Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEyWkAuTsmWz5gC0F8U5KVmlvQM.roa
File: TEyWkAuTsmWz5gC0F8U5KVmlvQM.roa (raw, json)
Hash identifier: xM/rnih+2vbkSRDMP1/L4fVbfCaFoxe/q6GxGohP/aQ=
Subject key identifier: 4C:4C:96:90:0B:93:B2:65:B3:E6:00:B4:17:C5:39:29:59:A5:BD:03
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C322F8A9CBC1F6F12A93901D181E2E2C6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEyWkAuTsmWz5gC0F8U5KVmlvQM.roa
Signing time: Mon 04 Dec 2023 00:17:05 +0000
ROA not before: Mon 04 Dec 2023 00:17:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:2f:8a:9c:bc:1f:6f:12:a9:39:01:d1:81:e2:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 00:17:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4c96900b93b265b3e600b417c5392959a5bd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:24:1f:26:b7:68:33:d8:71:13:7a:2b:72:
7b:a0:25:81:aa:6e:a5:ce:e8:a9:96:e7:d8:c9:4a:
5f:87:47:ba:1e:9b:72:c1:e9:cd:67:49:01:86:7b:
ab:c7:8e:e0:f4:7f:0d:14:a2:3f:66:c0:c8:b6:7e:
ca:38:f0:16:48:54:10:f0:66:7b:62:8a:af:ea:78:
87:88:84:98:31:a2:c2:20:a0:e9:5b:b1:5a:c2:e9:
51:ca:89:32:e8:9f:5b:a8:fc:06:0b:91:89:4a:57:
22:64:e7:07:1b:e2:93:59:9c:57:36:a1:ab:e1:56:
61:be:34:1a:44:59:59:da:ce:7e:d8:4d:b3:71:b0:
7e:56:a6:b7:77:8b:60:66:0e:1e:fa:f7:05:62:8d:
21:c9:85:50:0f:70:26:5f:a6:1c:84:4d:07:ad:35:
84:76:52:80:ae:49:bb:3c:6d:01:d5:cc:a4:52:99:
4c:ca:c9:73:7c:84:44:04:b7:6d:e2:56:2e:bf:84:
c3:e7:97:6c:5d:f5:49:1b:46:63:f5:1a:a1:8e:40:
57:f6:37:d6:ae:1d:48:0a:2f:32:85:3f:9c:fe:ab:
7c:44:4d:37:de:fc:2e:bd:e0:f6:b6:df:2a:71:60:
cd:7f:63:9c:f6:2f:bd:06:6b:62:18:e2:9c:81:61:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:96:90:0B:93:B2:65:B3:E6:00:B4:17:C5:39:29:59:A5:BD:03
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEyWkAuTsmWz5gC0F8U5KVmlvQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:17:ff:58:9b:be:e8:e2:97:af:a4:6c:29:83:f3:a7:9b:07:
bb:57:ae:85:ac:9b:62:7e:d7:43:43:d4:53:c8:ef:df:86:a9:
d6:3c:1b:7a:b4:d9:ae:ca:80:21:dc:fc:bc:36:e9:32:dc:a1:
27:90:2c:af:ee:eb:40:84:03:a1:de:3e:c6:5f:4d:c2:1b:2a:
a8:e6:d5:4c:6c:f6:d2:f2:4f:66:43:57:06:da:55:e6:1f:35:
b1:b3:dd:0a:97:bd:34:26:96:0e:99:14:cf:e1:55:98:a0:d7:
1c:0e:2e:09:4d:80:51:a4:13:cd:2d:e2:b3:0c:55:29:06:3f:
d6:6c:c0:48:a6:bd:fe:7c:89:7a:2c:29:46:f1:d2:d3:4a:0f:
68:b6:0d:68:d1:bb:fb:3b:93:c4:11:06:12:98:c3:f5:11:c0:
05:9c:4b:d7:77:55:02:78:33:0c:8d:b4:20:cf:9a:ca:fc:5d:
12:db:87:4d:f4:67:af:0f:97:ed:7d:b3:47:92:bc:22:8b:64:
35:70:87:1a:b1:06:78:d9:72:0c:cf:f3:31:59:d0:02:40:6e:
99:43:df:86:b6:27:95:18:46:c7:f5:8a:33:dd:ce:17:85:02:
76:ce:1d:40:32:4f:3e:01:c9:cf:6d:31:bf:48:0e:d6:84:00:
1d:35:a5:27
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwyL4qcvB9vEqk5AdGB4uLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA0MDAxNzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzRjOTY5MDBiOTNiMjY1YjNlNjAwYjQxN2M1MzkyOTU5YTViZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB8kHya3aDPYcRN6K3J7oCWBqm6l
zuiplufYyUpfh0e6HptywenNZ0kBhnurx47g9H8NFKI/ZsDItn7KOPAWSFQQ8GZ7
Yoqv6niHiISYMaLCIKDpW7FawulRyoky6J9bqPwGC5GJSlciZOcHG+KTWZxXNqGr
4VZhvjQaRFlZ2s5+2E2zcbB+Vqa3d4tgZg4e+vcFYo0hyYVQD3AmX6YchE0HrTWE
dlKArkm7PG0B1cykUplMyslzfIREBLdt4lYuv4TD55dsXfVJG0Zj9RqhjkBX9jfW
rh1ICi8yhT+c/qt8RE033vwuveD2tt8qcWDNf2Oc9i+9BmtiGOKcgWEYHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFExMlpALk7Jls+YAtBfFOSlZpb0DMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVEV5V2tBdVRzbVd6NWdDMEY4VTVLVm1sdlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGkX/1ibvujil6+kbCmD
86ebB7tXroWsm2J+10ND1FPI79+GqdY8G3q02a7KgCHc/Lw26TLcoSeQLK/u60CE
A6HePsZfTcIbKqjm1Uxs9tLyT2ZDVwbaVeYfNbGz3QqXvTQmlg6ZFM/hVZig1xwO
LglNgFGkE80t4rMMVSkGP9ZswEimvf58iXosKUbx0tNKD2i2DWjRu/s7k8QRBhKY
w/URwAWcS9d3VQJ4MwyNtCDPmsr8XRLbh030Z68Pl+19s0eSvCKLZDVwhxqxBnjZ
cgzP8zFZ0AJAbplD34a2J5UYRsf1ijPdzheFAnbOHUAyTz4Byc9tMb9IDtaEAB01
pSc=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:37 2025 by rpki-client