Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNN9R2DRVDT_BxdwWCNR96Lxl0A.roa
File: gNN9R2DRVDT_BxdwWCNR96Lxl0A.roa (raw, json)
Hash identifier: RUOQCDrzwdGOSgl3HXF3OsXcZV9T5q+0zgzAfRwMU9g=
Subject key identifier: 80:D3:7D:47:60:D1:54:34:FF:07:17:70:58:23:51:F7:A2:F1:97:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADE40BF41A0E24F9CE9229C9CA18943F9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNN9R2DRVDT_BxdwWCNR96Lxl0A.roa
Signing time: Fri 29 Sep 2023 00:04:59 +0000
ROA not before: Fri 29 Sep 2023 00:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:de40:45b3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:40:bf:41:a0:e2:4f:9c:e9:22:9c:9c:a1:89:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 00:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d37d4760d15434ff071770582351f7a2f19740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:e7:fc:a4:de:1b:eb:a1:d1:ff:54:83:33:
e9:40:cd:a3:47:c6:12:ae:d3:57:4d:af:39:7c:51:
71:ad:56:15:3d:5e:af:b4:2b:8b:6a:7f:7b:9d:11:
5d:5a:83:cc:2f:86:88:0d:9f:ea:40:8f:d0:c4:8f:
3e:8f:e8:9a:80:26:64:98:33:f4:b0:a5:7f:5d:e6:
ff:f9:5f:4f:e5:24:25:cf:5b:c2:ac:32:90:ae:75:
fd:31:e6:d0:69:dd:5f:58:36:b0:92:be:21:22:20:
17:fa:4d:9b:12:1b:e6:87:67:ad:9e:c2:c1:49:77:
6d:9a:3f:b8:bf:8b:0e:05:d5:22:47:53:50:5f:4a:
c3:4b:c0:25:ed:1c:b8:20:42:cc:d1:d2:70:b9:47:
8c:0f:c0:17:4b:73:23:c4:cb:e4:1c:82:e5:2a:03:
f6:a0:57:d5:66:aa:2e:2b:75:58:42:dd:ce:02:8a:
02:37:36:e0:c8:f9:59:e3:e1:76:de:a4:a6:94:b4:
22:da:8b:4a:ad:76:0a:9b:ce:bb:09:de:79:67:08:
02:92:ae:7d:84:4f:04:a8:a1:da:1f:71:cc:6d:54:
13:61:e1:48:67:d1:08:eb:fc:b6:f3:56:07:1f:77:
81:04:df:c3:26:cb:8a:50:c7:1b:4c:13:f0:b9:16:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:7D:47:60:D1:54:34:FF:07:17:70:58:23:51:F7:A2:F1:97:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNN9R2DRVDT_BxdwWCNR96Lxl0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:1e:5f:14:91:1c:e3:f2:4f:e5:87:18:4d:b3:b8:0e:4c:f6:
35:9d:c5:1d:13:a8:02:91:72:53:07:7b:fe:b1:4b:73:15:49:
4d:d1:be:c0:e6:d2:e4:04:0f:1c:96:93:e1:32:71:2d:0a:1c:
56:6f:17:1f:0d:f9:dc:c4:d1:95:14:73:c3:83:02:05:49:e7:
d3:32:e8:e2:be:2c:2f:96:22:1e:89:7a:df:42:cc:e7:7d:4a:
1f:6b:cd:97:a4:01:42:bd:61:c2:17:e8:d4:e9:f2:a4:d8:fe:
1d:0a:f0:82:01:f5:c2:86:73:c9:52:25:ca:24:ff:9e:d0:df:
c5:39:3f:aa:22:4e:56:7b:39:7e:9d:30:63:01:91:49:81:b7:
16:58:7d:9b:b0:6e:91:ae:6d:91:32:88:3f:73:12:09:44:96:
f2:6e:52:43:4f:ab:3c:d0:a8:a9:3a:72:08:b2:21:81:34:be:
65:00:8e:0b:f7:48:8b:3f:01:30:4f:e0:96:07:ad:0e:9a:a6:
14:74:41:84:1f:6c:88:9d:1e:e9:0a:aa:83:59:10:52:29:ea:
d8:b2:48:f3:ca:6c:a3:14:d7:cc:c2:cb:3a:ea:59:88:81:dd:
7d:4e:7f:93:98:ea:28:93:07:38:cd:69:22:62:3b:8c:e9:ca:
03:30:f6:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYreQL9BoOJPnOkinJyhiUP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI5MDAwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGQzN2Q0NzYwZDE1NDM0ZmYwNzE3NzA1ODIzNTFmN2EyZjE5NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgATn/KTeG+uh0f9UgzPpQM2jR8YS
rtNXTa85fFFxrVYVPV6vtCuLan97nRFdWoPML4aIDZ/qQI/QxI8+j+iagCZkmDP0
sKV/Xeb/+V9P5SQlz1vCrDKQrnX9MebQad1fWDawkr4hIiAX+k2bEhvmh2etnsLB
SXdtmj+4v4sOBdUiR1NQX0rDS8Al7Ry4IELM0dJwuUeMD8AXS3MjxMvkHILlKgP2
oFfVZqouK3VYQt3OAooCNzbgyPlZ4+F23qSmlLQi2otKrXYKm867Cd55ZwgCkq59
hE8EqKHaH3HMbVQTYeFIZ9EI6/y281YHH3eBBN/DJsuKUMcbTBPwuRblCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIDTfUdg0VQ0/wcXcFgjUfei8ZdAMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZ05OOVIyRFJWRFRfQnhkd1dDTlI5Nkx4bDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABQeXxSRHOPyT+WHGE2z
uA5M9jWdxR0TqAKRclMHe/6xS3MVSU3RvsDm0uQEDxyWk+EycS0KHFZvFx8N+dzE
0ZUUc8ODAgVJ59My6OK+LC+WIh6Jet9CzOd9Sh9rzZekAUK9YcIX6NTp8qTY/h0K
8IIB9cKGc8lSJcok/57Q38U5P6oiTlZ7OX6dMGMBkUmBtxZYfZuwbpGubZEyiD9z
EglElvJuUkNPqzzQqKk6cgiyIYE0vmUAjgv3SIs/ATBP4JYHrQ6aphR0QYQfbIid
HukKqoNZEFIp6tiySPPKbKMU18zCyzrqWYiB3X1Of5OY6iiTBzjNaSJiO4zpygMw
9o4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:49:15 2025 by rpki-client