Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qmZjFIgLXEivFAjhZaz6qVriFME.roa
File: qmZjFIgLXEivFAjhZaz6qVriFME.roa (raw, json)
Hash identifier: l1GoN2qd5CJ89kM1X1lZG1LRA7O9i6vUa6gEstKSGBA=
Subject key identifier: AA:66:63:14:88:0B:5C:48:AF:14:08:E1:65:AC:FA:A9:5A:E2:14:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABAABAA5B00F42FB21017185BDFC13372
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qmZjFIgLXEivFAjhZaz6qVriFME.roa
Signing time: Fri 22 Sep 2023 02:15:26 +0000
ROA not before: Fri 22 Sep 2023 02:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ba:ab:aa:5b:00:f4:2f:b2:10:17:18:5b:df:c1:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 02:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa666314880b5c48af1408e165acfaa95ae214c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:0c:1f:2a:3d:51:3c:1a:90:fd:d0:68:6f:
02:ce:6a:37:9b:30:86:57:2e:26:4d:a7:49:c1:d2:
b5:9d:33:49:64:10:ac:ca:ad:e8:b9:af:f3:f6:29:
34:33:5e:e9:8b:fb:17:68:72:3d:20:ad:44:d3:38:
33:b5:32:4a:69:8f:73:2e:9f:9e:b6:f1:54:28:dd:
66:7b:8b:73:0d:fe:d8:5f:32:dc:f7:a3:2f:9f:c3:
dc:0b:b4:ac:37:41:88:29:02:d7:fd:68:7f:42:33:
bd:44:9a:28:c9:a9:b8:7f:76:a2:4f:0f:1a:15:8f:
44:95:af:18:56:7c:db:8b:c0:8d:39:7d:89:1d:67:
34:dc:f4:6d:3d:89:84:39:be:ee:86:f7:f3:3f:36:
be:17:82:a8:dd:c7:12:71:30:11:d5:09:05:76:20:
44:7b:97:3f:db:5e:aa:b7:07:78:05:20:fc:fc:8c:
f3:af:cb:39:67:db:94:13:c0:35:09:cb:d7:5d:b7:
ca:bc:2e:ce:b5:a8:f2:bc:d8:e8:4a:4d:6c:76:6d:
0c:dc:5c:ee:e5:41:02:d2:1b:f0:c3:0e:5e:64:8d:
77:6b:3c:c0:05:02:36:26:76:15:0b:cc:8d:a0:fb:
b6:99:98:e8:32:72:55:5f:e7:36:0a:80:0c:b7:f7:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:63:14:88:0B:5C:48:AF:14:08:E1:65:AC:FA:A9:5A:E2:14:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qmZjFIgLXEivFAjhZaz6qVriFME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4c:99:69:7d:54:fa:63:b7:09:2d:ec:94:25:e5:e4:01:2c:
93:13:72:89:50:cb:21:71:5e:b4:7a:d4:15:c0:63:4b:c1:03:
95:88:2f:8d:1f:89:f3:e7:05:bf:17:a4:92:a6:ef:b4:71:f9:
34:96:b7:63:94:b4:a2:05:10:de:32:e2:fd:ba:94:b3:b3:bd:
66:8b:53:5f:84:92:42:15:97:26:85:68:b8:24:51:f6:01:78:
a0:ef:4a:3c:35:e1:49:d4:cc:6f:6a:86:45:18:c6:62:23:6c:
9e:48:2a:d6:49:28:c3:42:1e:6e:a3:a2:7b:91:14:af:18:62:
c1:53:7a:4c:96:b2:05:2e:15:3f:33:a2:54:ed:0c:24:f3:dc:
3c:c8:42:18:ed:a4:27:60:a0:3a:89:65:2c:15:61:1f:4d:f8:
bb:04:34:7d:3d:db:a9:a7:d6:ff:0a:b8:75:4b:4f:d0:94:41:
dc:6c:cd:73:aa:5c:c7:f4:5b:04:70:f0:11:83:29:c0:08:ba:
bc:1e:83:c3:db:cc:d0:28:7b:c5:f6:d6:73:4c:9d:f6:f0:26:
94:d1:e5:68:a4:90:6a:fe:17:5a:f1:80:52:13:c4:e4:a9:eb:
41:47:6b:3a:7a:9e:2f:bb:d0:bd:3a:26:e6:35:0a:b8:c0:1d:
0b:2f:40:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq6q6pbAPQvshAXGFvfwTNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIyMDIxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTY2NjMxNDg4MGI1YzQ4YWYxNDA4ZTE2NWFjZmFhOTVhZTIxNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T8MHyo9UTwakP3QaG8Czmo3mzCG
Vy4mTadJwdK1nTNJZBCsyq3oua/z9ik0M17pi/sXaHI9IK1E0zgztTJKaY9zLp+e
tvFUKN1me4tzDf7YXzLc96Mvn8PcC7SsN0GIKQLX/Wh/QjO9RJooyam4f3aiTw8a
FY9Ela8YVnzbi8CNOX2JHWc03PRtPYmEOb7uhvfzPza+F4Ko3ccScTAR1QkFdiBE
e5c/216qtwd4BSD8/Izzr8s5Z9uUE8A1CcvXXbfKvC7OtajyvNjoSk1sdm0M3Fzu
5UEC0hvwww5eZI13azzABQI2JnYVC8yNoPu2mZjoMnJVX+c2CoAMt/c5pQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKpmYxSIC1xIrxQI4WWs+qla4hTBMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvcW1aakZJZ0xYRWl2RkFqaFphejZxVnJpRk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKJMmWl9VPpjtwkt7JQl
5eQBLJMTcolQyyFxXrR61BXAY0vBA5WIL40fifPnBb8XpJKm77Rx+TSWt2OUtKIF
EN4y4v26lLOzvWaLU1+EkkIVlyaFaLgkUfYBeKDvSjw14UnUzG9qhkUYxmIjbJ5I
KtZJKMNCHm6jonuRFK8YYsFTekyWsgUuFT8zolTtDCTz3DzIQhjtpCdgoDqJZSwV
YR9N+LsENH0926mn1v8KuHVLT9CUQdxszXOqXMf0WwRw8BGDKcAIurweg8PbzNAo
e8X21nNMnfbwJpTR5WikkGr+F1rxgFITxOSp60FHazp6ni+70L06JuY1CrjAHQsv
QBA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:58 2025 by rpki-client