Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S198-JtJEQzxW3aEOCKRUmlAYWw.roa
File: S198-JtJEQzxW3aEOCKRUmlAYWw.roa (raw, json)
Hash identifier: crkyn9kvHeEk74nf7uh0GtiHLRlnzmJ+0lqQtpEfAVk=
Subject key identifier: 4B:5F:7C:F8:9B:49:11:0C:F1:5B:76:84:38:22:91:52:69:40:61:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD98A9B9B24E97D3957E8B5D182999453
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S198-JtJEQzxW3aEOCKRUmlAYWw.roa
Signing time: Thu 16 Nov 2023 19:10:21 +0000
ROA not before: Thu 16 Nov 2023 19:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:8a:9b:9b:24:e9:7d:39:57:e8:b5:d1:82:99:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 19:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5f7cf89b49110cf15b7684382291526940616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:99:83:53:55:b2:0d:34:d3:e1:5d:33:6e:
f8:ce:83:62:fd:ec:54:9e:fc:bd:49:3b:10:0a:d4:
1c:bc:3b:87:a8:51:9b:62:80:a7:67:da:b2:bb:b9:
2a:3a:8e:8c:58:52:3c:c7:17:ab:f7:7e:9c:70:d7:
87:38:81:60:49:10:be:9b:c1:55:b6:b1:f0:97:5b:
f6:94:f8:cd:03:c0:2d:20:fd:bf:32:b6:a5:6c:e4:
4c:35:57:e5:33:db:3c:37:d5:95:97:1f:58:78:66:
0c:fe:13:bf:1f:f1:4f:60:bd:f9:6a:4a:b5:c0:07:
28:df:6d:f2:dd:71:0b:40:02:60:8c:86:00:1a:a6:
6f:e6:77:83:c1:b1:d7:16:a4:2b:fb:2d:51:ef:a6:
12:d8:9b:b3:4c:e8:61:8b:ec:e9:1d:4d:93:12:40:
b5:b7:9e:b3:62:e0:4a:55:27:1b:f7:81:c9:55:b2:
f0:1b:f4:49:44:0b:72:4e:f3:91:31:13:ee:4c:98:
09:48:25:05:fc:af:d3:a0:1a:ef:d5:6c:f7:23:14:
32:59:c6:88:47:44:5f:82:47:6a:51:e9:8d:b5:72:
a8:69:dc:62:dc:c7:27:f4:5e:b1:0a:0b:df:fb:30:
45:34:0f:90:b3:0f:6b:9f:7f:5b:b8:ac:93:35:41:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:7C:F8:9B:49:11:0C:F1:5B:76:84:38:22:91:52:69:40:61:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S198-JtJEQzxW3aEOCKRUmlAYWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:67:3c:2f:13:71:a7:52:2e:93:fc:f8:8a:55:49:a9:bb:8e:
ae:84:d9:4b:6e:53:9b:d8:82:e1:88:70:d3:2b:9a:8d:2f:4a:
28:97:cc:90:d7:dd:46:07:ba:36:a8:fa:57:bb:a5:44:15:50:
47:26:c9:cd:17:a8:63:18:da:26:e0:68:17:bd:8f:aa:74:ef:
ac:7c:b2:69:68:e3:f7:a2:7a:a2:28:41:d8:9f:19:1e:3d:75:
a4:d5:f1:d2:74:b7:e7:d8:41:15:94:2b:13:07:b1:7c:80:c1:
52:9a:2a:e7:d5:0e:c4:28:5b:cf:a7:60:bc:36:d2:96:a7:dc:
43:4f:23:5f:e1:32:ea:1b:9a:9a:28:3d:95:d4:a5:74:70:b7:
d9:5e:77:a0:b9:89:42:ca:5e:b5:76:46:c0:85:a3:cb:08:be:
c6:c7:ac:fe:fb:af:77:b4:0f:1c:97:72:6c:43:53:e0:8e:68:
15:0a:6d:13:ae:94:e5:21:97:1a:c1:63:09:58:bf:de:99:bc:
2f:6d:bf:4b:51:84:a3:9b:13:c8:95:0c:c5:98:b0:8a:a6:a9:
23:2a:81:f0:7b:19:5e:94:d4:d1:08:1e:3a:d2:ef:37:15:ed:
bd:58:77:d4:fb:ff:fd:62:40:ec:03:97:db:fc:36:51:98:bf:
07:72:cb:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvZipubJOl9OVfotdGCmZRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE2MTkxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVmN2NmODliNDkxMTBjZjE1Yjc2ODQzODIyOTE1MjY5NDA2MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAyZg1NVsg000+FdM274zoNi/exU
nvy9STsQCtQcvDuHqFGbYoCnZ9qyu7kqOo6MWFI8xxer936ccNeHOIFgSRC+m8FV
trHwl1v2lPjNA8AtIP2/MralbORMNVflM9s8N9WVlx9YeGYM/hO/H/FPYL35akq1
wAco323y3XELQAJgjIYAGqZv5neDwbHXFqQr+y1R76YS2JuzTOhhi+zpHU2TEkC1
t56zYuBKVScb94HJVbLwG/RJRAtyTvORMRPuTJgJSCUF/K/ToBrv1Wz3IxQyWcaI
R0RfgkdqUemNtXKoadxi3Mcn9F6xCgvf+zBFNA+Qsw9rn39buKyTNUHjGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEtffPibSREM8Vt2hDgikVJpQGFsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUzE5OC1KdEpFUXp4VzNhRU9DS1JVbWxBWVd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACtnPC8TcadSLpP8+IpV
Sam7jq6E2UtuU5vYguGIcNMrmo0vSiiXzJDX3UYHujao+le7pUQVUEcmyc0XqGMY
2ibgaBe9j6p076x8smlo4/eieqIoQdifGR49daTV8dJ0t+fYQRWUKxMHsXyAwVKa
KufVDsQoW8+nYLw20pan3ENPI1/hMuobmpooPZXUpXRwt9led6C5iULKXrV2RsCF
o8sIvsbHrP77r3e0DxyXcmxDU+COaBUKbROulOUhlxrBYwlYv96ZvC9tv0tRhKOb
E8iVDMWYsIqmqSMqgfB7GV6U1NEIHjrS7zcV7b1Yd9T7//1iQOwDl9v8NlGYvwdy
y2g=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:35 2025 by rpki-client