Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SakDIPB28VkwQSun7YpntAS4HQ.roa
File: _SakDIPB28VkwQSun7YpntAS4HQ.roa (raw, json)
Hash identifier: dY/Ycg/d73xhXID29f9dYNxmPJXE7FXyr6tqv8KGHDU=
Subject key identifier: FD:26:A4:0C:83:C1:DB:C5:64:C1:04:AE:9F:B6:29:9E:D0:12:E0:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8C82FBAD4BD16BD34681B27DD3613AFF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SakDIPB28VkwQSun7YpntAS4HQ.roa
Signing time: Wed 01 Nov 2023 20:11:16 +0000
ROA not before: Wed 01 Nov 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:82:fb:ad:4b:d1:6b:d3:46:81:b2:7d:d3:61:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd26a40c83c1dbc564c104ae9fb6299ed012e074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:5a:1e:cd:52:6e:dd:29:7c:39:d6:80:98:
9d:0b:9a:9e:57:49:07:54:79:b2:d5:8c:99:fc:9a:
bc:05:58:17:3a:15:52:03:40:3c:a5:6d:06:47:75:
d5:e2:3d:27:13:b9:97:8b:56:65:b5:a7:40:d0:56:
b5:36:8c:dd:59:4c:93:85:e8:4b:f4:44:04:23:0f:
a3:be:42:92:69:ab:98:41:a3:8d:06:e4:36:5e:41:
14:05:d7:e5:00:c3:e3:04:1c:69:8d:20:b8:62:03:
93:10:d6:ea:30:c0:7f:a9:d4:53:6b:22:1c:9e:5c:
f6:a2:7c:8d:0c:89:e0:c6:6f:52:1e:77:a0:d6:c1:
4b:67:b9:6f:46:b8:c1:a8:de:5a:8b:d0:30:e3:80:
0d:23:0d:65:d9:25:19:f3:d6:96:e3:45:6c:cd:34:
24:f7:55:5a:65:f6:32:db:d0:d7:08:57:70:a3:46:
e2:85:b8:e9:c1:f6:99:5e:b5:8a:e9:a9:58:1a:11:
c1:bb:1a:77:b1:43:fa:5b:f2:b0:8e:3e:22:3c:13:
0a:e9:05:4c:b2:1f:eb:3e:6d:e0:48:ce:db:da:4e:
68:69:a4:5b:fd:26:a5:5d:fa:c4:f0:a1:81:eb:7d:
68:3f:82:68:76:f2:b2:b6:cd:96:21:97:e6:e1:90:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:A4:0C:83:C1:DB:C5:64:C1:04:AE:9F:B6:29:9E:D0:12:E0:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SakDIPB28VkwQSun7YpntAS4HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:97:17:67:20:46:fa:d8:36:8d:60:30:f4:1e:39:78:9d:2d:
fd:83:bb:33:52:d4:7a:ea:a7:b9:74:03:4f:4c:d3:12:79:a8:
ac:59:6e:12:fe:ff:fa:23:c9:8f:1a:eb:ac:7e:16:3e:5e:46:
da:c7:81:ba:71:a2:4b:53:95:ed:8f:61:cf:70:5b:f8:bb:d0:
59:f9:94:ce:47:5a:06:98:7a:2f:09:0a:6e:96:68:4a:5d:59:
81:5e:ca:ad:71:0c:76:8f:b7:15:d7:b4:e1:f5:3c:a7:f7:f9:
78:59:93:d8:41:89:a8:a2:4c:ae:57:10:30:23:96:03:c5:ee:
72:7b:f5:b6:32:08:c0:48:d6:98:38:75:09:0c:d6:53:56:58:
94:62:93:d5:2f:a2:2f:22:c2:f0:ef:86:bf:38:80:5e:03:24:
48:dd:71:61:e9:48:15:73:dc:30:2b:e8:fb:63:96:76:b0:3b:
03:bd:0b:bc:bb:fc:79:25:49:47:74:31:22:bf:9e:74:da:38:
22:37:0b:be:28:2e:25:fd:69:fc:e4:cb:df:74:8d:71:6e:7b:
27:e3:28:2a:b2:11:19:bd:79:50:12:7d:c2:03:64:50:f8:70:
ac:37:b0:e0:8c:5f:0f:8f:f4:49:09:cd:86:ed:6b:33:57:e8:
d3:fa:a4:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuMgvutS9Fr00aBsn3TYTr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAxMjAxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDI2YTQwYzgzYzFkYmM1NjRjMTA0YWU5ZmI2Mjk5ZWQwMTJlMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK9aHs1Sbt0pfDnWgJidC5qeV0kH
VHmy1YyZ/Jq8BVgXOhVSA0A8pW0GR3XV4j0nE7mXi1ZltadA0Fa1NozdWUyThehL
9EQEIw+jvkKSaauYQaONBuQ2XkEUBdflAMPjBBxpjSC4YgOTENbqMMB/qdRTayIc
nlz2onyNDIngxm9SHneg1sFLZ7lvRrjBqN5ai9Aw44ANIw1l2SUZ89aW40VszTQk
91VaZfYy29DXCFdwo0bihbjpwfaZXrWK6alYGhHBuxp3sUP6W/Kwjj4iPBMK6QVM
sh/rPm3gSM7b2k5oaaRb/SalXfrE8KGB631oP4JodvKyts2WIZfm4ZD/wwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP0mpAyDwdvFZMEErp+2KZ7QEuB0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvX1Nha0RJUEIyOFZrd1FTdW43WXBudEFTNEhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE6XF2cgRvrYNo1gMPQe
OXidLf2DuzNS1Hrqp7l0A09M0xJ5qKxZbhL+//ojyY8a66x+Fj5eRtrHgbpxoktT
le2PYc9wW/i70Fn5lM5HWgaYei8JCm6WaEpdWYFeyq1xDHaPtxXXtOH1PKf3+XhZ
k9hBiaiiTK5XEDAjlgPF7nJ79bYyCMBI1pg4dQkM1lNWWJRik9Uvoi8iwvDvhr84
gF4DJEjdcWHpSBVz3DAr6PtjlnawOwO9C7y7/HklSUd0MSK/nnTaOCI3C74oLiX9
afzky990jXFueyfjKCqyERm9eVASfcIDZFD4cKw3sOCMXw+P9EkJzYbtazNX6NP6
pBU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:32 2025 by rpki-client