Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/So0Eo5kkruxRcGCs51ByWv8cKK8.roa
File: So0Eo5kkruxRcGCs51ByWv8cKK8.roa (raw, json)
Hash identifier: VL6pqRlUNcQXlSg5c9/Okl/W/D5nmhQ6IRDylhaIfmA=
Subject key identifier: 4A:8D:04:A3:99:24:AE:EC:51:70:60:AC:E7:50:72:5A:FF:1C:28:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B96CFB2DA403CB4846929FF1A25BF9966
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/So0Eo5kkruxRcGCs51ByWv8cKK8.roa
Signing time: Fri 03 Nov 2023 20:11:15 +0000
ROA not before: Fri 03 Nov 2023 20:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:cf:b2:da:40:3c:b4:84:69:29:ff:1a:25:bf:99:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 20:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a8d04a39924aeec517060ace750725aff1c28af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:f0:04:9c:cc:6c:11:62:78:19:6c:0b:c2:
bb:f3:e6:33:d4:fe:4d:1d:b0:19:f2:7e:5f:74:c4:
d8:86:af:26:b6:af:d2:95:0a:b7:93:92:4f:01:58:
5b:c4:56:9e:31:52:53:4b:57:66:26:eb:eb:ca:ff:
83:1b:30:40:60:a5:ed:88:46:b1:bd:5f:7f:08:c2:
eb:bb:33:d3:05:76:08:f4:71:cb:69:aa:43:41:dd:
64:a7:a6:01:e6:1d:46:65:28:20:0e:70:1e:ba:df:
16:2b:d8:d5:17:c6:22:25:6b:a6:37:fc:07:16:dc:
93:87:77:f8:d2:d1:40:e5:7a:9d:05:8a:01:71:d4:
03:51:5d:5d:18:af:94:7a:5a:ab:b1:f6:39:93:98:
b5:cb:e3:b3:61:d9:1d:8b:f0:56:a8:b5:a0:18:3c:
36:1b:09:31:87:1d:73:b2:62:08:d0:68:da:d7:ce:
a6:ae:81:48:32:87:28:a6:00:32:4a:fe:30:52:cd:
7a:83:29:7f:c3:5c:35:0c:5d:16:46:7f:1a:6b:53:
d6:5e:07:f2:c8:14:05:a8:02:10:2b:8e:11:36:fc:
89:91:c0:a6:b7:e7:f7:1d:75:19:a5:4e:4e:10:9d:
cd:9a:e4:0b:d3:2f:96:5f:06:c4:b0:1a:d0:e9:12:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:04:A3:99:24:AE:EC:51:70:60:AC:E7:50:72:5A:FF:1C:28:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/So0Eo5kkruxRcGCs51ByWv8cKK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:b7:28:77:5f:82:06:19:a7:c5:56:cf:72:bc:72:b8:ac:1b:
f9:4d:15:f5:be:06:14:d5:b5:9a:e5:8a:0d:73:37:0c:ce:83:
d8:66:30:0c:7a:06:72:94:e7:4e:0b:24:43:2f:4f:44:a1:e3:
a4:be:c3:71:fa:9e:fd:fb:96:56:ad:dc:44:8b:e6:79:3d:ed:
a0:8d:54:30:f9:ab:43:e8:10:00:e7:c4:fb:cc:c5:8d:73:8b:
84:0b:dc:3e:f8:4b:1e:9e:c7:9d:cd:74:3a:15:67:2b:11:46:
34:fb:2f:83:46:2e:c8:07:a4:74:a7:16:8a:9b:71:e9:ee:5b:
9b:43:d5:56:ef:af:6f:83:f0:64:b8:c5:4a:c0:2a:f6:05:b7:
3c:49:1b:5f:33:cc:3f:ef:4b:c7:03:38:05:b4:79:12:5a:05:
e4:22:25:49:98:b1:05:40:72:0c:87:5d:0d:fd:bf:cc:33:a3:
44:90:e0:39:a3:12:ba:c5:41:db:63:ac:1a:a4:64:98:cd:86:
ca:9a:c0:9d:17:6f:f9:d7:28:45:2b:45:f8:80:c4:d7:03:e3:
21:f5:9e:9f:a3:be:43:03:0a:ed:11:52:24:aa:42:bc:f8:bb:
fb:f7:c1:07:08:0b:bf:e2:c2:50:58:f8:9e:09:2e:eb:7a:2d:
d1:d3:77:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuWz7LaQDy0hGkp/xolv5lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAzMjAxMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YThkMDRhMzk5MjRhZWVjNTE3MDYwYWNlNzUwNzI1YWZmMWMyOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bzwBJzMbBFieBlsC8K78+Yz1P5N
HbAZ8n5fdMTYhq8mtq/SlQq3k5JPAVhbxFaeMVJTS1dmJuvryv+DGzBAYKXtiEax
vV9/CMLruzPTBXYI9HHLaapDQd1kp6YB5h1GZSggDnAeut8WK9jVF8YiJWumN/wH
FtyTh3f40tFA5XqdBYoBcdQDUV1dGK+UelqrsfY5k5i1y+OzYdkdi/BWqLWgGDw2
Gwkxhx1zsmII0Gja186mroFIMocopgAySv4wUs16gyl/w1w1DF0WRn8aa1PWXgfy
yBQFqAIQK44RNvyJkcCmt+f3HXUZpU5OEJ3NmuQL0y+WXwbEsBrQ6RJTPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEqNBKOZJK7sUXBgrOdQclr/HCivMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvU28wRW81a2tydXhSY0dDczUxQnlXdjhjS0s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALK3KHdfggYZp8VWz3K8
crisG/lNFfW+BhTVtZrlig1zNwzOg9hmMAx6BnKU504LJEMvT0Sh46S+w3H6nv37
llat3ESL5nk97aCNVDD5q0PoEADnxPvMxY1zi4QL3D74Sx6ex53NdDoVZysRRjT7
L4NGLsgHpHSnFoqbcenuW5tD1Vbvr2+D8GS4xUrAKvYFtzxJG18zzD/vS8cDOAW0
eRJaBeQiJUmYsQVAcgyHXQ39v8wzo0SQ4DmjErrFQdtjrBqkZJjNhsqawJ0Xb/nX
KEUrRfiAxNcD4yH1np+jvkMDCu0RUiSqQrz4u/v3wQcIC7/iwlBY+J4JLut6LdHT
d1w=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:03 2025 by rpki-client