Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dNAT3ajg8-RPdDYhW4kPQEdAh38.roa
File: dNAT3ajg8-RPdDYhW4kPQEdAh38.roa (raw, json)
Hash identifier: EXWfFGxy+47O9N387hS3Z36Aot73DDmJjpdIFOGEjeA=
Subject key identifier: 74:D0:13:DD:A8:E0:F3:E4:4F:74:36:21:5B:89:0F:40:47:40:87:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4583C8859E8FEC053DEFA13A5E005D08
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dNAT3ajg8-RPdDYhW4kPQEdAh38.roa
Signing time: Thu 19 Oct 2023 01:19:06 +0000
ROA not before: Thu 19 Oct 2023 01:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:83:c8:85:9e:8f:ec:05:3d:ef:a1:3a:5e:00:5d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 01:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d013dda8e0f3e44f7436215b890f404740877f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:a5:8d:ce:e9:15:e3:b1:43:c3:c4:a0:f1:
bb:2c:f4:e7:49:66:61:35:05:de:42:c1:e0:5f:36:
d2:c8:c5:e8:56:30:6c:d0:d2:e2:8e:dc:61:ea:d7:
20:5d:26:86:23:19:a9:ae:36:65:09:9e:ac:63:5c:
bc:3c:cd:51:08:99:38:a2:39:59:17:ad:37:19:e7:
b7:09:07:c6:56:da:d8:8a:7c:20:40:26:23:b8:05:
c9:41:37:5a:14:95:97:e5:76:c2:8a:0d:87:bf:17:
73:f8:e2:d0:35:78:84:78:4b:94:b0:11:80:21:ef:
bf:b5:56:ab:15:4c:a4:3b:15:ac:7d:76:2a:d1:bd:
03:0f:c4:49:ac:07:64:e1:5d:62:94:8e:cc:50:f0:
70:af:29:cd:28:86:97:9a:ce:ad:a7:22:2e:1e:3f:
da:65:76:b5:28:be:2e:eb:b4:fe:3e:ad:d5:ba:f6:
1d:ea:da:4c:17:3e:c3:c3:7d:0b:1a:15:1f:ab:5f:
34:f1:2a:12:fb:74:09:d6:b1:d9:39:4e:c1:42:6d:
24:1e:53:32:98:dd:2f:09:cf:d5:9d:d0:e2:1f:27:
a1:37:0d:56:d1:4a:bb:6c:45:fc:00:49:21:02:a4:
4b:9d:fc:7d:f7:85:d0:0c:f6:cd:11:1f:b6:f3:a6:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:13:DD:A8:E0:F3:E4:4F:74:36:21:5B:89:0F:40:47:40:87:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dNAT3ajg8-RPdDYhW4kPQEdAh38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:5d:8f:44:c2:49:20:f7:37:fe:7c:4e:7d:33:a1:fb:b0:21:
a1:77:1c:55:88:7f:cf:f0:a0:98:45:7f:fd:5c:c8:d8:f2:42:
6c:d2:8d:82:c4:20:8e:af:31:a0:a1:5f:71:67:7d:d7:3d:8d:
6d:ac:35:de:37:a6:dc:e4:81:78:ee:68:ee:91:ad:61:f5:03:
4f:63:95:0d:1b:8b:85:44:95:af:60:25:a9:43:15:1f:d0:6d:
6f:bd:db:62:1c:8f:45:47:1d:b5:21:6c:cc:63:99:40:d6:0b:
0d:59:25:63:d2:94:e2:0a:63:6d:e2:f6:99:a9:34:1d:81:6f:
6f:3c:1b:6c:12:49:ce:b2:83:5c:2a:57:c3:74:48:60:e8:0d:
6f:44:33:dd:bc:b1:5f:56:b8:5f:55:7e:98:ed:26:24:f4:05:
ff:a5:1b:15:94:9a:e6:be:a1:e7:d8:b4:7a:1a:c5:a4:85:c5:
52:83:f2:c5:6a:09:3a:f4:80:64:bb:db:bd:63:e9:6e:27:e6:
7e:30:78:28:8b:f7:c5:85:a7:2c:11:25:6c:0f:a1:45:27:0b:
c4:73:97:d3:8f:e6:f2:3e:74:46:25:0b:83:6d:9e:b2:05:4f:
c2:26:de:7b:4c:36:03:04:ad:28:10:37:17:f5:12:e0:a2:50:
af:f9:3d:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtFg8iFno/sBT3voTpeAF0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDExOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQwMTNkZGE4ZTBmM2U0NGY3NDM2MjE1Yjg5MGY0MDQ3NDA4NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z6ljc7pFeOxQ8PEoPG7LPTnSWZh
NQXeQsHgXzbSyMXoVjBs0NLijtxh6tcgXSaGIxmprjZlCZ6sY1y8PM1RCJk4ojlZ
F603Gee3CQfGVtrYinwgQCYjuAXJQTdaFJWX5XbCig2Hvxdz+OLQNXiEeEuUsBGA
Ie+/tVarFUykOxWsfXYq0b0DD8RJrAdk4V1ilI7MUPBwrynNKIaXms6tpyIuHj/a
ZXa1KL4u67T+Pq3VuvYd6tpMFz7Dw30LGhUfq1808SoS+3QJ1rHZOU7BQm0kHlMy
mN0vCc/VndDiHyehNw1W0Uq7bEX8AEkhAqRLnfx994XQDPbNER+286YNGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHTQE92o4PPkT3Q2IVuJD0BHQId/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZE5BVDNhamc4LVJQZERZaFc0a1BRRWRBaDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAChdj0TCSSD3N/58Tn0z
ofuwIaF3HFWIf8/woJhFf/1cyNjyQmzSjYLEII6vMaChX3Fnfdc9jW2sNd43ptzk
gXjuaO6RrWH1A09jlQ0bi4VEla9gJalDFR/QbW+922Icj0VHHbUhbMxjmUDWCw1Z
JWPSlOIKY23i9pmpNB2Bb288G2wSSc6yg1wqV8N0SGDoDW9EM928sV9WuF9Vfpjt
JiT0Bf+lGxWUmua+oefYtHoaxaSFxVKD8sVqCTr0gGS7271j6W4n5n4weCiL98WF
pywRJWwPoUUnC8Rzl9OP5vI+dEYlC4NtnrIFT8Im3ntMNgMErSgQNxf1EuCiUK/5
Pb4=
-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:39 2025 by rpki-client