Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YjNTsrSPHQN8pB2Z2sRvdYvo94E.roa
File: YjNTsrSPHQN8pB2Z2sRvdYvo94E.roa (raw, json)
Hash identifier: QAPdp2vXTs/jRYSETgMUqACR6CMNPZsqWy1iZad2+gA=
Subject key identifier: 62:33:53:B2:B4:8F:1D:03:7C:A4:1D:99:DA:C4:6F:75:8B:E8:F7:81
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B017988CEF6D2ED85BCB43E508993F764
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YjNTsrSPHQN8pB2Z2sRvdYvo94E.roa
Signing time: Thu 05 Oct 2023 20:13:43 +0000
ROA not before: Thu 05 Oct 2023 20:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:79:88:ce:f6:d2:ed:85:bc:b4:3e:50:89:93:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 20:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=623353b2b48f1d037ca41d99dac46f758be8f781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:89:55:64:78:67:03:e4:a3:80:b2:6a:cf:
84:a3:76:85:9c:a1:c8:c2:f1:52:7a:27:13:98:19:
09:28:48:77:8c:52:b7:90:a1:7a:93:a5:52:2f:7a:
30:14:c7:fd:5a:03:6b:03:d1:b8:33:eb:2b:30:7f:
7c:b5:ca:2a:85:23:be:18:b5:a5:36:3b:9d:4c:07:
a1:7c:7c:87:e9:0c:f3:b7:b5:6c:d7:4e:81:38:c9:
99:4e:d8:d8:3e:2c:cb:7b:75:bd:d5:7a:02:cc:8e:
e9:71:ac:3c:5f:c7:09:17:f9:c2:ad:57:5a:84:64:
0c:5a:e5:c3:87:dd:8f:77:d6:3d:fb:24:e2:58:15:
9d:19:0b:91:0e:14:a3:06:3b:5d:cf:f7:69:0b:4a:
23:13:53:5e:4d:1e:b5:38:1c:94:24:4a:85:d4:fb:
43:85:8f:63:37:2c:8b:0a:ee:4b:a2:02:9c:ec:30:
58:9f:ae:48:16:6c:fc:a6:cd:f3:51:7a:1e:6c:f7:
49:ed:05:5d:45:0c:28:0a:e4:3d:c4:d9:f8:86:a0:
c0:e8:98:9b:52:87:f8:2a:cd:90:6c:4b:75:98:e0:
61:90:14:2e:44:29:9f:7f:0a:ef:43:19:42:15:a9:
4d:d2:c9:a8:68:55:1d:35:b2:96:52:47:20:77:47:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:53:B2:B4:8F:1D:03:7C:A4:1D:99:DA:C4:6F:75:8B:E8:F7:81
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YjNTsrSPHQN8pB2Z2sRvdYvo94E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d0:c8:08:20:81:31:d7:f2:0a:72:ac:0e:fc:0f:08:c5:c3:
7c:70:5e:4c:dc:f1:76:d6:0d:4b:ef:d3:3f:e0:e3:a7:f5:de:
25:cc:9d:4a:4f:b0:e4:d6:b4:25:5f:30:f2:13:3f:dd:76:1f:
2b:ef:a7:ce:1d:a2:22:e4:00:a3:79:7c:d1:cd:f0:22:09:6c:
0d:ea:dc:28:da:e9:28:91:72:74:44:3e:19:2b:d7:40:dd:d4:
07:22:3b:b2:26:d3:d0:99:04:40:31:cf:1d:a8:c4:1b:45:c0:
b0:74:59:85:30:a5:ae:56:c2:be:79:bf:39:16:d3:26:ef:88:
af:9a:a4:66:21:34:e9:94:99:81:b7:29:a6:bf:b0:1a:bd:cc:
f6:74:35:17:44:cc:6d:5e:91:81:9e:e6:98:46:ff:ab:dc:8e:
44:86:c9:79:68:a3:72:8a:63:d8:9e:69:29:b1:04:58:6c:b2:
9a:17:ca:fb:a5:8e:19:b0:8b:4d:c7:05:bf:02:92:d3:d6:eb:
5f:23:65:9a:07:1d:4c:28:da:c6:8f:39:01:43:98:4d:ff:a5:
1c:73:74:fe:71:3d:5c:ad:c0:88:97:9d:72:33:d5:1e:9c:ec:
93:c8:9f:47:d9:2d:06:d0:cf:ec:80:7b:1d:64:cc:43:ef:2f:
c1:c7:f8:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsBeYjO9tLthby0PlCJk/dkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA1MjAxMzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjMzNTNiMmI0OGYxZDAzN2NhNDFkOTlkYWM0NmY3NThiZThmNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIaJVWR4ZwPko4Cyas+Eo3aFnKHI
wvFSeicTmBkJKEh3jFK3kKF6k6VSL3owFMf9WgNrA9G4M+srMH98tcoqhSO+GLWl
NjudTAehfHyH6Qzzt7Vs106BOMmZTtjYPizLe3W91XoCzI7pcaw8X8cJF/nCrVda
hGQMWuXDh92Pd9Y9+yTiWBWdGQuRDhSjBjtdz/dpC0ojE1NeTR61OByUJEqF1PtD
hY9jNyyLCu5LogKc7DBYn65IFmz8ps3zUXoebPdJ7QVdRQwoCuQ9xNn4hqDA6Jib
Uof4Ks2QbEt1mOBhkBQuRCmffwrvQxlCFalN0smoaFUdNbKWUkcgd0ftNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGIzU7K0jx0DfKQdmdrEb3WL6PeBMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWWpOVHNyU1BIUU44cEIyWjJzUnZkWXZvOTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAzQyAgggTHX8gpyrA78
DwjFw3xwXkzc8XbWDUvv0z/g46f13iXMnUpPsOTWtCVfMPITP912Hyvvp84doiLk
AKN5fNHN8CIJbA3q3Cja6SiRcnREPhkr10Dd1AciO7Im09CZBEAxzx2oxBtFwLB0
WYUwpa5Wwr55vzkW0ybviK+apGYhNOmUmYG3Kaa/sBq9zPZ0NRdEzG1ekYGe5phG
/6vcjkSGyXloo3KKY9ieaSmxBFhsspoXyvuljhmwi03HBb8CktPW618jZZoHHUwo
2saPOQFDmE3/pRxzdP5xPVytwIiXnXIz1R6c7JPIn0fZLQbQz+yAex1kzEPvL8HH
+LE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:05:12 2025 by rpki-client