Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S0EDVEAWjZqji35ql-Yfjo5v9CA.roa
File: S0EDVEAWjZqji35ql-Yfjo5v9CA.roa (raw, json)
Hash identifier: t2IKkwwdY3V94cxLEM9QSAI4LLS9S7ha15LE2DMXiqE=
Subject key identifier: 4B:41:03:54:40:16:8D:9A:A3:8B:7E:6A:97:E6:1F:8E:8E:6F:F4:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6197BD0E433B453D0FBA596BC1A3B184
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S0EDVEAWjZqji35ql-Yfjo5v9CA.roa
Signing time: Tue 24 Oct 2023 12:10:16 +0000
ROA not before: Tue 24 Oct 2023 12:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:97:bd:0e:43:3b:45:3d:0f:ba:59:6b:c1:a3:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 12:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b41035440168d9aa38b7e6a97e61f8e8e6ff420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:47:cf:c4:b9:e8:08:94:7f:af:bb:03:34:
27:12:3b:ae:5a:b0:e2:51:8c:79:a0:76:98:db:9d:
33:4b:94:c4:5e:37:35:0c:69:4f:cc:40:c2:80:38:
b4:5a:77:fe:28:b9:38:d5:23:12:dd:d4:8a:db:74:
f9:1a:f9:c7:55:9b:00:b3:14:67:e5:c7:2a:33:7b:
8c:68:c0:38:7c:ab:42:4f:14:1a:52:43:17:61:e4:
54:34:7f:10:c5:02:c3:be:ee:39:1d:46:22:49:a0:
3a:d3:a7:80:a9:0b:60:22:05:87:3d:86:df:d7:2e:
02:16:a0:02:7f:25:a9:1c:ea:d9:64:a4:8e:77:06:
73:c1:58:e8:6e:a0:c4:5b:53:98:b0:ec:e8:1e:11:
e7:e6:a1:92:60:2b:d1:be:cd:d4:a2:32:57:85:c8:
8f:3a:48:35:c1:e4:83:6f:28:c7:ec:cf:fd:8a:8f:
85:bd:12:4e:e6:ae:48:12:91:c9:f2:73:07:f3:1d:
51:fc:00:e2:ec:d4:79:f8:fa:99:16:9f:3e:f8:3f:
54:17:e1:1e:ea:52:4f:c6:0e:b0:b7:54:3d:84:9e:
0b:08:c8:b4:bc:22:bb:28:a7:95:48:5b:3f:f0:df:
0c:3c:1b:82:31:a5:6a:a5:9f:4d:08:74:de:64:01:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:03:54:40:16:8D:9A:A3:8B:7E:6A:97:E6:1F:8E:8E:6F:F4:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S0EDVEAWjZqji35ql-Yfjo5v9CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:2f:5d:a0:5a:a9:d7:dc:32:6a:e6:0a:63:c7:ac:fc:56:21:
10:74:e6:d8:06:98:37:48:eb:ec:0a:b9:b5:18:b1:c5:33:11:
bb:04:d3:85:04:6f:a8:04:78:cf:e8:1d:9c:28:ab:4a:c5:32:
98:b9:bc:12:d8:b4:a6:10:c4:3e:83:fd:6d:66:49:db:d7:60:
15:14:0c:91:c9:8a:ea:cf:0e:99:ec:0b:19:67:e0:80:60:f0:
08:9a:05:4f:77:1b:95:1a:a2:e0:3d:32:21:a9:9e:83:2d:db:
81:fe:f7:8e:20:88:be:77:bf:d9:f0:4c:e3:3b:1c:c9:56:91:
20:64:fd:f3:3f:65:fc:6f:02:a7:54:f9:75:74:7f:fa:1e:1d:
84:b5:16:2a:43:5a:92:70:13:01:18:08:e8:23:51:7b:9e:4d:
61:a9:dc:f6:71:75:98:32:d6:89:75:fe:cc:5d:ee:50:c2:45:
8f:1b:78:95:03:26:79:5b:78:79:7e:95:39:29:db:8d:f7:50:
34:2d:b0:60:7b:cf:01:c0:a6:62:22:db:65:11:c0:f3:4d:a7:
60:0c:62:64:e3:b6:2e:33:ac:ca:15:69:5b:9d:df:e5:2c:40:
64:b7:95:57:8c:22:aa:d0:88:34:8c:87:e1:ec:5c:28:ae:e5:
20:54:86:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYthl70OQztFPQ+6WWvBo7GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI0MTIxMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjQxMDM1NDQwMTY4ZDlhYTM4YjdlNmE5N2U2MWY4ZThlNmZmNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5Hz8S56AiUf6+7AzQnEjuuWrDi
UYx5oHaY250zS5TEXjc1DGlPzEDCgDi0Wnf+KLk41SMS3dSK23T5GvnHVZsAsxRn
5ccqM3uMaMA4fKtCTxQaUkMXYeRUNH8QxQLDvu45HUYiSaA606eAqQtgIgWHPYbf
1y4CFqACfyWpHOrZZKSOdwZzwVjobqDEW1OYsOzoHhHn5qGSYCvRvs3UojJXhciP
Okg1weSDbyjH7M/9io+FvRJO5q5IEpHJ8nMH8x1R/ADi7NR5+PqZFp8++D9UF+Ee
6lJPxg6wt1Q9hJ4LCMi0vCK7KKeVSFs/8N8MPBuCMaVqpZ9NCHTeZAG+fwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEtBA1RAFo2ao4t+apfmH46Ob/QgMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUzBFRFZFQVdqWnFqaTM1cWwtWWZqbzV2OUNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALQvXaBaqdfcMmrmCmPH
rPxWIRB05tgGmDdI6+wKubUYscUzEbsE04UEb6gEeM/oHZwoq0rFMpi5vBLYtKYQ
xD6D/W1mSdvXYBUUDJHJiurPDpnsCxln4IBg8AiaBU93G5UaouA9MiGpnoMt24H+
944giL53v9nwTOM7HMlWkSBk/fM/ZfxvAqdU+XV0f/oeHYS1FipDWpJwEwEYCOgj
UXueTWGp3PZxdZgy1ol1/sxd7lDCRY8beJUDJnlbeHl+lTkp2433UDQtsGB7zwHA
pmIi22URwPNNp2AMYmTjti4zrMoVaVud3+UsQGS3lVeMIqrQiDSMh+HsXCiu5SBU
hng=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:05 2025 by rpki-client