Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iABXF0dwWh5BDFHG4V6VRvyRbVc.roa
File: iABXF0dwWh5BDFHG4V6VRvyRbVc.roa (raw, json)
Hash identifier: 9AT8nJk1Ehyg62iNGyuvQgl1leDgjbvK0weRmDfPDaM=
Subject key identifier: 88:00:57:17:47:70:5A:1E:41:0C:51:C6:E1:5E:95:46:FC:91:6D:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B72C159F541ADF56D6B012DC944156F00
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iABXF0dwWh5BDFHG4V6VRvyRbVc.roa
Signing time: Fri 27 Oct 2023 20:09:15 +0000
ROA not before: Fri 27 Oct 2023 20:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:c1:59:f5:41:ad:f5:6d:6b:01:2d:c9:44:15:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 20:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8800571747705a1e410c51c6e15e9546fc916d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:1f:1a:10:5a:2f:b7:72:b8:7d:fc:9c:f0:
b0:a5:ce:c0:a5:b2:75:4a:da:2c:fb:63:38:fe:be:
71:d9:ba:ac:83:66:ec:c6:95:29:db:ac:73:47:52:
8c:9d:b3:2f:67:1f:27:e7:11:a0:61:a4:ed:ed:ab:
b7:0f:9c:6c:91:b1:1e:e1:d0:47:9d:1e:18:18:27:
ac:fb:90:3d:14:0f:f2:6c:54:d8:9c:f1:5f:de:e1:
b2:a4:a5:b7:33:72:09:cd:dc:e0:db:97:c0:84:ab:
46:08:bb:01:04:38:85:cc:37:93:10:2e:2d:b8:60:
87:c5:bd:df:81:a7:fa:b3:d4:54:5b:7c:93:fe:48:
75:0a:86:eb:01:6b:0d:d3:91:89:3b:16:ec:0d:0b:
5a:e3:cb:97:ef:7d:41:65:9b:98:c2:ed:ee:a7:5a:
e3:71:18:8a:e9:d2:3f:4e:f8:68:c6:c3:a0:e1:e7:
b3:97:4f:34:d5:e7:7c:05:40:77:9e:ea:3b:1a:ce:
99:f3:cc:d1:d7:65:7b:a7:e1:6d:4e:0b:31:97:28:
bc:4a:f1:4c:3a:ac:5d:22:e1:8a:fe:2a:8b:6b:a9:
81:f0:c1:62:a6:90:f7:96:e4:6d:74:6e:a9:8c:97:
25:1c:f3:bb:2d:6b:f5:7b:a9:1b:a3:a1:40:e7:93:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:57:17:47:70:5A:1E:41:0C:51:C6:E1:5E:95:46:FC:91:6D:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iABXF0dwWh5BDFHG4V6VRvyRbVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e9:95:29:27:26:3b:8d:f1:70:32:4b:18:57:44:b1:1b:02:
a6:11:ac:71:91:e1:2d:e2:ee:5e:a6:fd:3a:32:dd:99:d1:1d:
b9:9e:e8:6e:d8:1d:e3:f7:76:65:6c:75:c2:21:95:99:8c:84:
2b:cf:3c:e0:8a:1c:cd:ce:18:06:c4:a6:e6:94:74:9f:b8:d9:
0b:05:d7:59:2f:84:51:a6:1b:f7:f8:80:64:10:c7:c3:e9:5a:
14:00:a7:b5:55:dc:fd:96:52:66:e8:67:f4:08:9a:32:b0:98:
33:1e:87:0e:9b:78:65:f3:ed:6e:53:5e:93:69:b9:1e:82:f4:
3e:a7:a4:55:12:e9:7b:fa:67:50:67:b7:01:87:8a:b1:e7:ee:
95:98:3d:6c:09:48:fc:db:65:93:65:46:05:de:5b:86:89:76:
bf:3b:ce:f1:fe:18:6e:ae:43:5f:9e:c9:28:1c:7e:0a:81:04:
ff:6c:17:bc:72:4b:ef:0f:12:68:7b:f1:e6:99:89:f2:a8:f2:
e4:db:eb:4b:4c:2a:35:25:ed:fa:ea:66:86:70:ed:1a:50:e0:
53:be:39:0b:5d:c0:60:57:41:5b:06:a4:f3:1a:63:44:85:6e:
80:12:41:7d:72:52:45:1c:d9:ed:1b:44:93:67:1b:1d:46:c6:
3c:09:2d:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtywVn1Qa31bWsBLclEFW8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI3MjAwOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODAwNTcxNzQ3NzA1YTFlNDEwYzUxYzZlMTVlOTU0NmZjOTE2ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVMfGhBaL7dyuH38nPCwpc7ApbJ1
Stos+2M4/r5x2bqsg2bsxpUp26xzR1KMnbMvZx8n5xGgYaTt7au3D5xskbEe4dBH
nR4YGCes+5A9FA/ybFTYnPFf3uGypKW3M3IJzdzg25fAhKtGCLsBBDiFzDeTEC4t
uGCHxb3fgaf6s9RUW3yT/kh1CobrAWsN05GJOxbsDQta48uX731BZZuYwu3up1rj
cRiK6dI/TvhoxsOg4eezl0801ed8BUB3nuo7Gs6Z88zR12V7p+FtTgsxlyi8SvFM
OqxdIuGK/iqLa6mB8MFippD3luRtdG6pjJclHPO7LWv1e6kbo6FA55M5CQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIgAVxdHcFoeQQxRxuFelUb8kW1XMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvaUFCWEYwZHdXaDVCREZIRzRWNlZSdnlSYlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKXplSknJjuN8XAySxhX
RLEbAqYRrHGR4S3i7l6m/Toy3ZnRHbme6G7YHeP3dmVsdcIhlZmMhCvPPOCKHM3O
GAbEpuaUdJ+42QsF11kvhFGmG/f4gGQQx8PpWhQAp7VV3P2WUmboZ/QImjKwmDMe
hw6beGXz7W5TXpNpuR6C9D6npFUS6Xv6Z1BntwGHirHn7pWYPWwJSPzbZZNlRgXe
W4aJdr87zvH+GG6uQ1+eySgcfgqBBP9sF7xyS+8PEmh78eaZifKo8uTb60tMKjUl
7frqZoZw7RpQ4FO+OQtdwGBXQVsGpPMaY0SFboASQX1yUkUc2e0bRJNnGx1GxjwJ
LTw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:39:20 2025 by rpki-client