Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz3Vye5e5pHDJ5U_hW6sc7o8h60.roa
File: Sz3Vye5e5pHDJ5U_hW6sc7o8h60.roa (raw, json)
Hash identifier: YiycUFJJlE2k1A8Tc8BZwW0Q3QQUy6iZXHkkgTUd+D0=
Subject key identifier: 4B:3D:D5:C9:EE:5E:E6:91:C3:27:95:3F:85:6E:AC:73:BA:3C:87:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3C711C7B2EA61562EC0E1D3BE9758B1B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz3Vye5e5pHDJ5U_hW6sc7o8h60.roa
Signing time: Wed 06 Dec 2023 00:04:54 +0000
ROA not before: Wed 06 Dec 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:3c70:6f61/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3c:71:1c:7b:2e:a6:15:62:ec:0e:1d:3b:e9:75:8b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b3dd5c9ee5ee691c327953f856eac73ba3c87ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:81:49:35:7d:c3:46:6e:73:9d:ab:2c:c9:
98:73:2c:9b:7f:72:97:0a:5b:2a:4b:47:60:97:58:
f3:64:ae:f8:dc:11:ba:df:bb:67:41:8f:86:f7:c2:
fb:c4:30:06:f0:1b:0c:62:4f:1e:b5:aa:79:1c:73:
60:48:e5:93:5d:57:b0:ea:a6:8e:ee:5c:a5:ae:c5:
58:84:c6:80:8e:3e:79:85:76:ef:49:2a:13:50:ea:
4c:ed:3b:e4:da:00:57:b4:27:90:14:92:19:c3:38:
d0:d1:04:78:02:e1:7b:a4:1e:4d:5d:97:fc:46:86:
6b:97:79:94:e6:80:1b:41:7a:7d:bc:f9:c6:6c:dc:
de:14:9f:2b:c7:d2:0a:81:60:0b:b3:11:22:d2:70:
dc:16:7f:0c:cb:4e:78:80:bf:65:59:51:73:b6:f1:
e6:bb:f6:a8:92:8f:11:b1:b3:47:7b:01:c2:15:08:
8f:bf:75:3e:40:15:7f:fb:05:c5:55:48:d2:a6:8a:
42:2d:37:42:0c:33:0b:34:a2:f1:cd:72:da:79:08:
cd:76:6c:31:cf:be:fe:77:b7:62:ad:46:eb:3a:1c:
14:0d:5f:f9:5e:b3:47:29:29:f6:a4:15:9b:87:7e:
51:7a:7b:e9:16:35:24:ee:a2:12:e8:38:8f:09:8a:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:D5:C9:EE:5E:E6:91:C3:27:95:3F:85:6E:AC:73:BA:3C:87:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz3Vye5e5pHDJ5U_hW6sc7o8h60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:72:3f:f0:a9:70:c8:2a:f5:84:6d:bf:fe:d0:f8:8d:b3:dd:
7d:a9:fb:9e:8c:e5:97:39:44:b0:de:99:51:3b:0a:e5:1a:dc:
d1:b6:6a:f3:92:44:46:1b:60:9f:aa:52:51:10:98:a5:fa:40:
8e:52:ea:3d:ec:61:a5:3a:cd:88:e6:2e:96:6e:97:46:72:14:
35:a7:15:ee:6b:c1:84:0f:0f:f9:a0:6c:a0:06:10:1b:8b:6d:
ff:8e:26:34:da:b2:08:9c:17:e5:07:a1:80:e2:bb:4c:72:4f:
00:e3:71:17:9a:f1:35:e5:ed:fb:2e:cf:bf:24:89:74:db:ef:
34:b4:7a:65:55:26:0c:d5:d8:fc:b2:72:6a:10:54:fe:ba:d3:
a7:9d:df:c3:bd:f2:fc:2f:70:f8:b5:ea:8c:f1:ec:f6:89:31:
d4:0c:85:24:fd:ee:d9:8c:a8:a5:d9:fb:70:cf:92:bf:ab:58:
4c:da:95:24:12:44:7f:58:51:f1:a5:2b:4b:ae:5f:10:ab:c0:
bc:b6:b9:d2:aa:9c:9f:bd:1a:99:69:8b:51:5d:7b:e9:04:ad:
e0:1b:24:91:e7:e2:4f:c8:12:6b:14:fd:be:41:96:42:79:ab:
be:a1:53:64:76:7e:ae:30:75:ec:7f:29:0c:50:76:4d:f1:bc:
ed:96:67:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw8cRx7LqYVYuwOHTvpdYsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MDAwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjNkZDVjOWVlNWVlNjkxYzMyNzk1M2Y4NTZlYWM3M2JhM2M4N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3uBSTV9w0Zuc52rLMmYcyybf3KX
ClsqS0dgl1jzZK743BG637tnQY+G98L7xDAG8BsMYk8etap5HHNgSOWTXVew6qaO
7lylrsVYhMaAjj55hXbvSSoTUOpM7Tvk2gBXtCeQFJIZwzjQ0QR4AuF7pB5NXZf8
RoZrl3mU5oAbQXp9vPnGbNzeFJ8rx9IKgWALsxEi0nDcFn8My054gL9lWVFztvHm
u/aoko8RsbNHewHCFQiPv3U+QBV/+wXFVUjSpopCLTdCDDMLNKLxzXLaeQjNdmwx
z77+d7dirUbrOhwUDV/5XrNHKSn2pBWbh35RenvpFjUk7qIS6DiPCYoUtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEs91cnuXuaRwyeVP4VurHO6PIetMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvU3ozVnllNWU1cEhESjVVX2hXNnNjN284aDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI5yP/CpcMgq9YRtv/7Q
+I2z3X2p+56M5Zc5RLDemVE7CuUa3NG2avOSREYbYJ+qUlEQmKX6QI5S6j3sYaU6
zYjmLpZul0ZyFDWnFe5rwYQPD/mgbKAGEBuLbf+OJjTasgicF+UHoYDiu0xyTwDj
cRea8TXl7fsuz78kiXTb7zS0emVVJgzV2PyycmoQVP6606ed38O98vwvcPi16ozx
7PaJMdQMhST97tmMqKXZ+3DPkr+rWEzalSQSRH9YUfGlK0uuXxCrwLy2udKqnJ+9
Gplpi1Fde+kEreAbJJHn4k/IEmsU/b5BlkJ5q76hU2R2fq4wdex/KQxQdk3xvO2W
ZzY=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:39:04 2025 by rpki-client