Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AplcnzSDevjLQbpHm-mf7qS2kHA.roa
File: AplcnzSDevjLQbpHm-mf7qS2kHA.roa (raw, json)
Hash identifier: nSiJkDWJjjZjwbHtEUoI0obU4Iq9mQYHg1wK15Erk1o=
Subject key identifier: 02:99:5C:9F:34:83:7A:F8:CB:41:BA:47:9B:E9:9F:EE:A4:B6:90:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C65AB7BF8E137ABDB0DF71DA0E7C23EBF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AplcnzSDevjLQbpHm-mf7qS2kHA.roa
Signing time: Thu 14 Dec 2023 00:13:06 +0000
ROA not before: Thu 14 Dec 2023 00:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:ab:7b:f8:e1:37:ab:db:0d:f7:1d:a0:e7:c2:3e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 00:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02995c9f34837af8cb41ba479be99feea4b69070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:82:4a:d4:0b:66:f5:81:e7:e0:6a:06:c9:
08:71:d1:9c:11:23:23:62:2b:1b:13:0a:ba:94:a7:
32:aa:31:2e:87:67:7d:28:88:1e:1a:3a:a7:69:d5:
a4:a2:d8:31:de:4e:43:52:6b:c2:f5:9a:33:92:bb:
33:55:73:8d:8f:fa:7a:25:f0:77:ae:18:d6:5a:4a:
d4:c7:2f:cb:fc:3a:0f:99:24:22:aa:90:71:fb:a3:
b6:82:f2:87:13:82:56:92:8a:9d:50:00:91:fd:48:
a7:c1:a7:cb:c0:46:e1:c5:ef:14:4a:f5:2c:15:b2:
dc:b3:3f:ca:69:e2:1b:96:57:1a:b7:ab:60:ac:ff:
63:6a:fa:f3:98:52:04:8f:60:a9:99:0f:dd:6e:17:
c8:d2:e6:3f:1c:be:60:60:7f:69:2c:c7:74:75:ff:
5c:0c:8e:00:91:f9:96:c9:48:2e:a9:5a:71:9d:18:
96:3b:b9:e5:cf:20:e3:66:55:38:2d:ec:02:3b:4e:
d7:9d:7d:62:63:9d:e2:ca:c9:de:9b:23:66:0e:2e:
c8:6a:43:7d:41:32:cf:ac:cc:c2:58:52:3a:50:d1:
b5:81:4f:20:ed:2e:76:dd:c0:00:0b:45:25:29:4f:
75:18:da:8c:86:be:17:a2:9f:5f:f5:c3:48:00:27:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:5C:9F:34:83:7A:F8:CB:41:BA:47:9B:E9:9F:EE:A4:B6:90:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AplcnzSDevjLQbpHm-mf7qS2kHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:be:41:f2:38:0d:81:f2:c4:b7:fb:df:8b:64:9b:ce:de:14:
d8:c9:82:dd:86:27:ff:2b:81:84:7e:d3:ff:9b:54:a9:bc:31:
2e:00:9f:e6:95:39:0a:d5:79:24:be:b8:44:77:fd:8e:49:d0:
b9:08:2d:b5:b2:45:c4:66:8b:30:ff:6b:0c:bf:a1:7e:a0:4d:
f4:e5:84:2c:8a:41:79:c1:a4:33:2c:80:f7:91:4d:dd:1b:f0:
25:65:b0:4f:77:54:90:34:cb:da:77:c4:19:ba:33:b0:71:2a:
fd:77:1c:45:56:9e:20:f9:f0:3b:73:92:82:40:60:6e:6c:a6:
85:d1:60:b7:31:82:f7:a3:99:a2:a8:36:90:4e:67:f5:ad:6b:
fb:28:a1:c3:4d:c8:58:e8:c9:fe:08:97:8b:26:74:70:68:f3:
db:e2:04:20:01:7e:86:40:74:d0:8c:b7:c1:14:34:c4:4a:51:
b8:d4:e9:ac:8c:53:dc:e4:39:83:32:29:81:2a:3e:6a:eb:38:
c9:9c:13:70:fb:58:17:79:ce:0a:ab:85:63:05:b1:99:b6:f1:
37:02:cc:56:1e:b7:38:e6:9b:4e:b2:6b:bb:d1:bb:aa:45:a3:
90:8c:00:93:5b:b0:57:94:30:5a:88:6b:8a:e3:9d:eb:4e:80:
a1:84:84:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxlq3v44Ter2w33HaDnwj6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MDAxMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjk5NWM5ZjM0ODM3YWY4Y2I0MWJhNDc5YmU5OWZlZWE0YjY5MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rOCStQLZvWB5+BqBskIcdGcESMj
YisbEwq6lKcyqjEuh2d9KIgeGjqnadWkotgx3k5DUmvC9ZozkrszVXONj/p6JfB3
rhjWWkrUxy/L/DoPmSQiqpBx+6O2gvKHE4JWkoqdUACR/UinwafLwEbhxe8USvUs
FbLcsz/KaeIbllcat6tgrP9javrzmFIEj2CpmQ/dbhfI0uY/HL5gYH9pLMd0df9c
DI4AkfmWyUguqVpxnRiWO7nlzyDjZlU4LewCO07XnX1iY53iysnemyNmDi7IakN9
QTLPrMzCWFI6UNG1gU8g7S523cAAC0UlKU91GNqMhr4Xop9f9cNIACcqaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAKZXJ80g3r4y0G6R5vpn+6ktpBwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQXBsY256U0RldmpMUWJwSG0tbWY3cVMya0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACm+QfI4DYHyxLf734tk
m87eFNjJgt2GJ/8rgYR+0/+bVKm8MS4An+aVOQrVeSS+uER3/Y5J0LkILbWyRcRm
izD/awy/oX6gTfTlhCyKQXnBpDMsgPeRTd0b8CVlsE93VJA0y9p3xBm6M7BxKv13
HEVWniD58DtzkoJAYG5spoXRYLcxgvejmaKoNpBOZ/Wta/soocNNyFjoyf4Il4sm
dHBo89viBCABfoZAdNCMt8EUNMRKUbjU6ayMU9zkOYMyKYEqPmrrOMmcE3D7WBd5
zgqrhWMFsZm28TcCzFYetzjmm06ya7vRu6pFo5CMAJNbsFeUMFqIa4rjnetOgKGE
hPU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:50 2025 by rpki-client