Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5AwUFaP59nhXqiiWt3iKMFU62jA.roa
File: 5AwUFaP59nhXqiiWt3iKMFU62jA.roa (raw, json)
Hash identifier: KdJYImVztNXDmPI86AWo0NGPVSDRjf7vEuImQSSs8xg=
Subject key identifier: E4:0C:14:15:A3:F9:F6:78:57:AA:28:96:B7:78:8A:30:55:3A:DA:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3D1DB0FF4839E7EEC489FBE2F68779BA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5AwUFaP59nhXqiiWt3iKMFU62jA.roa
Signing time: Wed 06 Dec 2023 03:13:25 +0000
ROA not before: Wed 06 Dec 2023 03:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:1d:b0:ff:48:39:e7:ee:c4:89:fb:e2:f6:87:79:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 03:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40c1415a3f9f67857aa2896b7788a30553ada30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:6e:5c:c9:8c:69:c5:e6:4a:ab:03:21:d6:
82:c9:af:39:e9:b0:b9:1a:b1:18:6d:9e:ca:84:6f:
4f:f0:04:d5:1c:4b:df:3f:af:30:25:11:1f:b6:fe:
15:97:69:b3:c8:9d:e3:d1:82:06:63:7f:e2:1f:90:
98:ed:3e:41:a4:b5:2d:5f:f6:37:6b:c3:6c:34:d7:
de:07:8c:6d:a2:33:de:22:4d:0a:fa:b9:76:10:c3:
d9:93:7c:0f:63:99:57:eb:7b:6e:28:68:f2:f3:9e:
36:34:a4:c1:c5:2a:2e:e9:27:6f:be:b6:2d:ef:af:
71:52:8e:ba:c5:4c:3c:8f:2a:dd:06:88:76:b0:6b:
3c:04:65:ef:49:02:27:81:60:6d:43:02:ee:8d:8e:
2c:12:62:34:f2:79:f7:45:34:3e:96:e9:62:4c:45:
d0:7c:fd:33:32:78:63:5c:f3:d2:80:b4:19:64:12:
a9:fb:7f:62:d8:bf:13:c0:8a:b7:76:5a:ce:da:30:
e1:cc:6b:58:84:a4:71:c8:51:ca:a3:05:5e:d8:31:
4c:cb:be:f8:b7:40:d8:16:b8:b0:fa:73:44:9d:92:
15:ce:66:80:2f:dc:e5:57:c4:34:9d:21:63:a2:94:
92:d5:13:3d:64:8c:3e:0d:e7:44:30:d0:1f:e1:bc:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:14:15:A3:F9:F6:78:57:AA:28:96:B7:78:8A:30:55:3A:DA:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5AwUFaP59nhXqiiWt3iKMFU62jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:45:e3:aa:65:b3:bd:6a:f8:3d:5f:c2:f4:6b:8d:b3:84:a5:
a5:b7:4e:ef:c4:3b:0b:7e:49:02:01:0a:92:cd:83:0b:de:8c:
3c:5e:79:dd:11:93:2f:3e:c6:2a:7e:88:f9:d7:a0:eb:73:bb:
08:31:a0:89:bc:67:98:64:c3:cd:2c:9d:36:ab:96:31:14:9d:
49:ff:f2:9a:45:94:b0:8b:62:e9:48:e7:41:c6:29:7e:09:61:
d3:6b:26:76:63:58:55:d6:a8:9b:da:08:00:aa:c9:f7:ee:af:
31:28:31:1a:44:b2:6d:db:18:51:2a:74:35:20:d5:ea:82:4d:
a1:22:40:53:dd:10:82:a3:a4:31:d2:11:3b:c2:32:6f:7f:89:
b9:05:55:1b:4b:fa:8a:b9:5d:65:eb:14:9d:23:ef:c7:35:ae:
55:7c:af:57:9e:1d:e4:2d:09:39:96:42:e7:31:a2:5c:0d:0e:
b1:c1:09:63:e0:f2:d1:9a:3b:64:ac:1c:e5:6d:8c:87:57:76:
10:3f:c0:2b:2b:f4:14:39:36:02:71:f9:c3:c0:6d:6a:d1:87:
52:d1:bc:fb:ed:8a:2a:98:65:b8:75:7d:f4:95:67:aa:3d:b0:
34:7f:b7:7e:be:05:90:5c:44:1a:80:7c:5a:8a:d4:f9:15:2b:
25:17:4e:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw9HbD/SDnn7sSJ++L2h3m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MDMxMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDBjMTQxNWEzZjlmNjc4NTdhYTI4OTZiNzc4OGEzMDU1M2FkYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3JuXMmMacXmSqsDIdaCya856bC5
GrEYbZ7KhG9P8ATVHEvfP68wJREftv4Vl2mzyJ3j0YIGY3/iH5CY7T5BpLUtX/Y3
a8NsNNfeB4xtojPeIk0K+rl2EMPZk3wPY5lX63tuKGjy8542NKTBxSou6SdvvrYt
769xUo66xUw8jyrdBoh2sGs8BGXvSQIngWBtQwLujY4sEmI08nn3RTQ+luliTEXQ
fP0zMnhjXPPSgLQZZBKp+39i2L8TwIq3dlrO2jDhzGtYhKRxyFHKowVe2DFMy774
t0DYFriw+nNEnZIVzmaAL9zlV8Q0nSFjopSS1RM9ZIw+DedEMNAf4bzxsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOQMFBWj+fZ4V6oolrd4ijBVOtowMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNUF3VUZhUDU5bmhYcWlpV3QzaUtNRlU2MmpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADlF46pls71q+D1fwvRr
jbOEpaW3Tu/EOwt+SQIBCpLNgwvejDxeed0Rky8+xip+iPnXoOtzuwgxoIm8Z5hk
w80snTarljEUnUn/8ppFlLCLYulI50HGKX4JYdNrJnZjWFXWqJvaCACqyffurzEo
MRpEsm3bGFEqdDUg1eqCTaEiQFPdEIKjpDHSETvCMm9/ibkFVRtL+oq5XWXrFJ0j
78c1rlV8r1eeHeQtCTmWQucxolwNDrHBCWPg8tGaO2SsHOVtjIdXdhA/wCsr9BQ5
NgJx+cPAbWrRh1LRvPvtiiqYZbh1ffSVZ6o9sDR/t36+BZBcRBqAfFqK1PkVKyUX
TgQ=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:47 2025 by rpki-client