Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7BdgWN-mYLZELTvkiHMBf_HpCpA.roa
File: 7BdgWN-mYLZELTvkiHMBf_HpCpA.roa (raw, json)
Hash identifier: BFl3j/L3mE8P9bs3CQRuhNGuuHfPRGef2dCsoV1Abz8=
Subject key identifier: EC:17:60:58:DF:A6:60:B6:44:2D:3B:E4:88:73:01:7F:F1:E9:0A:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5FDF69B0000897B134D69C18E53EA5F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7BdgWN-mYLZELTvkiHMBf_HpCpA.roa
Signing time: Tue 12 Dec 2023 21:12:06 +0000
ROA not before: Tue 12 Dec 2023 21:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:df:69:b0:00:08:97:b1:34:d6:9c:18:e5:3e:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 21:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec176058dfa660b6442d3be48873017ff1e90a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:a6:8c:9f:f0:76:a8:81:ab:ec:94:17:59:
28:10:16:eb:97:8d:06:4a:8b:0e:5c:23:33:06:27:
15:88:3f:5f:8d:86:e0:e6:e7:66:37:f6:94:b0:6f:
9d:76:13:32:99:85:66:25:0f:7e:8c:d4:94:d8:eb:
b4:8c:23:3b:a3:05:45:a8:10:65:24:23:66:f9:95:
04:50:9f:06:a9:82:c6:f2:00:5b:55:c3:18:46:a1:
d6:9b:3c:fe:21:1d:a4:e5:a0:61:0e:57:dc:84:6a:
24:0b:f2:ff:b7:00:5c:1d:13:7d:05:4e:d1:3b:50:
3e:d4:12:96:c3:58:ce:f8:b4:d9:68:ee:cb:38:77:
d2:18:a9:cc:1f:6f:ea:40:76:d0:34:16:58:43:7c:
93:4d:c6:09:29:4c:01:47:65:57:de:8b:e9:79:34:
82:bf:cc:d9:10:d6:88:6f:ac:7b:de:37:4f:a0:a5:
ff:85:93:cb:a7:0e:c7:54:77:4a:96:a1:1c:dc:56:
6c:27:ba:7e:b6:a0:50:d0:a6:0f:11:48:51:b8:19:
c1:a2:f7:38:17:6d:07:0d:91:d5:5b:58:8e:b7:be:
97:09:8f:3a:df:79:37:ce:9b:d5:8e:9c:32:d4:59:
50:61:8a:c0:68:7a:34:eb:04:ca:6c:67:de:d9:db:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:60:58:DF:A6:60:B6:44:2D:3B:E4:88:73:01:7F:F1:E9:0A:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7BdgWN-mYLZELTvkiHMBf_HpCpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:f5:78:6d:48:66:c6:ab:56:a8:38:08:2c:a4:68:f8:6b:b0:
a7:74:c2:45:98:2d:db:14:5d:ad:34:76:ba:dd:b1:d5:7d:98:
a4:b8:8b:c7:14:bc:ce:29:69:82:42:0c:26:81:5e:2f:97:d1:
78:74:f9:4b:db:23:30:7c:35:eb:ae:2d:d5:16:39:c2:10:67:
ef:ae:ca:ad:cd:14:7b:7f:1a:35:98:34:a7:71:31:2a:95:cf:
22:61:2c:47:fa:b6:d6:cf:07:2a:7f:4c:21:b0:c9:e3:e9:3a:
48:16:4d:f7:a7:1e:ce:8c:8e:7c:65:dd:6f:50:04:8a:c4:ad:
12:66:10:29:0c:4c:1c:c3:03:58:d9:cb:2c:40:9e:5e:03:31:
b1:fe:b3:61:52:99:15:7b:97:f3:9f:41:d0:c8:67:c1:af:22:
c6:33:49:89:41:5f:22:3f:5d:7b:4e:ac:8c:6e:10:b7:b0:8b:
89:32:04:63:97:dd:e6:58:e9:e4:6c:fc:95:ff:f6:09:4b:33:
5f:9c:75:d8:22:db:b2:fd:22:ee:01:5f:6c:88:2d:91:e3:96:
fa:80:fe:2c:65:c7:d3:b7:a9:16:5d:0e:3b:ab:b6:a8:ec:55:
2b:44:be:33:2b:e1:87:e4:b2:9b:70:5b:7f:a7:31:5a:11:8f:
1b:f7:b4:c6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxf32mwAAiXsTTWnBjlPqXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEyMjExMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzE3NjA1OGRmYTY2MGI2NDQyZDNiZTQ4ODczMDE3ZmYxZTkwYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qemjJ/wdqiBq+yUF1koEBbrl40G
SosOXCMzBicViD9fjYbg5udmN/aUsG+ddhMymYVmJQ9+jNSU2Ou0jCM7owVFqBBl
JCNm+ZUEUJ8GqYLG8gBbVcMYRqHWmzz+IR2k5aBhDlfchGokC/L/twBcHRN9BU7R
O1A+1BKWw1jO+LTZaO7LOHfSGKnMH2/qQHbQNBZYQ3yTTcYJKUwBR2VX3ovpeTSC
v8zZENaIb6x73jdPoKX/hZPLpw7HVHdKlqEc3FZsJ7p+tqBQ0KYPEUhRuBnBovc4
F20HDZHVW1iOt76XCY8633k3zpvVjpwy1FlQYYrAaHo06wTKbGfe2dsq/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOwXYFjfpmC2RC075IhzAX/x6QqQMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvN0JkZ1dOLW1ZTFpFTFR2a2lITUJmX0hwQ3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAID1eG1IZsarVqg4CCyk
aPhrsKd0wkWYLdsUXa00drrdsdV9mKS4i8cUvM4paYJCDCaBXi+X0Xh0+UvbIzB8
NeuuLdUWOcIQZ++uyq3NFHt/GjWYNKdxMSqVzyJhLEf6ttbPByp/TCGwyePpOkgW
TfenHs6Mjnxl3W9QBIrErRJmECkMTBzDA1jZyyxAnl4DMbH+s2FSmRV7l/OfQdDI
Z8GvIsYzSYlBXyI/XXtOrIxuELewi4kyBGOX3eZY6eRs/JX/9glLM1+cddgi27L9
Iu4BX2yILZHjlvqA/ixlx9O3qRZdDjurtqjsVStEvjMr4YfksptwW3+nMVoRjxv3
tMY=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:54:11 2025 by rpki-client