Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tT6WYTBB090jEvMaH90FtQ6rQYo.roa
File: tT6WYTBB090jEvMaH90FtQ6rQYo.roa (raw, json)
Hash identifier: Kc44T8FCWW1HlhD/PWHH2u+U+5pQ59Q7no+DVG/wm5o=
Subject key identifier: B5:3E:96:61:30:41:D3:DD:23:12:F3:1A:1F:DD:05:B5:0E:AB:41:8A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7030F68634D9CDD6AC4BCE4EBE9D2930
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tT6WYTBB090jEvMaH90FtQ6rQYo.roa
Signing time: Sat 16 Dec 2023 01:15:06 +0000
ROA not before: Sat 16 Dec 2023 01:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:70:30:f6:86:34:d9:cd:d6:ac:4b:ce:4e:be:9d:29:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 01:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b53e96613041d3dd2312f31a1fdd05b50eab418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:11:38:69:85:74:cd:c6:15:29:61:94:3b:
36:bd:c1:33:4a:d9:93:e3:46:82:a1:06:7e:37:4b:
ad:5e:a9:07:74:2e:b2:f5:8d:e0:81:b8:d7:79:a3:
b9:c5:3f:33:9f:79:ec:0d:2e:e8:6f:2a:90:9f:c0:
46:ee:c6:25:b3:12:b3:36:c9:05:1a:31:75:0e:30:
09:51:b6:52:1b:ef:55:86:dd:40:81:44:73:5d:af:
79:44:8d:80:bc:92:a5:e5:4c:62:67:c8:bf:b4:cd:
07:e6:70:de:ee:7e:95:af:3c:16:63:2d:2f:c0:83:
f0:6c:f7:b5:30:e7:ab:2b:f1:40:bb:c1:0b:92:14:
ef:d5:f8:97:6a:4e:e7:3d:69:b6:e0:c5:28:28:7d:
cf:10:82:2a:ed:57:7f:b9:63:ad:95:75:43:b2:d5:
7c:a0:cd:55:06:0d:05:e5:67:5c:de:23:f1:07:e3:
68:e2:f2:d5:5b:11:ff:26:19:60:db:49:46:f8:e4:
88:72:d0:0e:99:c7:7b:20:58:4e:1e:22:5d:dc:42:
fc:50:14:f4:f2:1e:6e:ff:67:8c:c8:93:cc:d0:1f:
3b:69:4e:7b:66:39:26:98:79:77:b5:7f:e2:e7:0b:
ab:ad:ea:53:6f:62:67:97:51:8d:e7:b8:ca:b0:35:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:96:61:30:41:D3:DD:23:12:F3:1A:1F:DD:05:B5:0E:AB:41:8A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tT6WYTBB090jEvMaH90FtQ6rQYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:65:7a:d0:2b:25:d9:39:2e:19:59:22:a2:72:47:b2:2b:f9:
33:ba:e9:11:93:99:49:7d:86:e3:92:af:31:b0:4e:e0:4e:9a:
ae:be:bf:14:12:b3:7a:11:04:09:de:78:42:b3:0d:bb:26:47:
51:b7:3f:ae:a5:75:2f:ac:bb:d8:4a:09:d4:83:8b:54:ec:54:
0e:d3:55:9a:7e:7d:a2:ae:75:ef:78:f0:4c:4d:bb:c4:f4:90:
d6:d0:3f:96:f6:cb:12:12:a1:27:64:6b:02:51:78:53:db:3f:
75:b9:8a:d5:af:21:73:71:4c:3f:12:68:73:79:eb:a5:4c:c9:
01:d9:2f:38:61:2b:ac:80:43:78:a8:ac:47:d7:96:e4:43:93:
da:0a:36:4b:a5:3f:13:ca:ea:b2:d7:dd:46:59:0d:4b:84:2e:
64:f7:79:49:40:2a:6c:8e:bc:6a:ae:1c:9c:ea:04:af:e2:34:
01:51:2a:bf:e3:8e:be:8c:a0:75:8b:86:13:25:69:af:0e:9d:
bc:c3:8f:69:20:6d:d1:d4:c1:47:e1:0b:76:e4:b9:ab:37:f1:
5f:1d:10:72:5f:f9:f3:7c:cf:b0:ef:6c:5e:32:6d:4f:e7:6a:
05:df:e8:1e:73:7d:96:71:ab:72:33:09:92:74:36:f9:61:99:
0e:73:9e:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxwMPaGNNnN1qxLzk6+nSkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE2MDExNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTNlOTY2MTMwNDFkM2RkMjMxMmYzMWExZmRkMDViNTBlYWI0MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtkROGmFdM3GFSlhlDs2vcEzStmT
40aCoQZ+N0utXqkHdC6y9Y3ggbjXeaO5xT8zn3nsDS7obyqQn8BG7sYlsxKzNskF
GjF1DjAJUbZSG+9Vht1AgURzXa95RI2AvJKl5UxiZ8i/tM0H5nDe7n6VrzwWYy0v
wIPwbPe1MOerK/FAu8ELkhTv1fiXak7nPWm24MUoKH3PEIIq7Vd/uWOtlXVDstV8
oM1VBg0F5Wdc3iPxB+No4vLVWxH/Jhlg20lG+OSIctAOmcd7IFhOHiJd3EL8UBT0
8h5u/2eMyJPM0B87aU57ZjkmmHl3tX/i5wurrepTb2Jnl1GN57jKsDXNzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLU+lmEwQdPdIxLzGh/dBbUOq0GKMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdFQ2V1lUQkIwOTBqRXZNYUg5MEZ0UTZyUVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABBletArJdk5LhlZIqJy
R7Ir+TO66RGTmUl9huOSrzGwTuBOmq6+vxQSs3oRBAneeEKzDbsmR1G3P66ldS+s
u9hKCdSDi1TsVA7TVZp+faKude948ExNu8T0kNbQP5b2yxISoSdkawJReFPbP3W5
itWvIXNxTD8SaHN566VMyQHZLzhhK6yAQ3iorEfXluRDk9oKNkulPxPK6rLX3UZZ
DUuELmT3eUlAKmyOvGquHJzqBK/iNAFRKr/jjr6MoHWLhhMlaa8OnbzDj2kgbdHU
wUfhC3bkuas38V8dEHJf+fN8z7DvbF4ybU/nagXf6B5zfZZxq3IzCZJ0NvlhmQ5z
nl8=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:50:41 2025 by rpki-client