Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QdkVOjCxed05dl871GRarPOzhc0.roa
File: QdkVOjCxed05dl871GRarPOzhc0.roa (raw, json)
Hash identifier: iN4a0SqhogwgP2a7x51ipDj8O22sjEnEvQRZ8UTdPhI=
Subject key identifier: 41:D9:15:3A:30:B1:79:DD:39:76:5F:3B:D4:64:5A:AC:F3:B3:85:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3A4BCB13CBF9B0B419A51C9D7644EDC2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QdkVOjCxed05dl871GRarPOzhc0.roa
Signing time: Tue 05 Dec 2023 14:04:54 +0000
ROA not before: Tue 05 Dec 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:3a4b:2ac1/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:4b:cb:13:cb:f9:b0:b4:19:a5:1c:9d:76:44:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41d9153a30b179dd39765f3bd4645aacf3b385cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:d6:37:43:b2:e1:7d:66:e7:53:0a:fb:18:
44:b0:6c:c8:f4:4a:e5:30:f0:8d:3d:36:ec:7d:c6:
27:2f:41:70:7e:04:a7:d3:6f:23:e7:c4:d5:dc:e4:
9d:12:28:93:ba:b8:6a:14:40:c8:27:ed:6b:af:af:
f0:21:e2:10:5c:66:f8:d6:6a:6f:bf:6b:77:97:be:
3f:ba:73:e9:85:35:d2:7c:3a:ca:45:1a:37:3b:73:
ee:8f:f9:1c:e2:97:6c:6c:3f:4a:68:24:ae:7d:29:
4b:6b:fa:6f:29:14:b7:e0:d9:7e:9b:07:32:0e:59:
13:da:f4:d8:78:ad:3d:a7:29:88:db:d0:9f:ea:38:
30:6b:37:07:f1:2d:10:35:e4:2c:72:83:05:5b:1c:
c3:91:c5:69:29:d8:d1:df:c0:c8:51:62:5f:4f:78:
8e:82:de:0b:78:79:20:8b:13:ce:3f:2c:35:a6:1e:
a2:aa:7d:33:b4:14:38:c6:ca:0e:6b:44:7a:3d:51:
34:34:1a:7e:29:dc:ea:03:7a:0e:18:0c:1c:b2:45:
98:1c:23:4c:d4:5a:c9:ca:a4:9a:0d:d3:41:bd:84:
ee:1c:0c:e4:97:18:1a:05:d9:50:38:11:a5:86:59:
83:3a:e5:19:96:89:91:e4:68:bb:f6:34:e9:17:01:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:15:3A:30:B1:79:DD:39:76:5F:3B:D4:64:5A:AC:F3:B3:85:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QdkVOjCxed05dl871GRarPOzhc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:89:d9:3f:99:88:ce:5f:10:1a:82:e7:26:36:02:ce:52:80:
c2:c1:e4:6f:8c:f2:be:2a:01:d0:d7:f3:53:ad:e7:e4:21:78:
51:76:de:f4:c2:e6:81:e6:af:72:dc:f2:79:f4:a3:e0:40:08:
1c:e3:ff:d9:f6:cc:d3:ed:9c:8b:13:72:e1:6c:66:64:01:12:
95:a0:07:e3:c9:fc:f0:04:9d:5d:e1:35:03:c5:11:34:94:bd:
b3:da:19:c7:c7:19:18:7e:0b:ab:21:34:d8:77:c5:ae:75:d3:
7c:1f:b7:51:96:a5:c7:e7:2c:0f:e9:2a:de:42:df:5c:65:cf:
58:03:e5:63:0c:cb:0d:c8:ab:03:c1:97:84:79:64:86:d7:70:
ca:d4:94:21:9e:1f:bb:fd:c7:d5:00:58:56:ac:0a:cd:3d:9e:
c4:38:bd:24:a8:23:a5:88:f3:06:f6:97:b0:ad:92:b2:a8:15:
d8:1c:09:61:d8:c7:6c:e9:8c:cf:ac:d6:6b:c4:b3:98:01:12:
32:a6:9a:6d:27:91:d9:b3:c7:90:ad:3e:09:74:24:25:1a:da:
98:35:3b:32:cf:52:14:bd:64:84:56:b0:48:7a:34:01:37:c5:
50:cb:aa:61:64:c8:32:f9:a9:62:4b:1b:55:f2:16:19:c9:0c:
a0:85:32:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw6S8sTy/mwtBmlHJ12RO3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA1MTQwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWQ5MTUzYTMwYjE3OWRkMzk3NjVmM2JkNDY0NWFhY2YzYjM4NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynXWN0Oy4X1m51MK+xhEsGzI9Erl
MPCNPTbsfcYnL0FwfgSn028j58TV3OSdEiiTurhqFEDIJ+1rr6/wIeIQXGb41mpv
v2t3l74/unPphTXSfDrKRRo3O3Puj/kc4pdsbD9KaCSufSlLa/pvKRS34Nl+mwcy
DlkT2vTYeK09pymI29Cf6jgwazcH8S0QNeQscoMFWxzDkcVpKdjR38DIUWJfT3iO
gt4LeHkgixPOPyw1ph6iqn0ztBQ4xsoOa0R6PVE0NBp+KdzqA3oOGAwcskWYHCNM
1FrJyqSaDdNBvYTuHAzklxgaBdlQOBGlhlmDOuUZlomR5Gi79jTpFwF3XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEHZFTowsXndOXZfO9RkWqzzs4XNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUWRrVk9qQ3hlZDA1ZGw4NzFHUmFyUE96aGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAACJ2T+ZiM5fEBqC5yY2
As5SgMLB5G+M8r4qAdDX81Ot5+QheFF23vTC5oHmr3Lc8nn0o+BACBzj/9n2zNPt
nIsTcuFsZmQBEpWgB+PJ/PAEnV3hNQPFETSUvbPaGcfHGRh+C6shNNh3xa5103wf
t1GWpcfnLA/pKt5C31xlz1gD5WMMyw3IqwPBl4R5ZIbXcMrUlCGeH7v9x9UAWFas
Cs09nsQ4vSSoI6WI8wb2l7CtkrKoFdgcCWHYx2zpjM+s1mvEs5gBEjKmmm0nkdmz
x5CtPgl0JCUa2pg1OzLPUhS9ZIRWsEh6NAE3xVDLqmFkyDL5qWJLG1XyFhnJDKCF
MkI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:49:59 2025 by rpki-client