3d:42:ef:77:b6:d8:18:fc:d4:e8:4e:
9b:82:ac:9f:3c:2b:e4:2a:18:40:b6:1d:e6:b2:6a:44:4d:c2:
b8:b6:70:b4:56:70:12:7f:e4:61:34:aa:b0:c2:3a:1b:36:8d:
1c:6c:65:77:9e:55:b9:bb:88:b5:85:30:6c:2f:b2:ba:27:f0:
21:41:96:9b:40:7b:72:ac:be:0d:f9:cb:08:41:4f:56:04:5b:
2b:90:6e:1f:92:d3:d3:48:14:c3:54:5b:13:94:11:a1:48:1f:
1e:37:86:19:d1:f3:ba:06:af:c8:a2:c8:8f:f5:84:3c:00:f9:
04:22:5a:7e:60:6e:20:8d:4b:7c:40:3d:d4:85:35:b6:3c:23:
75:e3:78:32:ba:51:54:63:fe:45:d5:e0:f0:89:8b:3d:31:11:
7c:6e:12:3e:c6:a1:cb:54:f6:b4:4b:bc:83:d9:24:f7:9a:c8:
6d:53:35:d7:52:99:64:69:9b:e4:93:23:8f:dd:fc:cf:89:ce:
89:00:72:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYusrUOlZJ6EuDtg2faSQWVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA4MDIwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2FiYzgyN2M5MjhjODIxZDcwOGM1NWEyYjMzZDUyN2YyODEyYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16FoUW8dxOnGLxKRxiDvjCC82qz3
DqNpVBsXrTn3aAOcfERKB0jvkPKQ6Qh4nvEwWLM2qf7Vj91qpGXZTpEMA9qyLanf
MYNRddxWagU8+Y0u8GvtXjtgTQND9vX6apw8jN3z23TUkyZMV03KS9IjpujOWy6m
NsSntOdvui+a2PM7D3V8Vq3GoIY7qxSxxYxFFCxe1LMNdQVewxp0e27uApzzSKah
Jn7Mo81MIepw2m+ON1NNGlF8UnuGAOqU5S//EgvxQr0ncuGyOiPgrOjJ+ct1cO1n
YVDnP+IZm1GP448/uwleQW+KTog+G70l20B0AafTmFt4Gkt3qPBoPAbCjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOeryCfJKMgh1wjFWisz1SfygSvMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNTZ2SUo4a295Q0hYQ01WYUt6UFZKX0tCSzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJzX5NYLMmbpCc86QHhT
armvQOigePOwhYV8VrtF0ui/HGlSHjPw0fTsEXPDtBwUcS0gqC7sXmcyxt1cVDc9
Qu93ttgY/NToTpuCrJ88K+QqGEC2HeayakRNwri2cLRWcBJ/5GE0qrDCOhs2jRxs
ZXeeVbm7iLWFMGwvsron8CFBlptAe3Ksvg35ywhBT1YEWyuQbh+S09NIFMNUWxOU
EaFIHx43hhnR87oGr8iiyI/1hDwA+QQiWn5gbiCNS3xAPdSFNbY8I3XjeDK6UVRj
/kXV4PCJiz0xEXxuEj7GoctU9rRLvIPZJPeayG1TNddSmWRpm+STI4/d/M+JzokA
cmI=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:04 2025 by rpki-client