Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nq4bThK8aBuXDX2bF3b4DoibSBI.roa
File: nq4bThK8aBuXDX2bF3b4DoibSBI.roa (raw, json)
Hash identifier: 4iK9imcuQd/B/dcLF7lotzlil9kKnEqsZVTqB4IBrrI=
Subject key identifier: 9E:AE:1B:4E:12:BC:68:1B:97:0D:7D:9B:17:76:F8:0E:88:9B:48:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B932E705DFD9C16F3B91947AF19283104
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nq4bThK8aBuXDX2bF3b4DoibSBI.roa
Signing time: Fri 03 Nov 2023 03:16:16 +0000
ROA not before: Fri 03 Nov 2023 03:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:2e:70:5d:fd:9c:16:f3:b9:19:47:af:19:28:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 03:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eae1b4e12bc681b970d7d9b1776f80e889b4812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:5f:f3:28:e0:bd:cc:c4:c7:e1:fb:50:6e:
68:e9:e4:c5:79:66:97:85:c2:d4:33:14:3f:d6:c9:
1b:63:2f:f4:b1:45:20:1b:19:34:1a:99:a5:36:b6:
f1:16:05:e9:21:db:c6:10:67:a4:72:20:98:76:31:
60:7f:88:0f:81:6b:a6:7a:ba:8e:56:a2:7b:2a:a6:
cd:ff:2c:e4:e7:24:64:73:d2:49:af:c6:68:cc:f4:
45:d3:2e:7f:18:cf:81:b8:b2:5d:f0:3c:51:a8:cd:
b6:b0:4b:2b:32:bc:00:5c:76:9f:e2:cf:cc:b4:63:
82:db:0a:12:da:1c:7d:44:cf:ae:d3:c4:3f:dd:bb:
87:0d:42:45:1c:14:e4:8f:b7:f3:d0:b0:11:ff:a1:
e0:e9:41:1f:a4:e9:2e:ea:ae:d0:37:6a:c2:b1:3f:
4a:2f:44:06:4e:47:7c:54:5d:c2:03:72:82:d5:7d:
5a:40:d0:13:b4:1b:40:f1:7f:44:db:d2:f0:42:78:
87:6d:61:9c:c8:f5:83:8c:1d:46:39:37:30:d7:d2:
05:82:e1:88:b1:97:45:c3:c9:e5:b9:a3:48:e1:a6:
79:e5:08:b0:f7:3f:73:ec:9b:2f:46:9b:04:82:90:
05:b4:14:1f:f9:52:e1:b3:5d:fe:e3:ae:a9:ee:ec:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:1B:4E:12:BC:68:1B:97:0D:7D:9B:17:76:F8:0E:88:9B:48:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nq4bThK8aBuXDX2bF3b4DoibSBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:c0:9f:29:ad:11:90:3d:7b:3a:04:44:bc:15:5a:43:1d:8d:
70:7a:34:8d:1a:63:89:1f:62:08:53:af:b3:31:02:0e:b6:61:
b0:65:3b:e5:a9:6e:ac:83:45:b7:ab:e9:7a:18:5c:4b:0e:1e:
f2:80:02:ee:7d:f3:40:83:c6:0f:08:ec:b5:3d:fe:26:13:0e:
99:68:14:fe:4a:ef:69:a7:09:33:74:a8:38:ab:5c:dd:4f:12:
b1:5d:c8:07:32:2c:2f:4c:7c:9c:9c:d9:43:6c:47:c0:1b:7a:
45:63:74:25:ae:b8:ab:e1:16:50:1d:b3:e8:a0:a8:b3:f9:2c:
06:9e:b3:dd:ef:ea:c8:54:16:61:d4:a9:52:e8:b0:c7:20:75:
1f:c3:21:80:1b:53:8e:65:44:04:0e:69:d8:1e:be:67:f9:6f:
47:f9:28:dd:c7:c6:11:5b:0c:12:c9:02:02:c3:10:69:5f:bd:
9d:bd:c0:73:13:70:de:8a:2a:d3:8f:c5:62:60:f4:c2:89:78:
f5:b1:68:6d:a7:07:44:af:d0:ed:e9:45:23:a0:8c:dc:44:de:
c4:1b:3a:5c:69:1e:f5:8f:57:79:a4:9e:8b:56:19:a5:59:e1:
09:ab:ae:75:99:0c:c9:95:d7:9e:03:60:44:1d:54:d6:d1:e2:
97:a8:e7:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuTLnBd/ZwW87kZR68ZKDEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTAzMDMxNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWFlMWI0ZTEyYmM2ODFiOTcwZDdkOWIxNzc2ZjgwZTg4OWI0ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm1f8yjgvczEx+H7UG5o6eTFeWaX
hcLUMxQ/1skbYy/0sUUgGxk0GpmlNrbxFgXpIdvGEGekciCYdjFgf4gPgWumerqO
VqJ7KqbN/yzk5yRkc9JJr8ZozPRF0y5/GM+BuLJd8DxRqM22sEsrMrwAXHaf4s/M
tGOC2woS2hx9RM+u08Q/3buHDUJFHBTkj7fz0LAR/6Hg6UEfpOku6q7QN2rCsT9K
L0QGTkd8VF3CA3KC1X1aQNATtBtA8X9E29LwQniHbWGcyPWDjB1GOTcw19IFguGI
sZdFw8nluaNI4aZ55Qiw9z9z7JsvRpsEgpAFtBQf+VLhs13+466p7uzNaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ6uG04SvGgblw19mxd2+A6Im0gSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbnE0YlRoSzhhQnVYRFgyYkYzYjREb2liU0JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGHAnymtEZA9ezoERLwV
WkMdjXB6NI0aY4kfYghTr7MxAg62YbBlO+WpbqyDRber6XoYXEsOHvKAAu5980CD
xg8I7LU9/iYTDploFP5K72mnCTN0qDirXN1PErFdyAcyLC9MfJyc2UNsR8AbekVj
dCWuuKvhFlAds+igqLP5LAaes93v6shUFmHUqVLosMcgdR/DIYAbU45lRAQOadge
vmf5b0f5KN3HxhFbDBLJAgLDEGlfvZ29wHMTcN6KKtOPxWJg9MKJePWxaG2nB0Sv
0O3pRSOgjNxE3sQbOlxpHvWPV3mknotWGaVZ4QmrrnWZDMmV154DYEQdVNbR4peo
5zc=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:32 2025 by rpki-client