Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8EfHnOqEiCURANoBndTGEwmD5c0.roa
File: 8EfHnOqEiCURANoBndTGEwmD5c0.roa (raw, json)
Hash identifier: /ADqFpaV7ZrLD2j7s7Aj7XCSRg0ehQBJP9I37A+ymtM=
Subject key identifier: F0:47:C7:9C:EA:84:88:25:11:00:DA:01:9D:D4:C6:13:09:83:E5:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2057A25E2CD26AB126BCA093872B9CC1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8EfHnOqEiCURANoBndTGEwmD5c0.roa
Signing time: Wed 11 Oct 2023 20:04:55 +0000
ROA not before: Wed 11 Oct 2023 20:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2056:f18e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:57:a2:5e:2c:d2:6a:b1:26:bc:a0:93:87:2b:9c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 20:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f047c79cea8488251100da019dd4c6130983e5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:58:30:32:17:65:0b:01:32:2f:94:26:1b:
4e:ea:b0:d1:41:9c:ae:66:46:1a:49:50:2d:b4:67:
3f:b3:d8:13:c2:99:d1:a3:e7:66:3e:50:ab:c9:e2:
b2:ff:a0:11:24:34:1f:eb:bf:ac:56:79:46:ae:f2:
ec:19:d5:1f:5d:02:63:d7:e9:d7:8b:cf:c7:e1:01:
42:3e:81:9f:c1:38:43:cc:e8:0f:1a:41:3f:d2:19:
71:fb:d5:74:c1:46:13:5e:67:ec:8a:cf:85:85:02:
04:5a:95:db:2f:45:ef:c0:0f:c0:ce:2b:4c:86:55:
32:d0:47:89:7a:83:fe:9a:14:0b:43:6a:0b:4e:7d:
23:6d:32:9c:7b:c2:ee:82:3a:09:dc:f8:05:8f:b8:
80:d5:18:ad:de:dd:d2:f3:44:4a:7f:ed:0e:29:6f:
41:97:94:48:fd:7a:f0:9f:89:b7:c4:c0:93:28:36:
d9:65:41:78:00:5a:46:97:7b:f2:c0:a6:6a:35:0d:
d2:bb:ba:f2:6d:b4:e9:d9:87:b1:ac:e8:74:73:fb:
09:f8:a2:74:fb:0b:b4:13:17:02:55:9c:c2:c7:3c:
86:e9:1b:19:a7:5c:dd:50:b9:26:96:eb:90:3b:11:
e5:f1:c1:02:c4:64:6a:f2:83:bd:31:17:6c:d5:e7:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:C7:9C:EA:84:88:25:11:00:DA:01:9D:D4:C6:13:09:83:E5:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8EfHnOqEiCURANoBndTGEwmD5c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:90:47:63:a0:67:cd:bb:82:a4:27:8e:05:7a:70:39:d5:fd:
ee:f6:4d:2e:4e:b9:e7:85:44:5e:72:c0:ee:99:88:19:bb:95:
a7:0c:6b:56:4c:76:b5:aa:5b:0f:8d:5d:dd:36:01:f4:38:51:
a1:f6:c2:90:61:43:ce:e1:14:00:c7:72:39:b6:b0:2d:28:4b:
f5:a8:f3:31:9e:a9:ef:4b:e1:b7:a9:15:8a:0e:c7:e1:ac:b4:
9d:39:01:55:fa:1c:7e:6b:0f:8c:dd:48:92:bc:34:e9:bf:2f:
f0:a4:2c:16:58:e2:48:87:30:f3:02:6a:9f:cc:78:3b:46:91:
0c:d6:3b:a6:f3:ae:c3:10:85:4b:8b:ce:c7:87:10:49:31:e8:
c9:7a:df:67:8c:d8:cf:b9:a1:13:f1:96:b0:52:c9:ee:6b:59:
04:c8:f1:a7:1f:2f:17:5a:c9:6b:8b:59:0b:03:3f:05:75:8c:
c6:34:6a:d0:3d:7b:47:0f:0c:cd:af:ab:41:69:14:be:4f:81:
9b:15:4b:09:61:e5:a8:4e:3d:d4:b6:63:57:ec:7e:53:26:0a:
66:8f:9f:dc:28:44:45:ad:66:a8:a0:18:9e:d1:4f:ea:ac:de:
a1:9b:7c:5d:2e:39:65:da:d6:bc:43:cf:89:1c:04:5d:fc:15:
e6:03:ff:61
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsgV6JeLNJqsSa8oJOHK5zBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDExMjAwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDQ3Yzc5Y2VhODQ4ODI1MTEwMGRhMDE5ZGQ0YzYxMzA5ODNlNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuZYMDIXZQsBMi+UJhtO6rDRQZyu
ZkYaSVAttGc/s9gTwpnRo+dmPlCryeKy/6ARJDQf67+sVnlGrvLsGdUfXQJj1+nX
i8/H4QFCPoGfwThDzOgPGkE/0hlx+9V0wUYTXmfsis+FhQIEWpXbL0XvwA/AzitM
hlUy0EeJeoP+mhQLQ2oLTn0jbTKce8LugjoJ3PgFj7iA1Rit3t3S80RKf+0OKW9B
l5RI/Xrwn4m3xMCTKDbZZUF4AFpGl3vywKZqNQ3Su7rybbTp2YexrOh0c/sJ+KJ0
+wu0ExcCVZzCxzyG6RsZp1zdULkmluuQOxHl8cECxGRq8oO9MRds1edkRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPBHx5zqhIglEQDaAZ3UxhMJg+XNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOEVmSG5PcUVpQ1VSQU5vQm5kVEdFd21ENWMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIWQR2OgZ827gqQnjgV6
cDnV/e72TS5OueeFRF5ywO6ZiBm7lacMa1ZMdrWqWw+NXd02AfQ4UaH2wpBhQ87h
FADHcjm2sC0oS/Wo8zGeqe9L4bepFYoOx+GstJ05AVX6HH5rD4zdSJK8NOm/L/Ck
LBZY4kiHMPMCap/MeDtGkQzWO6bzrsMQhUuLzseHEEkx6Ml632eM2M+5oRPxlrBS
ye5rWQTI8acfLxdayWuLWQsDPwV1jMY0atA9e0cPDM2vq0FpFL5PgZsVSwlh5ahO
PdS2Y1fsflMmCmaPn9woREWtZqigGJ7RT+qs3qGbfF0uOWXa1rxDz4kcBF38FeYD
/2E=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:02 2025 by rpki-client