Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gtoTnkmAtT3qw8Qh4_4UxhbiKEc.roa
File: gtoTnkmAtT3qw8Qh4_4UxhbiKEc.roa (raw, json)
Hash identifier: CVKdzFdXqCGh9LJUFf2ZiEZYY3lL17hJfZhEaE/MYYY=
Subject key identifier: 82:DA:13:9E:49:80:B5:3D:EA:C3:C4:21:E3:FE:14:C6:16:E2:28:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C31F44608618A893EA86878CFC2ACEF11
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gtoTnkmAtT3qw8Qh4_4UxhbiKEc.roa
Signing time: Sun 03 Dec 2023 23:12:21 +0000
ROA not before: Sun 03 Dec 2023 23:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:f4:46:08:61:8a:89:3e:a8:68:78:cf:c2:ac:ef:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 23:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82da139e4980b53deac3c421e3fe14c616e22847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:18:5c:b4:32:36:b1:ff:db:34:13:bf:00:
ec:1e:fc:b1:a6:64:85:87:b5:6a:1a:1c:ed:98:70:
f4:16:85:1a:48:30:28:c1:53:9b:2e:59:35:33:1b:
51:db:44:a1:11:3c:33:f4:4c:72:00:45:59:5f:27:
da:a7:f9:10:c4:e1:6c:44:e2:4a:0c:a9:3a:0f:ff:
cb:fa:76:f3:0b:71:c4:21:c4:26:1f:e9:ae:b8:a3:
ac:37:c7:be:77:fc:f3:29:75:4a:4a:18:9c:66:f2:
17:6e:ba:2e:c6:9b:e4:0f:8b:e3:82:ef:62:1e:25:
db:cf:f3:fc:3f:26:a8:3d:da:d0:2e:cb:18:03:6a:
61:79:dd:49:4a:2e:bc:54:72:67:dc:d8:34:49:e9:
89:d6:19:11:d7:7f:de:34:18:80:29:0f:61:30:c6:
e1:6a:8d:27:fc:f3:cd:bf:cd:62:cd:03:f9:16:0e:
70:94:73:50:b2:11:23:3c:1f:ea:8e:77:b6:1d:a0:
d6:6d:95:53:4d:b8:31:d1:83:8b:6d:34:83:8d:60:
be:69:19:75:c3:04:f3:ce:a5:1b:06:fe:9c:8d:28:
85:ac:af:d6:07:04:43:4d:9d:d1:d1:39:12:d4:9e:
30:08:09:fe:55:55:28:cd:c5:fa:af:23:20:4c:d4:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:13:9E:49:80:B5:3D:EA:C3:C4:21:E3:FE:14:C6:16:E2:28:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gtoTnkmAtT3qw8Qh4_4UxhbiKEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:1f:ea:d7:cd:61:70:52:09:bc:21:a4:66:7a:cf:28:7d:fc:
59:34:ba:4a:00:d2:13:18:4e:7e:16:e2:b2:13:a4:46:50:54:
ab:ac:06:71:5f:b3:51:ac:8b:eb:81:1d:29:41:89:34:96:17:
8a:d5:cb:43:8f:ea:e4:46:8d:34:a0:d6:f0:a4:81:4e:b7:38:
ef:1d:a7:1d:69:3f:ba:6e:36:f5:c2:32:22:f6:4b:09:9a:f9:
ab:02:f8:60:6a:93:f4:d9:cc:51:2c:7c:91:b3:4e:fb:ba:b9:
61:58:62:56:3e:2f:7a:27:39:98:32:c7:d1:64:92:3f:91:81:
d7:65:ad:1e:9e:ca:8a:ca:4a:77:3a:7a:d3:84:f5:01:fd:a4:
43:13:ad:c4:ed:53:b6:ad:0c:46:ea:1e:96:cf:44:70:00:62:
fd:67:ff:a0:25:a0:95:ce:f6:29:2a:49:6b:79:06:b2:54:64:
9e:b6:18:e0:12:f8:7b:e8:bf:cb:9b:22:39:41:c5:48:01:94:
65:b6:ce:6e:29:62:13:c1:0b:b9:5e:0f:00:c0:ba:b1:23:d0:
08:f4:de:b2:86:5a:04:d4:73:35:4e:5e:bb:54:dc:1b:5c:08:
eb:3e:a8:ed:70:8b:3d:b6:a4:d9:82:e5:93:0a:37:e3:4b:6b:
2b:03:ab:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwx9EYIYYqJPqhoeM/CrO8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAzMjMxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmRhMTM5ZTQ5ODBiNTNkZWFjM2M0MjFlM2ZlMTRjNjE2ZTIyODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2gYXLQyNrH/2zQTvwDsHvyxpmSF
h7VqGhztmHD0FoUaSDAowVObLlk1MxtR20ShETwz9ExyAEVZXyfap/kQxOFsROJK
DKk6D//L+nbzC3HEIcQmH+muuKOsN8e+d/zzKXVKShicZvIXbrouxpvkD4vjgu9i
HiXbz/P8PyaoPdrQLssYA2phed1JSi68VHJn3Ng0SemJ1hkR13/eNBiAKQ9hMMbh
ao0n/PPNv81izQP5Fg5wlHNQshEjPB/qjne2HaDWbZVTTbgx0YOLbTSDjWC+aRl1
wwTzzqUbBv6cjSiFrK/WBwRDTZ3R0TkS1J4wCAn+VVUozcX6ryMgTNTPpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFILaE55JgLU96sPEIeP+FMYW4ihHMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZ3RvVG5rbUF0VDNxdzhRaDRfNFV4aGJpS0VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALwf6tfNYXBSCbwhpGZ6
zyh9/Fk0ukoA0hMYTn4W4rITpEZQVKusBnFfs1Gsi+uBHSlBiTSWF4rVy0OP6uRG
jTSg1vCkgU63OO8dpx1pP7puNvXCMiL2Swma+asC+GBqk/TZzFEsfJGzTvu6uWFY
YlY+L3onOZgyx9Fkkj+RgddlrR6eyorKSnc6etOE9QH9pEMTrcTtU7atDEbqHpbP
RHAAYv1n/6AloJXO9ikqSWt5BrJUZJ62GOAS+Hvov8ubIjlBxUgBlGW2zm4pYhPB
C7leDwDAurEj0Aj03rKGWgTUczVOXrtU3BtcCOs+qO1wiz22pNmC5ZMKN+NLaysD
qzE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:54:34 2025 by rpki-client