Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LsQ9UAsmy58wErJZy22FtTLX1z8.roa
File: LsQ9UAsmy58wErJZy22FtTLX1z8.roa (raw, json)
Hash identifier: nC8NdZAIN6CSkEZ0XBOTjBkHOvdcABpsobe5UkrvCyA=
Subject key identifier: 2E:C4:3D:50:0B:26:CB:9F:30:12:B2:59:CB:6D:85:B5:32:D7:D7:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABB509E310E0580FE21E9054872A6C03C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LsQ9UAsmy58wErJZy22FtTLX1z8.roa
Signing time: Fri 22 Sep 2023 05:15:37 +0000
ROA not before: Fri 22 Sep 2023 05:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:50:9e:31:0e:05:80:fe:21:e9:05:48:72:a6:c0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 05:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ec43d500b26cb9f3012b259cb6d85b532d7d73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:f8:a9:a7:94:66:be:d1:b4:1c:bf:e0:c1:
75:4e:bd:69:da:3b:80:8c:18:c6:19:d9:8f:89:ba:
b2:4b:c0:0b:f8:cc:62:de:f1:33:27:31:c6:10:f6:
53:e9:40:7a:e5:0c:6d:2d:5e:2b:e1:62:96:0a:97:
3d:50:cd:5b:be:2d:2e:3e:06:5d:e0:0b:f9:84:47:
7b:89:3a:17:cd:02:44:e3:94:ed:fd:c6:13:fc:8b:
f6:bc:e7:52:b7:c0:fc:14:a9:a2:1a:55:55:e2:86:
3a:6e:97:ac:16:7f:6c:bd:55:94:8e:03:5b:fe:73:
35:a0:93:28:a7:8b:5a:80:36:b0:69:4d:39:5a:f2:
4f:be:66:15:bc:95:d2:67:ec:71:72:f1:10:2e:00:
f0:03:d4:ea:60:b8:d6:15:2e:01:ad:5b:df:78:09:
39:6e:da:8d:71:81:68:64:b7:11:32:9c:12:c8:39:
85:a5:90:18:70:f0:18:b1:d6:b2:9f:0b:12:4f:13:
bc:69:1c:9d:27:2c:19:33:12:cf:b2:62:0a:c7:41:
3f:8c:a8:ed:73:e9:65:9d:66:3f:1c:f0:eb:d2:25:
56:06:07:8b:61:cd:a1:45:71:2d:b6:42:60:f9:0c:
7f:ac:94:bc:a8:57:bd:49:c2:be:42:35:57:ac:b6:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:3D:50:0B:26:CB:9F:30:12:B2:59:CB:6D:85:B5:32:D7:D7:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LsQ9UAsmy58wErJZy22FtTLX1z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1c:67:bc:70:e3:e4:6b:f7:14:bb:52:88:d2:37:0b:ab:42:
e8:6a:cd:5f:63:1f:be:96:2d:46:27:b5:ee:5d:c3:41:74:c6:
e1:ca:74:89:3c:f7:4a:69:2f:0c:70:3d:98:fe:af:ee:1f:30:
8c:61:4a:90:a5:2b:4d:3b:6a:cd:1a:69:32:c0:59:67:b7:09:
89:6f:93:cc:ff:3c:f6:29:a1:f5:fe:e3:8d:70:02:97:75:f9:
2f:d4:66:9e:2e:f2:0d:15:c5:46:98:31:20:7a:5c:7d:be:19:
60:83:cf:ff:a9:84:38:34:2f:8d:81:01:1e:42:ba:b0:79:3e:
13:17:25:89:05:ff:b4:28:70:6d:21:6c:45:a3:6f:3e:16:db:
8a:cd:56:62:d3:26:fd:4b:94:5b:8e:c8:f2:02:e9:b4:f5:80:
b6:d0:ff:bb:0e:d3:29:b5:57:c1:82:54:ad:1c:93:bd:17:20:
de:59:5f:ef:fc:ce:18:ce:a1:28:a3:1a:11:73:36:50:1f:3d:
34:82:63:68:3f:f6:c0:10:ba:e7:59:c0:63:bb:06:b4:e4:c3:
38:d9:4a:1f:1b:98:53:15:56:0a:64:42:46:5f:10:91:cb:8b:
3f:bd:c3:bb:6d:42:17:ce:1d:a5:d7:6d:bd:d5:59:77:6c:c6:
fa:de:2d:ed
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq7UJ4xDgWA/iHpBUhypsA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIyMDUxNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWM0M2Q1MDBiMjZjYjlmMzAxMmIyNTljYjZkODViNTMyZDdkNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOr4qaeUZr7RtBy/4MF1Tr1p2juA
jBjGGdmPibqyS8AL+Mxi3vEzJzHGEPZT6UB65QxtLV4r4WKWCpc9UM1bvi0uPgZd
4Av5hEd7iToXzQJE45Tt/cYT/Iv2vOdSt8D8FKmiGlVV4oY6bpesFn9svVWUjgNb
/nM1oJMop4tagDawaU05WvJPvmYVvJXSZ+xxcvEQLgDwA9TqYLjWFS4BrVvfeAk5
btqNcYFoZLcRMpwSyDmFpZAYcPAYsdaynwsSTxO8aRydJywZMxLPsmIKx0E/jKjt
c+llnWY/HPDr0iVWBgeLYc2hRXEttkJg+Qx/rJS8qFe9ScK+QjVXrLbxQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC7EPVALJsufMBKyWctthbUy19c/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTHNROVVBc215NTh3RXJKWnkyMkZ0VExYMXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE4cZ7xw4+Rr9xS7UojS
NwurQuhqzV9jH76WLUYnte5dw0F0xuHKdIk890ppLwxwPZj+r+4fMIxhSpClK007
as0aaTLAWWe3CYlvk8z/PPYpofX+441wApd1+S/UZp4u8g0VxUaYMSB6XH2+GWCD
z/+phDg0L42BAR5CurB5PhMXJYkF/7QocG0hbEWjbz4W24rNVmLTJv1LlFuOyPIC
6bT1gLbQ/7sO0ym1V8GCVK0ck70XIN5ZX+/8zhjOoSijGhFzNlAfPTSCY2g/9sAQ
uudZwGO7BrTkwzjZSh8bmFMVVgpkQkZfEJHLiz+9w7ttQhfOHaXXbb3VWXdsxvre
Le0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:29 2025 by rpki-client