Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/coIlA1KsFlajccWRGIW0TOzS9ec.roa
File: coIlA1KsFlajccWRGIW0TOzS9ec.roa (raw, json)
Hash identifier: sEnY+dQDZxFyOXOj/EEUvWQ3bXSAfjpDvhELZjAL0dU=
Subject key identifier: 72:82:25:03:52:AC:16:56:A3:71:C5:91:18:85:B4:4C:EC:D2:F5:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD1D0B27FEF2BEB5C41155400B0B79843
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/coIlA1KsFlajccWRGIW0TOzS9ec.roa
Signing time: Wed 15 Nov 2023 07:09:57 +0000
ROA not before: Wed 15 Nov 2023 07:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:d0:b2:7f:ef:2b:eb:5c:41:15:54:00:b0:b7:98:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 07:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7282250352ac1656a371c5911885b44cecd2f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:ef:7c:e1:c4:02:cd:67:6c:e6:bc:23:45:
24:53:8c:3e:a9:b4:72:20:91:22:0e:b6:86:c7:a7:
56:1a:d8:c3:de:e9:29:ed:02:81:bf:50:69:5a:3a:
fc:fe:bf:77:fe:ba:79:9f:9d:f2:72:aa:58:1b:d1:
45:ea:79:b0:b9:5d:a9:a3:3a:25:f0:b0:38:5e:bb:
8b:d3:c3:1d:1c:dd:48:83:03:2b:aa:97:ee:32:08:
2d:e3:0a:6f:a7:f3:48:fe:ec:45:85:9d:c1:c3:04:
2d:7b:99:17:60:f6:7e:b5:f7:a6:29:19:50:22:cd:
14:df:37:5a:fd:8c:ef:0d:26:a3:91:18:fc:bd:23:
7e:eb:0b:30:de:84:b4:68:ec:15:2e:5d:49:92:64:
c1:e9:23:ff:5f:3d:35:d5:14:dc:c4:a4:59:c7:16:
9c:ec:2e:16:4b:d8:01:02:fe:54:01:23:a4:ab:c5:
e5:8a:2d:52:c9:d1:2d:3e:b0:c4:50:43:f6:83:1a:
1f:b3:d0:2c:db:46:29:f1:16:f5:5f:aa:b5:53:7f:
fe:f5:2a:73:14:b7:02:e0:c2:e5:14:67:ea:37:a6:
60:0c:53:3a:af:94:ce:e6:84:9f:03:0c:66:38:d9:
58:22:16:ee:5d:b9:e0:22:c6:f0:8c:28:9e:7d:c3:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:25:03:52:AC:16:56:A3:71:C5:91:18:85:B4:4C:EC:D2:F5:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/coIlA1KsFlajccWRGIW0TOzS9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:b9:f8:65:42:56:fd:00:29:f6:7b:c3:18:77:fa:41:4f:03:
4c:f8:ba:26:2c:6d:72:fa:72:f4:65:81:18:f9:b1:5a:ec:74:
ad:1b:77:b9:c0:21:e6:ed:55:c0:78:c5:c4:0d:b8:dc:9c:c4:
7b:e2:7e:2b:f6:67:ee:df:96:fb:7e:df:be:39:16:b5:fd:78:
14:52:0b:2b:59:b3:cf:9d:14:74:f9:72:49:05:43:d3:11:c8:
60:37:ad:b6:df:cd:4f:fd:da:34:7d:01:2b:eb:c4:bb:02:e3:
9a:4f:7c:29:ea:2c:04:32:cc:c3:81:56:d6:d9:09:3e:e8:27:
b1:09:f7:69:01:52:a9:b6:d9:da:b8:51:b3:1e:6e:9e:4f:e2:
1b:25:4e:06:ae:d6:69:74:78:0a:c1:d8:7f:f1:3a:fc:4e:d4:
4a:f1:2b:b4:e4:45:b3:61:82:36:2c:59:de:f3:1a:61:0a:4f:
44:de:81:c9:b5:cc:9c:5e:ca:5c:05:95:00:d8:83:db:02:74:
03:eb:30:ef:b3:06:7e:b6:88:5e:2d:e9:57:f3:c0:79:56:a2:
f9:79:2b:34:4b:67:e6:68:52:db:a1:56:b7:94:b0:8c:43:01:
32:67:81:81:e6:76:54:25:76:ed:33:7b:a7:1d:3a:8b:33:ef:
5e:cf:c6:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvR0LJ/7yvrXEEVVACwt5hDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE1MDcwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjgyMjUwMzUyYWMxNjU2YTM3MWM1OTExODg1YjQ0Y2VjZDJmNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVXvfOHEAs1nbOa8I0UkU4w+qbRy
IJEiDraGx6dWGtjD3ukp7QKBv1BpWjr8/r93/rp5n53ycqpYG9FF6nmwuV2pozol
8LA4XruL08MdHN1IgwMrqpfuMggt4wpvp/NI/uxFhZ3BwwQte5kXYPZ+tfemKRlQ
Is0U3zda/YzvDSajkRj8vSN+6wsw3oS0aOwVLl1JkmTB6SP/Xz011RTcxKRZxxac
7C4WS9gBAv5UASOkq8Xlii1SydEtPrDEUEP2gxofs9As20Yp8Rb1X6q1U3/+9Spz
FLcC4MLlFGfqN6ZgDFM6r5TO5oSfAwxmONlYIhbuXbngIsbwjCiefcMWrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHKCJQNSrBZWo3HFkRiFtEzs0vXnMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvY29JbEExS3NGbGFqY2NXUkdJVzBUT3pTOWVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAi5+GVCVv0AKfZ7wxh3
+kFPA0z4uiYsbXL6cvRlgRj5sVrsdK0bd7nAIebtVcB4xcQNuNycxHvifiv2Z+7f
lvt+3745FrX9eBRSCytZs8+dFHT5ckkFQ9MRyGA3rbbfzU/92jR9ASvrxLsC45pP
fCnqLAQyzMOBVtbZCT7oJ7EJ92kBUqm22dq4UbMebp5P4hslTgau1ml0eArB2H/x
OvxO1ErxK7TkRbNhgjYsWd7zGmEKT0Tegcm1zJxeylwFlQDYg9sCdAPrMO+zBn62
iF4t6VfzwHlWovl5KzRLZ+ZoUtuhVreUsIxDATJngYHmdlQldu0ze6cdOosz717P
xhE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:44 2025 by rpki-client