Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9dhQaDyghAeATxdAS_6TORWXqQI.roa
File: 9dhQaDyghAeATxdAS_6TORWXqQI.roa (raw, json)
Hash identifier: 7WeQjij3MvbblLGnuaakMhuMwHZh4zqsklcMvrQLjw0=
Subject key identifier: F5:D8:50:68:3C:A0:84:07:80:4F:17:40:4B:FE:93:39:15:97:A9:02
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5AB824098CB10D6BFF776775EE28A29E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9dhQaDyghAeATxdAS_6TORWXqQI.roa
Signing time: Mon 11 Dec 2023 21:11:06 +0000
ROA not before: Mon 11 Dec 2023 21:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:b8:24:09:8c:b1:0d:6b:ff:77:67:75:ee:28:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 21:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5d850683ca08407804f17404bfe93391597a902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:67:df:ca:da:0b:ba:5f:f8:a9:1f:03:5c:e8:
d2:0d:16:b1:d5:8d:a9:64:a7:eb:fa:03:e0:ba:5c:
b6:08:10:0b:5e:6a:75:e9:50:90:f6:c2:a2:ef:95:
73:3e:6d:ae:ea:cb:2b:ae:bd:dc:98:38:a9:9b:05:
47:a7:5e:55:a4:4b:66:a4:86:b7:4e:c2:62:98:4d:
cf:c6:b6:a6:6f:c0:81:a6:e4:6d:71:c0:ad:24:25:
d7:1a:78:4a:7d:3d:fe:97:56:71:45:f9:36:99:30:
24:24:da:18:9b:ef:71:59:cd:81:d1:f7:5b:b3:9d:
d7:3c:e8:08:f3:87:91:2e:1e:ff:23:60:8c:1e:e9:
16:89:cb:cb:2b:ae:a1:14:41:c6:3b:2b:cf:8f:0e:
88:f0:04:27:c5:d5:77:e4:35:05:4a:9b:97:1b:62:
c1:f2:e9:42:24:a9:72:3d:c1:87:4a:8e:a3:26:27:
e0:4c:3a:56:ee:4f:eb:1f:50:16:31:09:58:d6:9a:
74:e6:7c:be:5f:b1:fe:56:36:4c:d3:1f:63:52:d4:
fe:9f:b3:03:09:57:12:ae:53:e0:7d:9a:b5:4e:74:
62:b3:ab:dd:da:aa:4b:9c:02:46:0c:a5:de:df:a5:
87:4a:a9:28:91:05:f6:9c:f1:91:be:65:79:f8:03:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:50:68:3C:A0:84:07:80:4F:17:40:4B:FE:93:39:15:97:A9:02
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9dhQaDyghAeATxdAS_6TORWXqQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:18:a9:a4:e3:be:b3:14:6d:d0:a4:05:0b:a2:3d:9b:ff:2f:
5a:d2:59:ae:e5:5b:64:0c:26:06:d0:23:f6:e2:64:d2:79:ba:
58:3d:27:b5:c8:7c:f2:d4:62:df:92:15:d2:86:01:95:2c:08:
45:11:0e:3a:6c:b8:f6:a5:1c:1f:75:1f:f3:6a:09:70:54:7b:
3b:17:21:da:9f:5f:ed:68:f0:b0:63:c5:44:b5:86:1a:8a:e7:
70:8d:71:54:b9:b5:d7:f3:67:fa:1b:4c:b9:37:fe:32:8f:d3:
71:33:79:dc:b6:be:37:7a:a9:64:0f:89:f2:85:6b:e8:86:85:
c2:e7:8d:92:6c:50:14:0a:1d:98:e1:07:5e:8e:db:08:69:1c:
45:52:01:ec:f6:f8:90:18:ca:e1:ad:1b:23:df:b4:18:72:a2:
65:09:6b:9e:7a:c9:ab:46:33:cb:99:af:d1:80:73:b3:ab:d2:
2f:0a:dc:34:49:7c:f5:37:3f:54:54:ea:61:fe:0a:d1:09:15:
0f:d7:9b:ce:ca:43:43:83:51:43:7b:f1:93:52:69:60:6d:a0:
98:5a:e9:00:3d:a0:f2:eb:13:a1:2e:c9:c7:d7:c6:47:5c:bd:
80:d4:ff:39:e7:ed:79:8a:7c:98:85:5f:9f:f9:41:65:df:fe:
f9:a0:7e:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxauCQJjLENa/93Z3XuKKKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMjExMTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQ4NTA2ODNjYTA4NDA3ODA0ZjE3NDA0YmZlOTMzOTE1OTdhOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ffytoLul/4qR8DXOjSDRax1Y2p
ZKfr+gPguly2CBALXmp16VCQ9sKi75VzPm2u6ssrrr3cmDipmwVHp15VpEtmpIa3
TsJimE3Pxramb8CBpuRtccCtJCXXGnhKfT3+l1ZxRfk2mTAkJNoYm+9xWc2B0fdb
s53XPOgI84eRLh7/I2CMHukWicvLK66hFEHGOyvPjw6I8AQnxdV35DUFSpuXG2LB
8ulCJKlyPcGHSo6jJifgTDpW7k/rH1AWMQlY1pp05ny+X7H+VjZM0x9jUtT+n7MD
CVcSrlPgfZq1TnRis6vd2qpLnAJGDKXe36WHSqkokQX2nPGRvmV5+APLLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPXYUGg8oIQHgE8XQEv+kzkVl6kCMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOWRoUWFEeWdoQWVBVHhkQVNfNlRPUldYcVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACwYqaTjvrMUbdCkBQui
PZv/L1rSWa7lW2QMJgbQI/biZNJ5ulg9J7XIfPLUYt+SFdKGAZUsCEURDjpsuPal
HB91H/NqCXBUezsXIdqfX+1o8LBjxUS1hhqK53CNcVS5tdfzZ/obTLk3/jKP03Ez
edy2vjd6qWQPifKFa+iGhcLnjZJsUBQKHZjhB16O2whpHEVSAez2+JAYyuGtGyPf
tBhyomUJa556yatGM8uZr9GAc7Or0i8K3DRJfPU3P1RU6mH+CtEJFQ/Xm87KQ0OD
UUN78ZNSaWBtoJha6QA9oPLrE6EuycfXxkdcvYDU/znn7XmKfJiFX5/5QWXf/vmg
fq0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:07:21 2025 by rpki-client