Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ygF9edkr7AUPn-GVvT49-6sIBE.roa
File: 7ygF9edkr7AUPn-GVvT49-6sIBE.roa (raw, json)
Hash identifier: 99uG6HwN8RNbGp1QqJ35KLK3te6Le8eVXmNLr4clevA=
Subject key identifier: EF:28:05:F5:E7:64:AF:B0:14:3E:7F:86:56:F4:F8:F7:EE:AC:20:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA75A03380A9020D46DF071CA86ED8246
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ygF9edkr7AUPn-GVvT49-6sIBE.roa
Signing time: Tue 07 Nov 2023 01:16:16 +0000
ROA not before: Tue 07 Nov 2023 01:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a7:5a:03:38:0a:90:20:d4:6d:f0:71:ca:86:ed:82:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 01:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2805f5e764afb0143e7f8656f4f8f7eeac2011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:49:c2:63:64:80:51:db:3d:2a:99:9d:58:
ce:c7:35:bf:fe:7f:56:6f:9a:8a:49:f0:5b:f6:6c:
0a:45:cf:aa:80:a5:4a:25:89:d7:48:e6:a1:7f:07:
ff:de:8d:53:68:81:e6:fc:0f:7a:e9:5c:3d:29:aa:
13:69:af:0f:40:42:bf:51:31:9a:90:96:de:be:67:
86:d5:9e:c4:25:8c:0c:e6:b1:0e:74:d4:b3:f5:21:
a8:38:ef:8f:12:e7:e8:f3:b1:a1:5f:ab:62:18:0f:
03:e5:26:cd:11:a8:0e:c2:36:6e:5b:25:47:0e:50:
9e:4e:e8:ee:4c:67:8b:6b:1a:5e:2a:cd:35:06:d4:
99:c0:9c:c2:ad:81:84:f0:b1:6d:0b:03:f3:4c:dc:
6b:c6:2a:86:66:35:5d:e7:b8:40:f3:ce:1a:34:5e:
63:74:99:3e:2d:cc:83:d5:29:09:b6:e5:8e:8d:db:
7d:82:a4:a6:05:db:d7:b2:2e:59:b1:66:5c:56:95:
2d:e3:d4:82:d4:14:a1:bf:43:fe:b1:21:c3:53:39:
cd:dd:8b:ad:5d:91:a1:ae:23:f6:91:e7:44:2f:92:
06:2e:c7:24:2e:cb:b8:d2:0d:4f:6e:dd:82:8f:9c:
10:dd:e7:44:f6:6c:a9:a1:1e:68:9f:b0:f8:76:95:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:05:F5:E7:64:AF:B0:14:3E:7F:86:56:F4:F8:F7:EE:AC:20:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ygF9edkr7AUPn-GVvT49-6sIBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:db:a4:fd:0b:eb:e0:62:aa:1f:be:92:57:bb:9b:f5:84:87:
62:18:e3:23:ec:82:73:4a:16:18:61:40:95:32:0a:10:c6:87:
0e:eb:6b:cc:5f:d5:0e:71:92:27:94:65:0a:74:7e:8e:c6:07:
26:76:02:fb:5e:f0:d9:26:73:67:50:4f:2a:41:0e:17:72:a4:
38:b4:39:67:1e:1a:0b:23:26:fd:2a:3e:3b:4d:1d:de:32:64:
56:a3:0f:05:8b:73:4c:ce:0f:98:6e:6d:c6:51:5e:30:e0:d3:
b1:b2:c1:8f:dc:17:6e:7a:e9:12:63:b9:c0:f2:7b:2b:ed:9a:
10:22:1c:6c:cc:6e:4f:bc:65:6d:ff:32:46:1e:82:75:73:2e:
64:f3:f0:a9:c8:10:1f:97:dd:1e:a8:50:e8:35:a9:df:be:1e:
9a:95:c4:f5:3e:a8:77:b9:4d:06:4d:4a:59:27:84:aa:bf:60:
4f:f5:c4:0e:e7:ba:00:f1:05:b1:bc:ed:a2:66:71:bf:be:86:
33:f2:24:35:5c:d9:4b:61:b7:aa:5e:4c:54:8a:85:7c:bd:16:
56:7a:b8:a2:29:43:5d:b2:c1:bc:fe:ab:49:5b:b0:5f:15:de:
44:09:bd:bc:d2:59:2f:35:62:e3:f0:3f:fa:b5:22:46:41:57:
67:e6:82:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYunWgM4CpAg1G3wccqG7YJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA3MDExNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjI4MDVmNWU3NjRhZmIwMTQzZTdmODY1NmY0ZjhmN2VlYWMyMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxxJwmNkgFHbPSqZnVjOxzW//n9W
b5qKSfBb9mwKRc+qgKVKJYnXSOahfwf/3o1TaIHm/A966Vw9KaoTaa8PQEK/UTGa
kJbevmeG1Z7EJYwM5rEOdNSz9SGoOO+PEufo87GhX6tiGA8D5SbNEagOwjZuWyVH
DlCeTujuTGeLaxpeKs01BtSZwJzCrYGE8LFtCwPzTNxrxiqGZjVd57hA884aNF5j
dJk+LcyD1SkJtuWOjdt9gqSmBdvXsi5ZsWZcVpUt49SC1BShv0P+sSHDUznN3Yut
XZGhriP2kedEL5IGLsckLsu40g1Pbt2Cj5wQ3edE9mypoR5on7D4dpVYYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO8oBfXnZK+wFD5/hlb0+PfurCARMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvN3lnRjllZGtyN0FVUG4tR1Z2VDQ5LTZzSUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACXbpP0L6+Biqh++kle7
m/WEh2IY4yPsgnNKFhhhQJUyChDGhw7ra8xf1Q5xkieUZQp0fo7GByZ2Avte8Nkm
c2dQTypBDhdypDi0OWceGgsjJv0qPjtNHd4yZFajDwWLc0zOD5hubcZRXjDg07Gy
wY/cF2566RJjucDyeyvtmhAiHGzMbk+8ZW3/MkYegnVzLmTz8KnIEB+X3R6oUOg1
qd++HpqVxPU+qHe5TQZNSlknhKq/YE/1xA7nugDxBbG87aJmcb++hjPyJDVc2Uth
t6peTFSKhXy9FlZ6uKIpQ12ywbz+q0lbsF8V3kQJvbzSWS81YuPwP/q1IkZBV2fm
gnU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:38 2025 by rpki-client