Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p77gC8wQxSCfl6WEt8d_l3juro4.roa
File: p77gC8wQxSCfl6WEt8d_l3juro4.roa (raw, json)
Hash identifier: OJNfDeMfQkWZdT6gaBMb9WPPDG+BdPQCr6xN7hto93U=
Subject key identifier: A7:BE:E0:0B:CC:10:C5:20:9F:97:A5:84:B7:C7:7F:97:78:EE:AE:8E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF5AC5A34D6FC0DA8F7EFD5DA9A3B37E3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p77gC8wQxSCfl6WEt8d_l3juro4.roa
Signing time: Wed 22 Nov 2023 06:16:35 +0000
ROA not before: Wed 22 Nov 2023 06:16:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f5:ac:5a:34:d6:fc:0d:a8:f7:ef:d5:da:9a:3b:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 06:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7bee00bcc10c5209f97a584b7c77f9778eeae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:16:48:9f:61:44:37:ca:e4:29:a0:36:dd:
46:d9:c1:e1:ff:8b:e7:e3:c8:6e:2b:c6:a6:04:38:
4e:a8:56:d0:30:e2:48:0b:33:74:12:77:95:a5:f4:
38:08:83:0a:1d:4d:f9:24:b1:54:ee:f1:6d:ea:dc:
49:2a:e8:93:c9:19:25:3d:e4:d3:e7:e8:0e:2a:26:
9f:67:f2:02:c4:4d:9a:7c:5c:0a:a9:c7:75:30:64:
aa:09:8d:47:45:5c:27:a5:cb:a7:42:25:8b:79:35:
d4:ab:35:44:ba:ef:6f:44:03:fd:05:e0:84:95:47:
65:21:dd:c7:7f:ef:fd:35:11:1d:a1:82:36:47:e7:
dc:ab:52:d5:6b:8b:fb:25:f8:66:5f:f3:7a:7d:7f:
4f:d1:c0:15:ee:36:28:e4:98:b0:8d:d9:cb:33:28:
9e:9e:43:e0:22:1d:98:72:68:8b:00:55:e2:dc:ad:
54:cf:6f:5b:30:12:71:a9:d9:7a:fd:80:b4:d9:76:
a3:fa:6c:bc:1a:a5:77:d1:0a:d4:4d:eb:ee:1c:36:
99:78:f0:cd:a7:4c:48:dc:79:de:9d:2a:be:f8:4f:
72:3b:15:0e:68:20:6e:c4:62:83:d6:b9:2a:64:16:
c6:79:17:f2:bf:8e:c2:a6:30:3b:43:aa:e1:99:1a:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:E0:0B:CC:10:C5:20:9F:97:A5:84:B7:C7:7F:97:78:EE:AE:8E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p77gC8wQxSCfl6WEt8d_l3juro4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a9:23:83:d1:f4:8e:81:8f:a8:a5:0b:01:5a:1e:6c:43:35:
6e:90:86:76:7a:fd:37:e8:19:a1:c6:1f:d3:cc:f3:53:d4:c1:
9c:3f:bf:51:04:d7:ae:1c:a1:ea:8d:14:39:48:34:6d:be:93:
e0:62:8d:d3:87:59:f4:7a:8c:2a:31:a7:1d:40:57:80:1a:68:
42:33:b2:c9:5d:a3:7a:27:db:0d:3b:7b:7b:13:01:28:1a:86:
0e:13:18:4c:9e:e2:a4:5f:ce:f5:d7:40:25:d7:2a:63:87:6d:
73:fb:ec:84:de:6b:e5:8f:e0:0e:76:09:7f:86:85:33:91:5e:
ed:f1:fd:0d:41:82:5c:df:0e:64:06:ce:5e:90:96:a6:c0:a1:
11:62:f5:53:8f:c6:48:e2:f1:f4:3e:8b:79:c5:61:7a:e1:73:
73:fd:4e:76:c5:ab:19:3a:ba:43:c5:03:72:28:ac:60:f9:9e:
7f:48:b5:ab:cd:8b:5f:c7:35:82:9f:d0:ad:8b:9f:42:61:7f:
69:ca:29:51:aa:71:34:16:23:1f:3e:7a:01:8d:fb:36:e8:76:
2e:7e:2a:60:60:0b:58:41:71:1b:07:f3:98:b2:06:82:bc:ac:
a7:01:5a:a6:59:d3:e1:95:dc:96:3e:35:80:ee:d4:14:eb:3b:
d5:f1:a5:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv1rFo01vwNqPfv1dqaOzfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIyMDYxNjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2JlZTAwYmNjMTBjNTIwOWY5N2E1ODRiN2M3N2Y5Nzc4ZWVhZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLUWSJ9hRDfK5CmgNt1G2cHh/4vn
48huK8amBDhOqFbQMOJICzN0EneVpfQ4CIMKHU35JLFU7vFt6txJKuiTyRklPeTT
5+gOKiafZ/ICxE2afFwKqcd1MGSqCY1HRVwnpcunQiWLeTXUqzVEuu9vRAP9BeCE
lUdlId3Hf+/9NREdoYI2R+fcq1LVa4v7JfhmX/N6fX9P0cAV7jYo5JiwjdnLMyie
nkPgIh2YcmiLAFXi3K1Uz29bMBJxqdl6/YC02Xaj+my8GqV30QrUTevuHDaZePDN
p0xI3HnenSq++E9yOxUOaCBuxGKD1rkqZBbGeRfyv47CpjA7Q6rhmRpPxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKe+4AvMEMUgn5elhLfHf5d47q6OMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcDc3Z0M4d1F4U0NmbDZXRXQ4ZF9sM2p1cm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH6pI4PR9I6Bj6ilCwFa
HmxDNW6QhnZ6/TfoGaHGH9PM81PUwZw/v1EE164coeqNFDlING2+k+BijdOHWfR6
jCoxpx1AV4AaaEIzssldo3on2w07e3sTASgahg4TGEye4qRfzvXXQCXXKmOHbXP7
7ITea+WP4A52CX+GhTORXu3x/Q1BglzfDmQGzl6QlqbAoRFi9VOPxkji8fQ+i3nF
YXrhc3P9TnbFqxk6ukPFA3IorGD5nn9ItavNi1/HNYKf0K2Ln0Jhf2nKKVGqcTQW
Ix8+egGN+zbodi5+KmBgC1hBcRsH85iyBoK8rKcBWqZZ0+GV3JY+NYDu1BTrO9Xx
pf8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:22 2025 by rpki-client