Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qXsRT8qYZ9oXvW0_rQKmCccPems.roa
File: qXsRT8qYZ9oXvW0_rQKmCccPems.roa (raw, json)
Hash identifier: 1ccUrgC+QZnuMCalb/hpQMmnFG8XBg7OUaYWsQGp9FA=
Subject key identifier: A9:7B:11:4F:CA:98:67:DA:17:BD:6D:3F:AD:02:A6:09:C7:0F:7A:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7D11C7557401EBF4C73E6CED7D3621F0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qXsRT8qYZ9oXvW0_rQKmCccPems.roa
Signing time: Mon 18 Dec 2023 13:16:06 +0000
ROA not before: Mon 18 Dec 2023 13:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:11:c7:55:74:01:eb:f4:c7:3e:6c:ed:7d:36:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 13:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a97b114fca9867da17bd6d3fad02a609c70f7a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:5d:10:80:81:a4:bc:fc:3d:66:ac:0a:b6:
6a:dd:7f:67:c3:19:72:12:7c:52:8e:55:d6:ea:64:
de:61:cf:32:68:2e:9b:40:8c:e0:7b:e0:e3:5c:a1:
97:09:a0:c4:bf:fa:9a:4a:22:cc:f6:31:87:22:10:
b1:88:f8:ef:44:98:6d:e2:f0:be:a7:1a:b5:39:f6:
c5:98:54:cf:a9:d3:44:24:22:ab:9c:12:ff:24:9a:
a3:90:60:d4:27:9d:41:f8:a6:80:de:0f:95:7c:7d:
b3:d9:0b:75:b6:22:94:17:60:6c:76:d5:17:c4:c1:
6b:ee:21:b1:53:43:91:f6:9c:d4:55:1c:69:17:60:
f6:b2:cb:7d:70:68:ba:da:bd:75:34:b2:04:ba:bc:
0c:12:64:38:e8:03:73:ce:1d:1c:fb:ec:4b:59:26:
e8:cc:2c:ec:e6:36:5d:ee:cf:6f:0f:2f:c7:c5:be:
be:4d:1a:20:e8:75:6f:28:44:a7:c9:63:2f:40:e2:
97:37:28:26:4b:5f:94:14:f3:7a:1e:62:51:a4:8d:
7e:c8:65:eb:ee:48:4d:26:b1:d5:86:81:2b:d3:9e:
f3:e1:c4:e3:b0:1e:6f:90:aa:5e:c5:37:25:b6:07:
90:95:c7:1d:30:f9:96:7a:f3:a5:10:6d:8b:00:b1:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7B:11:4F:CA:98:67:DA:17:BD:6D:3F:AD:02:A6:09:C7:0F:7A:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qXsRT8qYZ9oXvW0_rQKmCccPems.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bb:6c:c0:2b:d0:4a:2e:88:b5:1d:27:7b:58:98:89:a0:cc:a6:
c0:82:cb:e5:16:2b:6f:36:3a:0b:d0:9f:ce:f0:ef:28:ad:b8:
ef:92:42:87:97:48:9b:fe:80:f9:50:7f:9c:f7:ba:e1:d2:e3:
05:e7:87:ad:30:c4:1a:dc:2c:34:8c:22:8d:c9:52:c9:f6:a5:
70:aa:0d:8c:2d:6e:50:e2:dc:c9:79:83:8f:47:6c:68:83:63:
dc:ad:f1:88:7b:f2:e6:ee:60:8e:fe:c2:37:32:5e:22:3d:dd:
c4:58:1b:85:81:3e:fc:fa:c3:85:eb:1f:91:de:35:8f:f0:3e:
1d:19:25:08:91:da:06:2e:64:0e:2f:0b:ed:e1:a3:e8:26:81:
52:30:7c:58:df:b6:63:ad:70:b6:cd:a7:6c:46:e8:87:83:dd:
53:f5:ef:17:29:3a:09:e7:a4:04:9b:dc:0b:1d:ab:cd:c4:21:
22:3f:f7:76:fa:9a:ad:ec:64:ac:fc:ff:3f:18:12:e1:ea:6b:
54:04:76:2a:47:c7:18:2f:e6:91:c9:41:97:2f:43:61:64:12:
73:18:91:46:29:11:3a:91:6e:04:1e:c8:42:1e:4a:12:42:b4:
47:10:8e:ca:09:1d:57:da:dd:21:a8:54:24:90:60:89:36:c1:
c5:91:3e:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYx9EcdVdAHr9Mc+bO19NiHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE4MTMxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTdiMTE0ZmNhOTg2N2RhMTdiZDZkM2ZhZDAyYTYwOWM3MGY3YTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ldEICBpLz8PWasCrZq3X9nwxly
EnxSjlXW6mTeYc8yaC6bQIzge+DjXKGXCaDEv/qaSiLM9jGHIhCxiPjvRJht4vC+
pxq1OfbFmFTPqdNEJCKrnBL/JJqjkGDUJ51B+KaA3g+VfH2z2Qt1tiKUF2BsdtUX
xMFr7iGxU0OR9pzUVRxpF2D2sst9cGi62r11NLIEurwMEmQ46ANzzh0c++xLWSbo
zCzs5jZd7s9vDy/Hxb6+TRog6HVvKESnyWMvQOKXNygmS1+UFPN6HmJRpI1+yGXr
7khNJrHVhoEr057z4cTjsB5vkKpexTcltgeQlccdMPmWevOlEG2LALER/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKl7EU/KmGfaF71tP60CpgnHD3prMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcVhzUlQ4cVlaOW9YdlcwX3JRS21DY2NQZW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALtswCvQSi6ItR0ne1iY
iaDMpsCCy+UWK282OgvQn87w7yituO+SQoeXSJv+gPlQf5z3uuHS4wXnh60wxBrc
LDSMIo3JUsn2pXCqDYwtblDi3Ml5g49HbGiDY9yt8Yh78ubuYI7+wjcyXiI93cRY
G4WBPvz6w4XrH5HeNY/wPh0ZJQiR2gYuZA4vC+3ho+gmgVIwfFjftmOtcLbNp2xG
6IeD3VP17xcpOgnnpASb3Asdq83EISI/93b6mq3sZKz8/z8YEuHqa1QEdipHxxgv
5pHJQZcvQ2FkEnMYkUYpETqRbgQeyEIeShJCtEcQjsoJHVfa3SGoVCSQYIk2wcWR
PoQ=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:11 2025 by rpki-client