Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l6p-ZwAvj5zev5GeBwWS_XOeBtQ.roa
File: l6p-ZwAvj5zev5GeBwWS_XOeBtQ.roa (raw, json)
Hash identifier: +Gpw+FaUj65QPmU5TNQB+KeMkbewJcRkuMUxZpzNvts=
Subject key identifier: 97:AA:7E:67:00:2F:8F:9C:DE:BF:91:9E:07:05:92:FD:73:9E:06:D4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFC8B047023A566ED7BC86A4D5021563A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l6p-ZwAvj5zev5GeBwWS_XOeBtQ.roa
Signing time: Thu 23 Nov 2023 14:17:30 +0000
ROA not before: Thu 23 Nov 2023 14:17:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:8b:04:70:23:a5:66:ed:7b:c8:6a:4d:50:21:56:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 14:17:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97aa7e67002f8f9cdebf919e070592fd739e06d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:b9:b6:42:5c:2e:d0:b8:9b:98:67:e4:f9:
f7:de:c1:82:91:f9:2e:41:14:26:44:c1:9a:ab:2f:
b5:5d:f1:21:2f:1c:4c:31:f5:bf:14:63:c3:07:5c:
65:d4:59:5a:ef:87:48:22:b5:40:24:8d:d2:89:02:
7e:8e:2f:55:19:e5:7c:56:81:1a:66:f6:b9:01:f8:
ab:c8:35:d6:ae:be:d2:ed:d4:6a:0c:08:63:13:c4:
bf:55:6d:e9:24:ee:83:12:bd:42:a9:4b:a1:37:9d:
b6:d5:7e:fd:66:3d:19:cb:2e:aa:2d:e1:07:e1:65:
23:41:d4:12:1e:09:b3:87:22:1a:87:c3:2e:93:f2:
37:1a:83:35:f5:f8:d7:8e:f6:ad:ff:9f:2e:d2:af:
dc:f6:c2:b9:75:b3:75:c1:45:13:06:a8:a8:15:32:
f9:fb:23:c6:0e:fa:8e:87:66:e8:4a:20:61:21:26:
ec:0e:a6:8f:86:a0:27:b8:a7:4b:d8:41:bd:20:30:
04:a2:55:83:12:31:ef:8d:19:8f:34:c0:b2:4f:11:
9a:1c:29:ab:e0:4f:96:6d:6e:b3:7f:95:40:da:3b:
8f:47:0c:0a:b7:15:dd:52:30:21:08:8c:1a:54:7a:
0a:06:62:ac:a6:ee:7d:01:1a:60:dd:7d:50:71:c9:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:7E:67:00:2F:8F:9C:DE:BF:91:9E:07:05:92:FD:73:9E:06:D4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l6p-ZwAvj5zev5GeBwWS_XOeBtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:9a:85:da:6c:7d:c5:d0:61:6d:bb:50:f1:12:c5:ff:b6:47:
40:06:70:13:b2:c9:3b:75:16:13:67:11:b0:7a:8b:dd:3f:b7:
53:9e:75:cc:7c:9a:c2:8f:4a:62:80:f7:67:f3:a0:29:76:e1:
c6:30:1a:66:30:6d:0c:a2:26:21:c2:c8:f5:b4:9a:87:4c:85:
4c:26:59:ba:94:db:2f:9c:06:61:c3:34:37:d3:03:8d:e6:94:
97:ba:bc:f0:94:25:d0:ec:34:8c:73:8c:5b:dd:79:00:fb:c6:
b8:9a:9f:7c:f4:36:5d:a5:bb:27:98:20:40:3f:ab:7a:6a:cc:
a0:48:76:f7:c9:15:bd:48:a6:54:82:5d:14:3b:38:b4:0c:0c:
44:ad:9d:bc:af:bb:b2:74:ad:ca:f8:33:bb:82:f5:25:db:04:
3d:d4:23:35:89:15:6a:39:5c:38:a7:d8:87:81:ad:ef:e9:ea:
e6:ba:f0:1e:51:7f:d9:a4:4c:6b:be:c5:99:f9:ef:c8:b4:80:
56:1f:2f:d8:61:f4:ac:6d:33:43:74:ef:05:d6:ad:cf:77:8f:
e6:31:a5:c8:01:f4:8d:04:f7:ed:8b:35:fd:08:fa:8c:29:ea:
ea:b8:80:a7:bb:0d:47:4e:1c:45:84:f2:d5:2c:f4:da:0b:78:
3d:3f:1d:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv8iwRwI6Vm7XvIak1QIVY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIzMTQxNzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2FhN2U2NzAwMmY4ZjljZGViZjkxOWUwNzA1OTJmZDczOWUwNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknS5tkJcLtC4m5hn5Pn33sGCkfku
QRQmRMGaqy+1XfEhLxxMMfW/FGPDB1xl1Fla74dIIrVAJI3SiQJ+ji9VGeV8VoEa
Zva5AfiryDXWrr7S7dRqDAhjE8S/VW3pJO6DEr1CqUuhN5221X79Zj0Zyy6qLeEH
4WUjQdQSHgmzhyIah8Muk/I3GoM19fjXjvat/58u0q/c9sK5dbN1wUUTBqioFTL5
+yPGDvqOh2boSiBhISbsDqaPhqAnuKdL2EG9IDAEolWDEjHvjRmPNMCyTxGaHCmr
4E+WbW6zf5VA2juPRwwKtxXdUjAhCIwaVHoKBmKspu59ARpg3X1QccmpywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJeqfmcAL4+c3r+RngcFkv1zngbUMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbDZwLVp3QXZqNXpldjVHZUJ3V1NfWE9lQnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKiahdpsfcXQYW27UPES
xf+2R0AGcBOyyTt1FhNnEbB6i90/t1Oedcx8msKPSmKA92fzoCl24cYwGmYwbQyi
JiHCyPW0modMhUwmWbqU2y+cBmHDNDfTA43mlJe6vPCUJdDsNIxzjFvdeQD7xria
n3z0Nl2luyeYIEA/q3pqzKBIdvfJFb1IplSCXRQ7OLQMDEStnbyvu7J0rcr4M7uC
9SXbBD3UIzWJFWo5XDin2IeBre/p6ua68B5Rf9mkTGu+xZn578i0gFYfL9hh9Kxt
M0N07wXWrc93j+YxpcgB9I0E9+2LNf0I+owp6uq4gKe7DUdOHEWE8tUs9NoLeD0/
HQQ=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:45 2025 by rpki-client