Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AY1hSH6CQIi77xewaigJXRf6W1g.roa
File: AY1hSH6CQIi77xewaigJXRf6W1g.roa (raw, json)
Hash identifier: c1+NHl3jt5jfuagvReJ6ECXb8UarZVIecyWoACvMZns=
Subject key identifier: 01:8D:61:48:7E:82:40:88:BB:EF:17:B0:6A:28:09:5D:17:FA:5B:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD9573AE1E006BABE47A7E3BC458EE5F0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AY1hSH6CQIi77xewaigJXRf6W1g.roa
Signing time: Thu 28 Sep 2023 01:11:27 +0000
ROA not before: Thu 28 Sep 2023 01:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:57:3a:e1:e0:06:ba:be:47:a7:e3:bc:45:8e:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 01:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=018d61487e824088bbef17b06a28095d17fa5b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:ee:14:30:15:e4:e5:54:77:ba:3b:f6:b5:
34:b0:9d:60:64:7c:2f:b3:36:4b:92:8f:cd:db:c5:
04:d0:b0:fd:1c:84:fd:1d:2f:ce:89:06:07:d2:d6:
7f:6b:f9:4f:48:ea:50:7e:93:0b:50:8a:77:d9:00:
0e:3f:ed:0a:83:8d:e7:76:3d:21:64:ef:a3:a4:0a:
ee:e7:a8:09:f8:01:71:77:cf:93:38:aa:5c:f5:61:
a4:9c:a9:a9:66:6e:84:74:c8:ba:24:1d:8d:6b:9f:
0f:a1:61:fb:a2:b7:32:bd:26:7a:da:61:12:15:e1:
aa:0c:68:ac:12:89:6e:be:d1:80:21:88:75:df:da:
e4:4b:51:f0:1d:2d:cf:32:a9:c9:ee:84:9a:67:57:
4b:c4:12:dc:73:fd:01:c3:c9:ec:b1:60:71:fd:95:
74:8d:ca:4c:4d:d1:72:ca:c4:ff:b9:6a:fc:50:ca:
0e:c9:10:bf:3b:15:9a:35:51:6f:b5:cd:0c:fb:d0:
b2:da:8f:11:f0:1e:7b:fe:f3:d6:5f:5b:9f:df:ae:
0b:09:01:e7:ac:2e:d3:77:fd:ed:d9:30:d7:b4:27:
1b:27:f6:a5:80:83:41:a4:89:e9:56:70:26:99:35:
d0:80:16:a6:8c:d7:5a:6d:3d:6c:21:b4:c5:3a:83:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8D:61:48:7E:82:40:88:BB:EF:17:B0:6A:28:09:5D:17:FA:5B:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AY1hSH6CQIi77xewaigJXRf6W1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:d7:11:eb:11:6c:da:e4:a6:1e:ed:b3:39:32:83:17:36:4e:
ff:37:d3:3f:dc:38:29:a1:bb:22:88:90:41:84:d2:69:60:74:
57:e5:a4:60:95:c3:11:20:5c:da:34:8d:f1:73:c3:4f:5a:93:
6c:98:18:74:ff:e8:eb:1c:e9:7f:67:d1:86:43:98:ac:a2:55:
e4:40:17:02:33:d4:fd:79:c2:09:6f:69:5f:84:7a:38:38:47:
55:46:91:41:e9:4b:90:8c:7c:20:40:39:1c:61:eb:5b:5e:e9:
bc:31:43:c8:43:16:7f:38:db:39:e7:35:ad:db:42:d8:e1:2a:
33:70:1f:c9:59:46:47:42:9c:f0:bc:9a:9e:02:49:4e:00:69:
c3:b6:4d:88:59:2d:5d:a5:e6:6b:16:1b:01:c6:bc:ba:67:b3:
e2:23:e4:c7:7f:db:c0:b8:cc:96:2a:b9:6c:7d:0c:af:8e:33:
75:5d:96:5c:be:eb:34:f2:16:bc:e6:29:af:eb:7e:a5:71:59:
b7:68:85:81:50:0c:0e:ab:68:e6:24:65:5d:3f:bd:ba:79:9b:
49:5e:96:d2:08:ee:dc:7d:aa:a6:84:99:ef:7a:76:ac:44:43:
0d:ff:ea:2e:f4:a7:ba:b5:4b:27:16:6b:8c:2e:c2:29:b3:5a:
c0:1f:27:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrZVzrh4Aa6vken47xFjuXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI4MDExMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMThkNjE0ODdlODI0MDg4YmJlZjE3YjA2YTI4MDk1ZDE3ZmE1YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3zuFDAV5OVUd7o79rU0sJ1gZHwv
szZLko/N28UE0LD9HIT9HS/OiQYH0tZ/a/lPSOpQfpMLUIp32QAOP+0Kg43ndj0h
ZO+jpAru56gJ+AFxd8+TOKpc9WGknKmpZm6EdMi6JB2Na58PoWH7orcyvSZ62mES
FeGqDGisEoluvtGAIYh139rkS1HwHS3PMqnJ7oSaZ1dLxBLcc/0Bw8nssWBx/ZV0
jcpMTdFyysT/uWr8UMoOyRC/OxWaNVFvtc0M+9Cy2o8R8B57/vPWX1uf364LCQHn
rC7Td/3t2TDXtCcbJ/algINBpInpVnAmmTXQgBamjNdabT1sIbTFOoPiTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAGNYUh+gkCIu+8XsGooCV0X+ltYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQVkxaFNINkNRSWk3N3hld2FpZ0pYUmY2VzFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJfXEesRbNrkph7tszky
gxc2Tv830z/cOCmhuyKIkEGE0mlgdFflpGCVwxEgXNo0jfFzw09ak2yYGHT/6Osc
6X9n0YZDmKyiVeRAFwIz1P15wglvaV+Eejg4R1VGkUHpS5CMfCBAORxh61te6bwx
Q8hDFn842znnNa3bQtjhKjNwH8lZRkdCnPC8mp4CSU4AacO2TYhZLV2l5msWGwHG
vLpns+Ij5Md/28C4zJYquWx9DK+OM3Vdlly+6zTyFrzmKa/rfqVxWbdohYFQDA6r
aOYkZV0/vbp5m0leltII7tx9qqaEme96dqxEQw3/6i70p7q1SycWa4wuwimzWsAf
J1w=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:35:54 2025 by rpki-client