Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqMZClIDwtxj6_Gv3uSbvrVtgTk.roa
File: eqMZClIDwtxj6_Gv3uSbvrVtgTk.roa (raw, json)
Hash identifier: kH3EKG0NK3AJHkCB9K8WGt9iZmWP3YFmtxV8baKbfl0=
Subject key identifier: 7A:A3:19:0A:52:03:C2:DC:63:EB:F1:AF:DE:E4:9B:BE:B5:6D:81:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C52C830FBE6A8667A0EC2CB5DA9F3DBC7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqMZClIDwtxj6_Gv3uSbvrVtgTk.roa
Signing time: Sun 10 Dec 2023 08:11:40 +0000
ROA not before: Sun 10 Dec 2023 08:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:c8:30:fb:e6:a8:66:7a:0e:c2:cb:5d:a9:f3:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 08:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa3190a5203c2dc63ebf1afdee49bbeb56d8139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:3f:9b:9f:f8:72:d5:db:72:f8:61:65:fb:
7f:7b:b0:61:86:8d:46:34:c1:1a:af:94:2f:d7:f0:
31:dd:e2:10:3d:d3:d2:43:82:5b:0b:d2:cf:ca:9f:
68:d9:37:a0:0d:6d:0c:e0:65:7e:15:a5:d5:32:51:
4a:8a:50:26:48:a3:79:e6:70:57:f8:c6:8d:f8:37:
50:0b:94:12:29:24:fb:39:ef:55:ae:e4:b7:53:7a:
32:82:00:12:d2:4b:c0:c6:2d:c8:02:24:3e:23:8a:
db:8e:32:e0:eb:2c:13:c3:c8:54:d7:b4:b1:67:28:
13:e6:8c:de:e8:d2:74:61:17:0e:22:15:42:43:ea:
9b:d2:fc:ae:41:75:61:5e:1c:dd:70:96:f9:d0:75:
31:11:99:6d:af:10:b2:c2:46:6c:1b:7c:7c:d5:d6:
82:3b:28:35:76:17:8f:7c:9c:b4:70:d6:a3:74:b8:
12:56:63:4e:2a:b5:38:9f:bf:9e:c7:49:31:7c:79:
78:a1:7f:81:d6:a9:ba:1c:5a:9e:eb:e9:cd:6b:53:
84:8b:44:ee:4c:f5:0f:1b:b4:d7:cd:bc:5d:24:b3:
e6:d4:b7:27:3b:b2:a0:6a:e5:0c:56:a8:fa:c8:9a:
00:28:b2:ac:05:0d:c1:47:37:eb:ee:cd:c3:96:e6:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:19:0A:52:03:C2:DC:63:EB:F1:AF:DE:E4:9B:BE:B5:6D:81:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqMZClIDwtxj6_Gv3uSbvrVtgTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:bc:9d:cd:15:12:8c:fb:3d:32:1d:0e:a3:c6:67:6d:a4:44:
15:91:46:f4:d6:a2:ae:47:44:91:42:75:10:6b:4f:74:a7:09:
fc:c1:a0:f9:ac:a0:89:97:51:5c:33:98:58:a2:17:10:30:31:
96:ed:3d:ad:01:36:49:3a:3c:f5:61:4a:e2:52:05:33:92:7f:
13:97:fb:0d:f9:8c:f2:ea:87:d0:c8:a8:c6:42:51:d3:0f:62:
f7:4e:da:32:1d:92:38:41:07:cf:80:7b:2c:46:de:b7:1c:23:
9c:a9:71:e6:fa:00:01:84:84:83:4b:7b:4a:7b:4d:52:b6:d1:
0d:71:67:42:27:73:f0:73:7a:7e:71:ff:a8:bf:1f:9c:44:c6:
a7:8f:4d:21:e7:7b:d6:9e:bd:20:b1:46:92:84:db:74:b2:36:
0a:79:38:48:f8:30:30:c3:43:c4:33:41:46:f7:09:cc:5a:52:
4d:1e:01:b5:90:b8:5b:ba:4f:b0:26:67:43:b3:69:3f:23:8b:
88:7b:e4:a5:40:be:7e:d2:e1:1a:4d:42:d5:16:df:4f:bc:23:
79:3a:9c:c1:87:2d:3b:1f:37:3f:92:6c:c3:22:23:9b:67:de:
4d:b6:ec:38:21:31:f9:7f:2d:2d:65:d0:a4:3d:7a:38:20:99:
0a:38:85:35
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxSyDD75qhmeg7Cy12p89vHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEwMDgxMTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWEzMTkwYTUyMDNjMmRjNjNlYmYxYWZkZWU0OWJiZWI1NmQ4MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsk/m5/4ctXbcvhhZft/e7Bhho1G
NMEar5Qv1/Ax3eIQPdPSQ4JbC9LPyp9o2TegDW0M4GV+FaXVMlFKilAmSKN55nBX
+MaN+DdQC5QSKST7Oe9VruS3U3oyggAS0kvAxi3IAiQ+I4rbjjLg6ywTw8hU17Sx
ZygT5oze6NJ0YRcOIhVCQ+qb0vyuQXVhXhzdcJb50HUxEZltrxCywkZsG3x81daC
Oyg1dhePfJy0cNajdLgSVmNOKrU4n7+ex0kxfHl4oX+B1qm6HFqe6+nNa1OEi0Tu
TPUPG7TXzbxdJLPm1LcnO7KgauUMVqj6yJoAKLKsBQ3BRzfr7s3DlubZ7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHqjGQpSA8LcY+vxr97km761bYE5MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZXFNWkNsSUR3dHhqNl9HdjN1U2J2clZ0Z1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJe8nc0VEoz7PTIdDqPG
Z22kRBWRRvTWoq5HRJFCdRBrT3SnCfzBoPmsoImXUVwzmFiiFxAwMZbtPa0BNkk6
PPVhSuJSBTOSfxOX+w35jPLqh9DIqMZCUdMPYvdO2jIdkjhBB8+AeyxG3rccI5yp
ceb6AAGEhINLe0p7TVK20Q1xZ0Inc/Bzen5x/6i/H5xExqePTSHne9aevSCxRpKE
23SyNgp5OEj4MDDDQ8QzQUb3CcxaUk0eAbWQuFu6T7AmZ0OzaT8ji4h75KVAvn7S
4RpNQtUW30+8I3k6nMGHLTsfNz+SbMMiI5tn3k227DghMfl/LS1l0KQ9ejggmQo4
hTU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:22 2025 by rpki-client