Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oQJm3yVzTjBDvPMyXETaTEKpo4w.roa
File: oQJm3yVzTjBDvPMyXETaTEKpo4w.roa (raw, json)
Hash identifier: DA4ipzDwDX+WP3uVjWeJjeEHXrZSnt0yag49a6xCY1s=
Subject key identifier: A1:02:66:DF:25:73:4E:30:43:BC:F3:32:5C:44:DA:4C:42:A9:A3:8C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB65A5D793F9CAC509946E17489AE39A2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oQJm3yVzTjBDvPMyXETaTEKpo4w.roa
Signing time: Thu 09 Nov 2023 23:10:57 +0000
ROA not before: Thu 09 Nov 2023 23:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b6:5a:5d:79:3f:9c:ac:50:99:46:e1:74:89:ae:39:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 23:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a10266df25734e3043bcf3325c44da4c42a9a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:46:ce:00:e3:df:07:1c:b8:21:86:66:a4:
5e:0f:9f:6a:5a:b4:f1:af:63:1f:fc:f8:91:a2:1f:
07:76:5f:1f:0e:03:ff:92:21:0e:f9:4d:aa:68:c6:
52:33:04:d4:53:ca:41:15:95:62:57:4a:ee:5e:08:
87:3a:8d:c8:cc:f2:e8:f3:d4:80:72:9e:3e:93:87:
ba:9e:7d:01:13:63:4f:f9:ec:09:bd:4d:19:0d:be:
f6:1f:09:f5:4f:82:03:55:d9:5b:c8:f1:c0:3f:75:
b6:f0:e0:9a:7e:51:c4:0f:af:c9:85:11:1c:80:d1:
69:82:a8:bd:c9:e5:f8:fa:79:8c:d4:d0:57:8f:2e:
93:62:f3:7f:f2:47:3d:dd:ce:9a:af:43:ff:d0:b5:
78:24:19:52:01:83:bb:a3:de:c7:15:24:af:0b:e8:
1f:22:58:fe:ab:18:37:c6:04:17:da:05:7f:39:f6:
6e:cc:19:de:c9:59:ae:c5:c2:41:e4:79:de:1f:fd:
af:4a:23:a7:fd:f8:3a:73:64:42:df:cd:55:95:0b:
19:36:39:d4:c2:8c:ce:46:00:18:78:c9:f4:a2:ac:
db:81:d6:5a:ba:62:94:d5:62:56:0f:01:b8:ff:9e:
e8:aa:fc:2a:9a:34:da:b7:5c:6c:4e:ab:18:78:c4:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:66:DF:25:73:4E:30:43:BC:F3:32:5C:44:DA:4C:42:A9:A3:8C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oQJm3yVzTjBDvPMyXETaTEKpo4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:2b:e5:90:0d:4e:4d:72:10:27:19:92:ae:87:bf:27:d3:a6:
6a:4d:17:6f:2d:90:12:a1:af:4e:b0:25:8c:22:af:3e:06:22:
b2:54:22:df:2b:51:06:17:ee:80:d3:e3:3f:c4:0d:fa:80:a9:
08:cf:8c:fb:79:9d:dd:df:8c:d5:ce:00:2c:62:17:c0:4b:24:
a7:ec:89:08:ba:96:43:48:0d:3d:df:27:87:4b:2f:6f:60:e1:
b0:d9:85:d3:e3:56:1f:0c:90:fd:e9:c9:be:3c:ab:97:6c:9f:
52:f1:00:30:07:20:24:34:6d:34:b0:52:b0:be:15:50:e4:56:
a7:69:bb:6c:c0:66:fb:09:eb:3d:b5:40:4e:8f:dc:4f:49:07:
28:e6:f7:25:d0:ea:c9:dc:4b:bc:b8:ef:15:59:3d:23:b7:72:
e5:37:58:ba:44:18:5d:5b:cc:fb:1d:41:66:af:8e:da:a6:ee:
d8:f5:bc:89:11:1e:01:46:a7:4f:21:f4:e7:45:36:a6:6d:12:
94:a9:cc:61:1c:a2:7b:a2:ff:07:e6:63:5c:8b:3f:16:25:65:
d3:2f:84:2f:43:5c:f7:36:94:d1:4e:d5:b0:fd:52:95:16:c6:
11:e9:06:4d:28:03:11:7f:2a:87:3d:27:60:f8:fb:7e:16:ce:
e3:e8:b9:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu2Wl15P5ysUJlG4XSJrjmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA5MjMxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTAyNjZkZjI1NzM0ZTMwNDNiY2YzMzI1YzQ0ZGE0YzQyYTlhMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5FGzgDj3wccuCGGZqReD59qWrTx
r2Mf/PiRoh8Hdl8fDgP/kiEO+U2qaMZSMwTUU8pBFZViV0ruXgiHOo3IzPLo89SA
cp4+k4e6nn0BE2NP+ewJvU0ZDb72Hwn1T4IDVdlbyPHAP3W28OCaflHED6/JhREc
gNFpgqi9yeX4+nmM1NBXjy6TYvN/8kc93c6ar0P/0LV4JBlSAYO7o97HFSSvC+gf
Ilj+qxg3xgQX2gV/OfZuzBneyVmuxcJB5HneH/2vSiOn/fg6c2RC381VlQsZNjnU
wozORgAYeMn0oqzbgdZaumKU1WJWDwG4/57oqvwqmjTat1xsTqsYeMROQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKECZt8lc04wQ7zzMlxE2kxCqaOMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvb1FKbTN5VnpUakJEdlBNeVhFVGFURUtwbzR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFwr5ZANTk1yECcZkq6H
vyfTpmpNF28tkBKhr06wJYwirz4GIrJUIt8rUQYX7oDT4z/EDfqAqQjPjPt5nd3f
jNXOACxiF8BLJKfsiQi6lkNIDT3fJ4dLL29g4bDZhdPjVh8MkP3pyb48q5dsn1Lx
ADAHICQ0bTSwUrC+FVDkVqdpu2zAZvsJ6z21QE6P3E9JByjm9yXQ6sncS7y47xVZ
PSO3cuU3WLpEGF1bzPsdQWavjtqm7tj1vIkRHgFGp08h9OdFNqZtEpSpzGEconui
/wfmY1yLPxYlZdMvhC9DXPc2lNFO1bD9UpUWxhHpBk0oAxF/Koc9J2D4+34WzuPo
uX4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:22:14 2025 by rpki-client