Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hEK8OD4NbCN80AgKu1IXouWNtpY.roa
File: hEK8OD4NbCN80AgKu1IXouWNtpY.roa (raw, json)
Hash identifier: LEmFMAie1JVzZ9fZuKb8ssR+q0LU+uGXPZ8hwdwMhaI=
Subject key identifier: 84:42:BC:38:3E:0D:6C:23:7C:D0:08:0A:BB:52:17:A2:E5:8D:B6:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4D3D792792D7608F4C7833ED955CE2C6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hEK8OD4NbCN80AgKu1IXouWNtpY.roa
Signing time: Fri 20 Oct 2023 13:19:16 +0000
ROA not before: Fri 20 Oct 2023 13:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:3d:79:27:92:d7:60:8f:4c:78:33:ed:95:5c:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 13:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8442bc383e0d6c237cd0080abb5217a2e58db696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:2f:2c:89:2f:88:fe:33:ed:c8:8b:90:5c:
db:a3:ff:1b:5b:ff:31:86:1f:53:ce:96:53:7e:b8:
42:da:30:b6:7e:99:2f:e0:e7:b8:7c:bf:92:c3:1a:
55:f4:6e:56:a8:06:8a:1b:66:24:13:86:92:60:e7:
24:f9:37:8e:b8:fe:b9:49:04:ed:51:f0:f5:ae:5d:
67:f6:bb:4f:b0:f2:ec:46:68:b0:6c:72:f9:b8:1b:
41:af:e5:ae:11:d8:2f:f4:1f:83:d5:85:19:c0:c3:
37:5b:e8:32:b2:58:2a:74:fa:45:9c:6d:ef:7f:fe:
b5:fe:28:89:c8:a8:45:b2:9b:5a:e1:e1:96:47:30:
0c:35:8f:31:84:7d:dc:c4:a4:69:f0:6f:50:88:13:
9b:bf:bd:37:50:b4:e1:2f:36:63:bd:da:77:21:1c:
0b:ee:e3:4f:ba:25:6f:96:24:36:5b:72:b2:d8:22:
03:dd:68:c4:16:e5:1b:ec:a5:db:4a:bb:e1:12:ee:
34:59:30:5e:e2:c3:cd:1f:26:46:2c:3b:43:ad:95:
be:0b:20:d1:b5:cd:cc:d1:e9:e5:32:67:cd:87:cf:
31:33:a0:0e:f8:48:e6:af:c9:58:29:dd:11:df:d8:
ce:8c:bb:76:e5:94:a3:65:dd:68:39:d9:cf:ef:51:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:BC:38:3E:0D:6C:23:7C:D0:08:0A:BB:52:17:A2:E5:8D:B6:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hEK8OD4NbCN80AgKu1IXouWNtpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:00:23:a7:f0:bb:9d:0d:66:68:f9:5b:7e:26:9e:2b:1e:08:
a7:9e:d3:c4:c5:e7:27:db:d8:15:f3:80:1d:6e:63:7b:07:ab:
14:50:6c:32:4a:bd:12:39:50:96:fd:e0:d1:98:b9:7c:41:c0:
b4:ec:35:48:4f:47:c2:ae:41:31:dc:25:d8:f5:f2:4c:e9:78:
66:ba:6c:11:e9:97:65:0e:ec:ff:b2:35:79:23:ca:96:0b:fd:
4e:d2:5f:84:ef:99:97:d3:3d:52:10:96:85:b3:2a:71:13:4d:
9a:79:33:40:17:37:df:2f:21:5e:eb:b0:85:f7:3a:7d:87:9c:
44:4e:c8:e2:85:cd:bf:6e:cf:4f:6e:9a:69:99:1e:10:9d:10:
ec:c0:51:28:b8:f0:49:6b:8f:82:3d:ba:f5:f7:4b:40:c5:e1:
0f:b9:e5:d2:6e:9c:5b:ce:95:0a:4f:07:4a:5e:0d:b9:4f:ae:
47:be:39:f6:8c:bd:2e:11:64:8f:2c:0b:86:48:70:2c:b1:98:
a1:d1:0e:da:07:89:94:07:54:a0:d9:90:1c:0b:24:26:96:70:
1b:7a:b5:ae:4c:8d:09:20:8c:e2:3b:04:c0:98:0b:8c:a8:fa:
f9:ce:e1:ec:b4:bf:fd:17:d3:d3:a7:33:39:5e:27:bf:0a:37:
71:84:19:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtNPXknktdgj0x4M+2VXOLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIwMTMxOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDQyYmMzODNlMGQ2YzIzN2NkMDA4MGFiYjUyMTdhMmU1OGRiNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvugvLIkviP4z7ciLkFzbo/8bW/8x
hh9TzpZTfrhC2jC2fpkv4Oe4fL+SwxpV9G5WqAaKG2YkE4aSYOck+TeOuP65SQTt
UfD1rl1n9rtPsPLsRmiwbHL5uBtBr+WuEdgv9B+D1YUZwMM3W+gyslgqdPpFnG3v
f/61/iiJyKhFspta4eGWRzAMNY8xhH3cxKRp8G9QiBObv703ULThLzZjvdp3IRwL
7uNPuiVvliQ2W3Ky2CID3WjEFuUb7KXbSrvhEu40WTBe4sPNHyZGLDtDrZW+CyDR
tc3M0enlMmfNh88xM6AO+Ejmr8lYKd0R39jOjLt25ZSjZd1oOdnP71E4+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIRCvDg+DWwjfNAICrtSF6LljbaWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaEVLOE9ENE5iQ044MEFnS3UxSVhvdVdOdHBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJsAI6fwu50NZmj5W34m
niseCKee08TF5yfb2BXzgB1uY3sHqxRQbDJKvRI5UJb94NGYuXxBwLTsNUhPR8Ku
QTHcJdj18kzpeGa6bBHpl2UO7P+yNXkjypYL/U7SX4TvmZfTPVIQloWzKnETTZp5
M0AXN98vIV7rsIX3On2HnEROyOKFzb9uz09ummmZHhCdEOzAUSi48Elrj4I9uvX3
S0DF4Q+55dJunFvOlQpPB0peDblPrke+OfaMvS4RZI8sC4ZIcCyxmKHRDtoHiZQH
VKDZkBwLJCaWcBt6ta5MjQkgjOI7BMCYC4yo+vnO4ey0v/0X09OnMzleJ78KN3GE
GXk=
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:03 2025 by rpki-client