Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m3H12bz3Tc5xrQcm46561tXhHUU.roa
File: m3H12bz3Tc5xrQcm46561tXhHUU.roa (raw, json)
Hash identifier: L4EAiKBRM9lwFVN8rJwmzzL/HND+vCSCm2DgLFBl9k4=
Subject key identifier: 9B:71:F5:D9:BC:F7:4D:CE:71:AD:07:26:E3:AE:7A:D6:D5:E1:1D:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C69F8DC0DD7F959FAE466E1796614356C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m3H12bz3Tc5xrQcm46561tXhHUU.roa
Signing time: Thu 14 Dec 2023 20:16:06 +0000
ROA not before: Thu 14 Dec 2023 20:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:f8:dc:0d:d7:f9:59:fa:e4:66:e1:79:66:14:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 20:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b71f5d9bcf74dce71ad0726e3ae7ad6d5e11d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:c6:af:d0:e2:a1:7b:a1:04:68:5c:ff:2c:
0a:46:cb:18:38:54:ef:a9:b6:a0:c9:a0:5e:71:48:
ba:8b:d4:d9:75:3d:10:48:58:46:39:ce:f5:16:ee:
f4:02:f3:66:e3:4b:ac:dd:66:92:34:ef:f2:3f:fd:
32:0f:43:17:44:a7:60:2b:a0:ad:cd:4e:ee:76:a7:
e7:5e:1b:a1:56:ae:96:1d:10:a5:45:68:59:6f:e2:
f1:1b:23:00:e8:72:78:75:f8:e7:8f:c8:5d:99:35:
fc:d9:89:7c:96:91:eb:df:ce:18:f7:b9:6b:e8:45:
22:9f:38:6b:e5:33:35:eb:96:7f:a7:18:97:bf:93:
78:fa:c6:72:59:ad:0b:34:d4:6c:0a:72:01:9a:d5:
66:89:90:a6:02:d1:8f:00:a9:81:55:55:e0:43:59:
a7:38:0d:d3:bd:f3:42:15:1b:f0:dc:09:21:1a:3c:
7c:5e:d2:85:eb:bf:5e:7c:82:f0:d0:da:0a:6c:56:
6c:aa:ce:d3:13:d1:e0:70:63:bd:45:3b:8b:d6:ff:
6c:4e:a8:98:75:78:82:bf:63:dc:2c:89:e1:57:2e:
34:07:99:bb:b4:e4:13:2b:b9:fa:cb:17:04:65:fa:
ec:c0:d9:de:93:68:4b:24:33:5f:ba:3d:16:d9:64:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:F5:D9:BC:F7:4D:CE:71:AD:07:26:E3:AE:7A:D6:D5:E1:1D:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m3H12bz3Tc5xrQcm46561tXhHUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:f1:0a:2d:c0:05:fb:2e:3d:e5:53:9d:dd:98:d9:6e:8e:71:
2a:e5:be:40:99:bd:ba:a1:55:65:3d:94:ad:d1:5a:7f:7c:d7:
74:2e:4b:4c:99:f3:1f:38:ac:2b:e2:28:32:c9:2e:c3:f4:1d:
0e:4d:a6:20:ea:91:98:94:97:85:f4:98:c0:0d:67:1e:6b:d0:
6c:b3:3f:4e:f9:2a:60:6d:a5:68:a2:0b:22:25:4d:8c:4b:d3:
08:0a:bb:fc:51:9a:8d:8c:88:39:86:a5:d0:00:db:96:94:dc:
8d:91:97:08:bd:75:ac:9e:33:37:8e:6e:96:24:b6:b3:65:64:
96:8c:91:dc:37:c5:cd:8d:d0:36:1a:a6:2b:db:51:8f:bb:d2:
04:02:e8:21:8f:f5:9a:13:39:7b:ad:dc:67:e7:f3:f4:3c:b7:
85:49:24:1b:a7:56:3d:cb:d2:96:bb:a7:8c:94:8a:5c:f9:7f:
0e:76:6c:84:ac:00:e5:60:d3:75:f1:93:04:26:07:6c:9b:14:
7b:00:72:1b:bb:7d:ee:bc:58:e6:18:83:dc:e0:84:28:a5:5d:
d6:19:c6:60:fd:9c:7f:53:d7:a0:1d:4d:df:be:2a:30:a8:f0:
05:56:52:fa:6f:95:28:33:ef:8b:dc:4f:36:54:70:69:cf:b5:
66:db:95:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxp+NwN1/lZ+uRm4XlmFDVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE0MjAxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjcxZjVkOWJjZjc0ZGNlNzFhZDA3MjZlM2FlN2FkNmQ1ZTExZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9XGr9DioXuhBGhc/ywKRssYOFTv
qbagyaBecUi6i9TZdT0QSFhGOc71Fu70AvNm40us3WaSNO/yP/0yD0MXRKdgK6Ct
zU7udqfnXhuhVq6WHRClRWhZb+LxGyMA6HJ4dfjnj8hdmTX82Yl8lpHr384Y97lr
6EUinzhr5TM165Z/pxiXv5N4+sZyWa0LNNRsCnIBmtVmiZCmAtGPAKmBVVXgQ1mn
OA3TvfNCFRvw3AkhGjx8XtKF679efILw0NoKbFZsqs7TE9HgcGO9RTuL1v9sTqiY
dXiCv2PcLInhVy40B5m7tOQTK7n6yxcEZfrswNnek2hLJDNfuj0W2WTfOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJtx9dm8903Oca0HJuOuetbV4R1FMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbTNIMTJiejNUYzV4clFjbTQ2NTYxdFhoSFVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKLxCi3ABfsuPeVTnd2Y
2W6OcSrlvkCZvbqhVWU9lK3RWn9813QuS0yZ8x84rCviKDLJLsP0HQ5NpiDqkZiU
l4X0mMANZx5r0GyzP075KmBtpWiiCyIlTYxL0wgKu/xRmo2MiDmGpdAA25aU3I2R
lwi9dayeMzeObpYktrNlZJaMkdw3xc2N0DYapivbUY+70gQC6CGP9ZoTOXut3Gfn
8/Q8t4VJJBunVj3L0pa7p4yUilz5fw52bISsAOVg03XxkwQmB2ybFHsAchu7fe68
WOYYg9zghCilXdYZxmD9nH9T16AdTd++KjCo8AVWUvpvlSgz74vcTzZUcGnPtWbb
ld8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:48:49 2025 by rpki-client