Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E4Iv83mD6yAi0ELCeYZBktFPymU.roa
File: E4Iv83mD6yAi0ELCeYZBktFPymU.roa (raw, json)
Hash identifier: jO5OqREm8b+DD2V86ob9YcL9fwqpLKgc+bWSWqsd9MY=
Subject key identifier: 13:82:2F:F3:79:83:EB:20:22:D0:42:C2:79:86:41:92:D1:4F:CA:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9AE30ED131A993C322B6EDA155EADFD0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E4Iv83mD6yAi0ELCeYZBktFPymU.roa
Signing time: Sat 04 Nov 2023 15:10:53 +0000
ROA not before: Sat 04 Nov 2023 15:10:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:9add:59f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:e3:0e:d1:31:a9:93:c3:22:b6:ed:a1:55:ea:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 15:10:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13822ff37983eb2022d042c279864192d14fca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:b2:59:7d:e9:c7:11:dc:bc:9c:25:2e:91:
6c:e5:54:d7:3a:8f:30:b5:2a:a4:12:f3:74:57:fa:
1c:e1:c3:3d:e0:05:ad:71:c5:80:fd:4a:6e:71:6d:
d1:40:d5:6c:ca:56:fd:64:30:fd:2b:80:e4:48:95:
ed:99:a6:98:8d:87:c5:4d:82:08:74:97:b3:f3:88:
57:46:d6:25:b1:2d:8c:e5:ab:7b:f8:b4:90:bd:c9:
ef:d0:fe:81:76:d8:50:e4:b9:fd:04:64:fd:4b:3b:
36:c5:93:be:8c:5d:d1:8a:08:ee:c3:3f:ec:0c:13:
a2:12:04:6f:90:4e:44:1f:6e:89:e5:2c:c0:54:ec:
24:51:26:97:65:f1:7b:d6:bb:14:53:78:49:ec:d5:
e8:79:32:f3:09:6c:0f:95:2d:40:72:6f:78:9b:7e:
bc:89:5f:16:0d:a1:78:b8:28:81:1b:0f:51:26:9f:
55:54:94:a4:b5:1a:22:0f:2b:a5:ba:2e:8a:7a:38:
88:ee:78:ed:a4:64:0e:9e:56:7e:b4:d5:c3:6e:a3:
e8:1e:40:53:fd:75:b3:47:78:01:49:4b:19:92:19:
ad:e9:64:e5:4d:5a:c1:80:61:fc:33:27:49:50:8b:
ba:b1:a3:25:6d:b3:01:00:8c:fa:43:8d:5b:0b:30:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:2F:F3:79:83:EB:20:22:D0:42:C2:79:86:41:92:D1:4F:CA:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/E4Iv83mD6yAi0ELCeYZBktFPymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:bd:bc:19:b3:8c:45:27:59:de:b6:39:76:0e:a9:5c:3f:b1:
9d:48:e0:84:d6:18:de:e1:c0:fb:7a:37:74:14:6d:57:4b:3c:
54:45:27:b1:b4:6b:a2:7b:e4:52:07:15:ce:01:3a:c1:1f:a3:
52:fd:18:72:80:c8:d6:a1:ee:a0:51:f8:85:85:78:e7:6e:a3:
ac:2f:4d:65:40:b0:12:f0:1a:70:d1:e3:76:62:9c:45:c3:86:
45:cd:82:86:50:6b:bf:4f:b3:73:06:6c:3e:55:8c:75:d7:d2:
f6:b6:25:db:74:0b:c3:58:0a:42:39:ae:3e:5b:67:01:a6:98:
17:c2:44:c7:8b:81:1c:cb:63:f3:2d:89:59:9c:e3:ef:52:33:
de:7b:e4:37:c5:1f:6f:92:ae:ff:94:76:e8:79:1b:79:63:eb:
e7:8e:44:c4:31:38:2d:11:ef:d5:62:1c:fb:c2:1b:d6:2f:08:
b1:b8:85:69:fa:65:35:52:95:58:c3:14:ac:2e:1d:2b:10:6e:
c9:3d:8e:8d:bf:fb:16:52:fe:58:c9:3c:d8:db:cd:43:0b:1c:
0f:58:fc:b5:2f:ac:eb:a7:f1:b3:7a:60:6c:17:5d:ce:54:15:
8e:5b:02:7d:c2:6f:a5:a6:95:ec:9a:eb:35:0d:fb:eb:e9:de:
75:19:69:8b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYua4w7RMamTwyK27aFV6t/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MTUxMDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzgyMmZmMzc5ODNlYjIwMjJkMDQyYzI3OTg2NDE5MmQxNGZjYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0+yWX3pxxHcvJwlLpFs5VTXOo8w
tSqkEvN0V/oc4cM94AWtccWA/UpucW3RQNVsylb9ZDD9K4DkSJXtmaaYjYfFTYII
dJez84hXRtYlsS2M5at7+LSQvcnv0P6BdthQ5Ln9BGT9Szs2xZO+jF3Rigjuwz/s
DBOiEgRvkE5EH26J5SzAVOwkUSaXZfF71rsUU3hJ7NXoeTLzCWwPlS1Acm94m368
iV8WDaF4uCiBGw9RJp9VVJSktRoiDyului6KejiI7njtpGQOnlZ+tNXDbqPoHkBT
/XWzR3gBSUsZkhmt6WTlTVrBgGH8MydJUIu6saMlbbMBAIz6Q41bCzAJ4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBOCL/N5g+sgItBCwnmGQZLRT8plMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRTRJdjgzbUQ2eUFpMEVMQ2VZWkJrdEZQeW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAL+9vBmzjEUnWd62OXYO
qVw/sZ1I4ITWGN7hwPt6N3QUbVdLPFRFJ7G0a6J75FIHFc4BOsEfo1L9GHKAyNah
7qBR+IWFeOduo6wvTWVAsBLwGnDR43ZinEXDhkXNgoZQa79Ps3MGbD5VjHXX0va2
Jdt0C8NYCkI5rj5bZwGmmBfCRMeLgRzLY/MtiVmc4+9SM9575DfFH2+Srv+Uduh5
G3lj6+eORMQxOC0R79ViHPvCG9YvCLG4hWn6ZTVSlVjDFKwuHSsQbsk9jo2/+xZS
/ljJPNjbzUMLHA9Y/LUvrOun8bN6YGwXXc5UFY5bAn3Cb6Wmleya6zUN++vp3nUZ
aYs=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:19 2025 by rpki-client