Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UZOPsq7O3yZq3zNCKm40rOBva1k.roa
File: UZOPsq7O3yZq3zNCKm40rOBva1k.roa (raw, json)
Hash identifier: LId7YLIpdWOyEduEiy/L+Lxq+CF076flj1GZsxfgay8=
Subject key identifier: 51:93:8F:B2:AE:CE:DF:26:6A:DF:33:42:2A:6E:34:AC:E0:6F:6B:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEAF4B39B9256FFA95BCB357CDA50949A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UZOPsq7O3yZq3zNCKm40rOBva1k.roa
Signing time: Sun 01 Oct 2023 11:16:59 +0000
ROA not before: Sun 01 Oct 2023 11:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:f4:b3:9b:92:56:ff:a9:5b:cb:35:7c:da:50:94:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 11:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51938fb2aecedf266adf33422a6e34ace06f6b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:e6:93:c1:98:37:78:22:13:d2:44:55:5f:
9a:20:63:c3:26:a2:b0:2b:a3:4f:ad:00:46:78:ec:
94:32:c8:58:01:e1:92:7c:1d:42:fe:28:52:25:07:
33:bc:fc:45:76:2f:0a:13:f4:50:4e:ef:b3:70:65:
2f:74:b0:ec:bb:28:2e:86:11:90:5f:1b:8c:42:3d:
a2:a1:12:8f:ec:81:41:ef:87:8d:17:d9:88:f9:10:
db:a2:7f:71:2c:71:3e:23:ed:03:23:9f:15:9a:db:
41:56:d5:e9:ce:8f:00:94:5d:27:8d:6d:dd:9e:6c:
1f:88:88:10:57:b1:da:e7:ed:36:1b:95:b8:df:88:
2c:f3:69:9a:b1:5d:b1:c6:e0:df:8a:0a:9b:33:f0:
da:b8:58:ec:a2:8c:bf:7c:61:65:6e:dd:ea:90:44:
cd:69:12:bd:c2:be:ea:87:5e:69:1e:43:ed:6a:79:
b9:88:dd:d8:1e:94:b8:0d:bb:00:46:7f:33:36:29:
7b:85:f6:fe:bd:20:2f:df:ae:2e:6a:da:9a:f6:57:
f4:96:ef:04:f0:e7:d3:fb:79:25:48:2b:29:fb:c1:
8f:18:65:87:31:50:e0:44:d9:48:1d:06:c1:5c:09:
46:d7:aa:9e:13:5d:98:8f:55:8a:73:56:8e:3c:0c:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:8F:B2:AE:CE:DF:26:6A:DF:33:42:2A:6E:34:AC:E0:6F:6B:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UZOPsq7O3yZq3zNCKm40rOBva1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:cc:d1:01:99:01:6c:09:25:7c:2c:4f:b3:7c:37:a0:27:22:
77:80:0e:03:ea:49:99:5e:25:d0:93:a5:aa:7c:ac:26:ad:b7:
58:19:f7:c0:73:f1:0a:ec:46:6f:e7:4a:fb:6a:58:f5:c5:a8:
36:ed:a8:49:41:bf:a9:3d:3f:16:a7:62:e8:ac:89:4e:49:79:
e3:61:9d:03:a9:64:01:4f:7d:2c:46:4d:8c:12:a1:40:cf:c2:
ac:db:d7:6e:60:01:c1:10:d9:88:c9:54:a4:c6:84:0f:b8:7f:
a6:cc:d8:2b:d4:fd:07:e7:28:14:07:1a:a0:d7:1e:aa:b0:05:
4f:ff:a5:0a:fa:d3:37:97:27:b2:79:be:74:08:6b:10:f6:66:
52:40:59:2d:bf:ba:1d:59:7a:f2:ad:4c:dc:fd:af:14:26:ae:
5c:49:d5:59:2e:b9:72:f2:3d:f3:93:12:ee:d5:eb:c1:1e:de:
82:c4:63:67:50:7a:04:9f:dd:29:6d:1b:41:2a:fb:6d:f2:be:
66:1d:6e:73:b7:e6:27:b2:20:27:d9:ab:43:ee:ce:79:bc:e0:
7e:64:48:e5:da:ea:b9:4d:b2:0f:da:78:30:e3:2b:8e:61:c9:
2e:c9:d1:03:86:95:b0:a2:25:db:71:f0:cd:93:63:6c:40:27:
31:a5:b9:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrq9LObklb/qVvLNXzaUJSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAxMTExNjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTkzOGZiMmFlY2VkZjI2NmFkZjMzNDIyYTZlMzRhY2UwNmY2YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJrmk8GYN3giE9JEVV+aIGPDJqKw
K6NPrQBGeOyUMshYAeGSfB1C/ihSJQczvPxFdi8KE/RQTu+zcGUvdLDsuyguhhGQ
XxuMQj2ioRKP7IFB74eNF9mI+RDbon9xLHE+I+0DI58VmttBVtXpzo8AlF0njW3d
nmwfiIgQV7Ha5+02G5W434gs82masV2xxuDfigqbM/DauFjsooy/fGFlbt3qkETN
aRK9wr7qh15pHkPtanm5iN3YHpS4DbsARn8zNil7hfb+vSAv364uatqa9lf0lu8E
8OfT+3klSCsp+8GPGGWHMVDgRNlIHQbBXAlG16qeE12Yj1WKc1aOPAzs3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFGTj7Kuzt8mat8zQipuNKzgb2tZMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVVpPUHNxN08zeVpxM3pOQ0ttNDByT0J2YTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGvM0QGZAWwJJXwsT7N8
N6AnIneADgPqSZleJdCTpap8rCatt1gZ98Bz8QrsRm/nSvtqWPXFqDbtqElBv6k9
PxanYuisiU5JeeNhnQOpZAFPfSxGTYwSoUDPwqzb125gAcEQ2YjJVKTGhA+4f6bM
2CvU/QfnKBQHGqDXHqqwBU//pQr60zeXJ7J5vnQIaxD2ZlJAWS2/uh1ZevKtTNz9
rxQmrlxJ1VkuuXLyPfOTEu7V68Ee3oLEY2dQegSf3SltG0Eq+23yvmYdbnO35iey
ICfZq0Puznm84H5kSOXa6rlNsg/aeDDjK45hyS7J0QOGlbCiJdtx8M2TY2xAJzGl
uQI=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:28 2025 by rpki-client