Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Xrwcf52m-1OkfDZAvYhlOqZsp7E.roa
File: Xrwcf52m-1OkfDZAvYhlOqZsp7E.roa (raw, json)
Hash identifier: t6l7EriJu0YRw0nc4ZPDC17MGaFiI+ukKx8Fo3xV60U=
Subject key identifier: 5E:BC:1C:7F:9D:A6:FB:53:A4:7C:36:40:BD:88:65:3A:A6:6C:A7:B1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B845AA9EE4F9DF63A408106E3D64E5CAC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Xrwcf52m-1OkfDZAvYhlOqZsp7E.roa
Signing time: Tue 31 Oct 2023 06:10:16 +0000
ROA not before: Tue 31 Oct 2023 06:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:5a:a9:ee:4f:9d:f6:3a:40:81:06:e3:d6:4e:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 06:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ebc1c7f9da6fb53a47c3640bd88653aa66ca7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:da:8b:2c:bc:bf:4c:af:4e:cd:7a:ed:c9:
d8:dd:4a:8a:10:f2:7d:09:07:a6:e0:3c:8b:5e:3d:
1b:61:b3:dc:da:7e:54:76:98:82:6e:57:a2:50:71:
86:18:87:c7:ae:a3:bc:6a:a6:fd:e4:b2:33:b9:3f:
df:7d:8d:f1:d7:1e:41:f5:d6:6e:aa:ef:83:7a:58:
81:07:e4:78:07:5f:ab:3f:d4:2c:98:85:a7:0e:1f:
8b:2c:a5:43:e3:46:34:5d:df:56:5e:10:2c:14:1f:
05:0b:85:66:1f:a5:df:53:0b:42:d1:ec:f2:13:ee:
6d:c3:92:a3:5e:c9:38:ae:50:a9:0f:9c:9d:23:8f:
c9:55:c1:ec:69:6a:57:c9:9a:66:54:37:17:a6:1c:
ee:71:5b:8f:fc:3d:b4:b6:8f:b4:30:5e:27:e2:7b:
8c:39:99:e7:c0:97:04:23:82:c0:11:99:2f:46:8e:
d0:96:47:da:0f:6a:16:7e:b5:56:5e:b3:fa:a9:bb:
e1:eb:a9:11:7b:38:a3:4c:06:6d:40:4f:54:ed:75:
b6:34:de:0e:a4:3f:60:0e:e9:0b:f1:a8:a7:7c:c0:
80:a9:6e:d0:28:cc:a3:29:19:e8:a9:0c:aa:51:8d:
61:63:73:23:36:36:c6:cb:f6:80:2f:c3:ec:31:39:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:1C:7F:9D:A6:FB:53:A4:7C:36:40:BD:88:65:3A:A6:6C:A7:B1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Xrwcf52m-1OkfDZAvYhlOqZsp7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:2e:10:c7:d7:34:1d:95:f6:dc:41:d3:12:05:67:54:3e:f5:
ff:65:17:4c:9a:68:b0:e4:02:51:a3:71:bf:df:30:7c:82:44:
ae:51:20:c3:5f:77:ef:95:e3:e4:35:04:5e:25:ce:ef:62:a8:
df:6c:78:dd:82:48:16:03:66:62:76:32:fc:56:e3:d8:e2:c9:
cc:f6:0c:12:e2:2b:a8:50:7f:af:88:6e:9c:91:35:99:43:74:
25:3c:da:20:88:fa:c1:7e:d6:06:25:40:e3:a9:22:f4:ba:a1:
c0:3c:0d:06:85:ef:a6:7a:dd:32:63:cc:98:d9:52:11:df:60:
da:86:59:32:7f:c1:d7:cc:a8:d8:3a:01:35:6b:26:0b:a8:b3:
a2:a4:7d:54:e0:d2:50:10:5e:8c:b5:f8:8a:7b:06:53:35:d1:
9d:78:f6:3f:11:cc:41:25:21:a7:3b:1e:f6:bd:fa:d8:21:c6:
69:57:56:78:67:c4:fe:26:6d:4a:86:4e:79:d9:2c:ea:31:dd:
d9:78:f4:de:b4:32:e7:a6:33:45:7d:25:ac:fe:ae:96:2b:66:
ca:88:71:12:a7:78:3c:4a:0c:9b:41:2c:64:56:7b:e0:cc:3a:
c8:5a:1b:2d:b4:bd:01:ca:db:be:1b:04:5f:0e:18:1d:a9:d6:
07:f8:50:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuEWqnuT532OkCBBuPWTlysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMDYxMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWJjMWM3ZjlkYTZmYjUzYTQ3YzM2NDBiZDg4NjUzYWE2NmNhN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Laiyy8v0yvTs167cnY3UqKEPJ9
CQem4DyLXj0bYbPc2n5UdpiCbleiUHGGGIfHrqO8aqb95LIzuT/ffY3x1x5B9dZu
qu+DeliBB+R4B1+rP9QsmIWnDh+LLKVD40Y0Xd9WXhAsFB8FC4VmH6XfUwtC0ezy
E+5tw5KjXsk4rlCpD5ydI4/JVcHsaWpXyZpmVDcXphzucVuP/D20to+0MF4n4nuM
OZnnwJcEI4LAEZkvRo7QlkfaD2oWfrVWXrP6qbvh66kRezijTAZtQE9U7XW2NN4O
pD9gDukL8ainfMCAqW7QKMyjKRnoqQyqUY1hY3MjNjbGy/aAL8PsMTm0eQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF68HH+dpvtTpHw2QL2IZTqmbKexMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWHJ3Y2Y1Mm0tMU9rZkRaQXZZaGxPcVpzcDdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA8uEMfXNB2V9txB0xIF
Z1Q+9f9lF0yaaLDkAlGjcb/fMHyCRK5RIMNfd++V4+Q1BF4lzu9iqN9seN2CSBYD
ZmJ2MvxW49jiycz2DBLiK6hQf6+IbpyRNZlDdCU82iCI+sF+1gYlQOOpIvS6ocA8
DQaF76Z63TJjzJjZUhHfYNqGWTJ/wdfMqNg6ATVrJguos6KkfVTg0lAQXoy1+Ip7
BlM10Z149j8RzEElIac7Hva9+tghxmlXVnhnxP4mbUqGTnnZLOox3dl49N60Muem
M0V9Jaz+rpYrZsqIcRKneDxKDJtBLGRWe+DMOshaGy20vQHK274bBF8OGB2p1gf4
UHc=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:06 2025 by rpki-client