Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I-q8QvTfJMWWoABJepnq3KK-NcA.roa
File: I-q8QvTfJMWWoABJepnq3KK-NcA.roa (raw, json)
Hash identifier: g4miFK+r6RSAmPDzFlT1vH7KY7RghegQm/Jdh6yIjeg=
Subject key identifier: 23:EA:BC:42:F4:DF:24:C5:96:A0:00:49:7A:99:EA:DC:A2:BE:35:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFD98F4914ABE85139AC9F4988F44C40E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I-q8QvTfJMWWoABJepnq3KK-NcA.roa
Signing time: Thu 23 Nov 2023 19:12:21 +0000
ROA not before: Thu 23 Nov 2023 19:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:98:f4:91:4a:be:85:13:9a:c9:f4:98:8f:44:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 19:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23eabc42f4df24c596a000497a99eadca2be35c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:bf:97:16:b8:b4:5c:27:a0:00:02:8e:f4:
11:9b:78:1c:a3:11:2d:c9:5c:50:47:6c:97:dc:e3:
32:d4:31:7b:83:0d:6a:00:c5:4f:27:6c:0a:24:ce:
cd:c8:c9:97:b7:74:c6:0a:4e:5f:be:fd:fd:7c:3e:
78:6a:5c:71:e5:b7:9d:9e:1b:af:c7:60:a7:01:99:
a5:a8:ed:98:12:df:d1:44:c0:20:1b:78:ea:c7:70:
e7:ba:ae:8d:77:90:4a:5e:0c:56:89:3e:86:41:94:
29:6b:01:1e:b7:28:30:5a:a0:2e:66:ba:d7:e9:8f:
f6:72:f3:1a:e3:87:fc:07:fd:89:42:cc:58:65:41:
d7:85:70:36:19:18:9b:57:b5:a2:db:d5:b7:31:88:
5e:19:b5:cd:22:9f:c4:85:97:b0:b3:9a:1d:ae:03:
8d:18:f6:cb:c1:ee:a8:16:3f:ba:f1:00:65:56:af:
e5:0e:32:da:cf:0d:b7:d2:4d:99:67:a1:1a:ed:ca:
a9:61:ca:06:26:c0:3f:62:bb:00:a4:0b:08:5e:3b:
e1:7e:a2:15:07:c9:58:8d:8c:77:93:cd:00:ad:0f:
50:7c:f3:eb:8b:16:7c:09:7e:45:bf:d8:34:06:9f:
87:cd:e6:6e:d7:97:f0:15:72:60:68:f1:c1:86:a5:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:BC:42:F4:DF:24:C5:96:A0:00:49:7A:99:EA:DC:A2:BE:35:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I-q8QvTfJMWWoABJepnq3KK-NcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4e:a3:5e:08:f6:04:21:ef:b2:78:86:8b:ed:22:c0:aa:70:
71:24:f2:18:5a:35:8d:18:84:8a:1f:6d:21:3e:6c:87:68:8a:
47:d8:d1:31:e5:99:e5:5f:62:66:66:cb:e3:c7:71:de:f2:0d:
a7:fe:4d:6e:11:ac:0b:43:86:84:8e:5f:0b:29:7f:58:72:2c:
d4:e5:80:10:32:aa:6d:a4:c2:7b:64:a7:19:ef:5a:08:64:50:
4d:3d:e8:23:fa:b1:0c:c6:8a:95:20:d8:ce:56:34:d1:37:63:
35:e4:8b:87:a2:09:80:a5:fd:6d:3b:0f:18:74:e4:64:22:72:
2a:72:98:87:fb:23:61:1c:da:98:7c:b6:17:45:8c:76:2c:54:
94:b4:3f:50:06:55:43:73:49:94:14:9f:3a:0c:26:63:a2:0d:
4b:79:05:41:53:f5:2b:cc:2b:81:56:f1:75:fd:74:41:6c:44:
8e:bc:c6:3a:3f:03:ea:fb:34:fb:90:ef:e5:1d:08:6d:62:35:
43:9e:27:63:a4:ce:57:09:2e:af:be:5f:08:56:ec:d9:82:65:
27:63:fa:16:a9:b1:ca:1a:92:6d:53:48:63:36:a9:16:a7:99:
84:56:21:e4:f1:c0:c9:51:2a:c8:1f:1f:5f:cd:79:b2:16:69:
ad:76:77:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv9mPSRSr6FE5rJ9JiPRMQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIzMTkxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2VhYmM0MmY0ZGYyNGM1OTZhMDAwNDk3YTk5ZWFkY2EyYmUzNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cm/lxa4tFwnoAACjvQRm3gcoxEt
yVxQR2yX3OMy1DF7gw1qAMVPJ2wKJM7NyMmXt3TGCk5fvv39fD54alxx5bednhuv
x2CnAZmlqO2YEt/RRMAgG3jqx3Dnuq6Nd5BKXgxWiT6GQZQpawEetygwWqAuZrrX
6Y/2cvMa44f8B/2JQsxYZUHXhXA2GRibV7Wi29W3MYheGbXNIp/EhZews5odrgON
GPbLwe6oFj+68QBlVq/lDjLazw230k2ZZ6Ea7cqpYcoGJsA/YrsApAsIXjvhfqIV
B8lYjYx3k80ArQ9QfPPrixZ8CX5Fv9g0Bp+HzeZu15fwFXJgaPHBhqWIJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCPqvEL03yTFlqAASXqZ6tyivjXAMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSS1xOFF2VGZKTVdXb0FCSmVwbnEzS0stTmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKJOo14I9gQh77J4hovt
IsCqcHEk8hhaNY0YhIofbSE+bIdoikfY0THlmeVfYmZmy+PHcd7yDaf+TW4RrAtD
hoSOXwspf1hyLNTlgBAyqm2kwntkpxnvWghkUE096CP6sQzGipUg2M5WNNE3YzXk
i4eiCYCl/W07Dxh05GQicipymIf7I2Ec2ph8thdFjHYsVJS0P1AGVUNzSZQUnzoM
JmOiDUt5BUFT9SvMK4FW8XX9dEFsRI68xjo/A+r7NPuQ7+UdCG1iNUOeJ2OkzlcJ
Lq++XwhW7NmCZSdj+hapscoakm1TSGM2qRanmYRWIeTxwMlRKsgfH1/NebIWaa12
d0Y=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:58 2025 by rpki-client