Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1wSAzqLNhzK04BqJ7yUCKjObkI.roa
File: K1wSAzqLNhzK04BqJ7yUCKjObkI.roa (raw, json)
Hash identifier: M2VWrwdoKK5W5lS7vX0QS01sJ/MSQy5tUFexfzoEIkQ=
Subject key identifier: 2B:5C:12:03:3A:8B:36:1C:CA:D3:80:6A:27:BC:94:08:A8:CE:6E:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AECE059C0AB46C06AF042F25405873864
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1wSAzqLNhzK04BqJ7yUCKjObkI.roa
Signing time: Sun 01 Oct 2023 20:14:00 +0000
ROA not before: Sun 01 Oct 2023 20:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:e0:59:c0:ab:46:c0:6a:f0:42:f2:54:05:87:38:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 20:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b5c12033a8b361ccad3806a27bc9408a8ce6e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:a2:2a:a1:23:38:d3:33:d5:e4:81:87:b2:
9b:fe:4d:7e:87:65:17:36:a7:4e:49:3a:fe:3c:bd:
1d:d2:7c:ea:77:66:21:b9:16:c4:82:43:78:95:94:
19:bc:d5:68:d5:52:e2:72:95:96:d8:4b:d0:b0:20:
25:e9:77:f9:80:61:b4:6f:36:f5:fe:fa:d4:67:c2:
b2:32:f1:ec:75:9d:4a:86:46:f8:15:6f:e0:d3:ae:
9f:a4:e2:2f:9b:84:75:da:43:69:54:01:93:28:3b:
78:b0:bd:a9:ae:63:5b:08:02:a4:c0:67:22:81:7c:
25:a8:dd:bb:7e:1c:a3:73:a5:7c:6f:44:6b:36:1b:
30:e1:2f:cf:c7:f2:42:a0:ae:6f:f2:4d:64:98:8c:
75:d9:2e:a1:27:8d:9e:f8:b6:6e:5e:97:d7:93:07:
23:7b:c4:0a:26:63:80:ea:0e:6b:56:06:fb:47:17:
1a:20:18:b3:41:72:e4:5d:b6:ec:8b:05:f6:20:69:
41:1e:ec:7c:55:f0:e0:84:40:8d:2c:3e:06:b2:8e:
91:88:56:3c:80:f0:1c:6d:59:37:af:e0:ef:df:2d:
a1:fc:1d:77:e8:c4:e3:bf:c4:52:84:91:fa:f0:c0:
e9:dd:4e:cb:22:46:3b:cd:cf:15:57:6b:fb:87:cf:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:12:03:3A:8B:36:1C:CA:D3:80:6A:27:BC:94:08:A8:CE:6E:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K1wSAzqLNhzK04BqJ7yUCKjObkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:27:f6:b5:8e:e5:dc:c9:37:31:fd:e1:ea:87:c1:01:91:ef:
57:b1:f1:4e:94:77:c8:9b:c9:24:b0:ef:1b:77:47:69:4c:91:
b0:80:46:d1:26:fa:c2:a6:36:e3:e4:9a:de:ee:ec:98:d0:35:
f6:8a:61:fd:cc:6d:8a:59:9e:e7:fc:cd:b6:7d:ff:e1:d8:70:
2a:2d:51:ac:4d:ae:a8:b3:7c:23:78:a4:d9:22:f9:25:23:fa:
9b:55:47:01:1f:a0:c2:c9:4a:c9:83:95:94:b5:b9:6a:70:22:
c7:70:88:24:e5:36:00:a0:92:da:e6:b4:1a:1c:28:e5:92:5d:
31:ed:fc:b4:29:7c:52:68:47:bd:f0:e2:c4:de:49:90:c5:18:
8f:67:88:2a:a8:1e:4b:fd:06:b2:c6:48:30:6f:ff:4d:1c:9b:
6b:8c:f9:8e:66:26:55:69:e9:21:15:5a:6c:84:eb:d3:6e:6f:
9e:8e:7c:f9:d0:48:0b:46:b8:44:80:9a:48:ec:b7:e2:35:5d:
d0:77:a6:46:36:d6:08:fc:25:11:dd:21:15:79:d3:c8:13:16:
ea:90:c6:cd:28:0f:6b:2d:6c:76:ff:57:5c:4c:51:f3:33:ae:
2e:ca:0a:e6:1d:a6:48:db:cc:81:ad:16:08:12:b7:52:b0:40:
0d:91:96:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrs4FnAq0bAavBC8lQFhzhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAxMjAxNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjVjMTIwMzNhOGIzNjFjY2FkMzgwNmEyN2JjOTQwOGE4Y2U2ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ2iKqEjONMz1eSBh7Kb/k1+h2UX
NqdOSTr+PL0d0nzqd2YhuRbEgkN4lZQZvNVo1VLicpWW2EvQsCAl6Xf5gGG0bzb1
/vrUZ8KyMvHsdZ1Khkb4FW/g066fpOIvm4R12kNpVAGTKDt4sL2prmNbCAKkwGci
gXwlqN27fhyjc6V8b0RrNhsw4S/Px/JCoK5v8k1kmIx12S6hJ42e+LZuXpfXkwcj
e8QKJmOA6g5rVgb7RxcaIBizQXLkXbbsiwX2IGlBHux8VfDghECNLD4Gso6RiFY8
gPAcbVk3r+Dv3y2h/B136MTjv8RShJH68MDp3U7LIkY7zc8VV2v7h888BQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCtcEgM6izYcytOAaie8lAiozm5CMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvSzF3U0F6cUxOaHpLMDRCcUo3eVVDS2pPYmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFEn9rWO5dzJNzH94eqH
wQGR71ex8U6Ud8ibySSw7xt3R2lMkbCARtEm+sKmNuPkmt7u7JjQNfaKYf3MbYpZ
nuf8zbZ9/+HYcCotUaxNrqizfCN4pNki+SUj+ptVRwEfoMLJSsmDlZS1uWpwIsdw
iCTlNgCgktrmtBocKOWSXTHt/LQpfFJoR73w4sTeSZDFGI9niCqoHkv9BrLGSDBv
/00cm2uM+Y5mJlVp6SEVWmyE69Nub56OfPnQSAtGuESAmkjst+I1XdB3pkY21gj8
JRHdIRV508gTFuqQxs0oD2stbHb/V1xMUfMzri7KCuYdpkjbzIGtFggSt1KwQA2R
ltc=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:11 2025 by rpki-client