Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vUuMjiHCd1riOe5s8XHNGUfWSqk.roa
File: vUuMjiHCd1riOe5s8XHNGUfWSqk.roa (raw, json)
Hash identifier: zXQc+NuQ0Jt6dbaT+GWOcYrLFN2nr3vYJ3PFT2OtPXU=
Subject key identifier: BD:4B:8C:8E:21:C2:77:5A:E2:39:EE:6C:F1:71:CD:19:47:D6:4A:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB818C587F1B39A7B45EBFD0556B8A272
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vUuMjiHCd1riOe5s8XHNGUfWSqk.roa
Signing time: Thu 21 Sep 2023 14:15:45 +0000
ROA not before: Thu 21 Sep 2023 14:15:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:18:c5:87:f1:b3:9a:7b:45:eb:fd:05:56:b8:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 14:15:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4b8c8e21c2775ae239ee6cf171cd1947d64aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:ea:e0:a8:b7:a8:36:b7:f4:a0:e2:df:eb:
5b:04:32:1c:c1:6a:dd:99:da:c4:b2:e1:fd:b1:aa:
6e:2d:02:99:d0:88:5c:fc:81:6e:84:62:37:89:53:
b7:cd:3c:0e:1c:20:31:16:c7:56:17:42:c3:09:ed:
97:fd:fc:05:4e:31:53:38:3a:78:9a:c9:41:e1:18:
2e:1f:bb:6b:e5:68:85:8a:ae:3f:6a:5a:07:b4:02:
04:ff:d2:0b:0d:57:5e:4b:d6:c7:2b:9d:8a:88:cc:
bd:14:bd:73:75:39:18:36:65:60:97:69:ef:5e:90:
fd:d0:34:fc:f1:47:e6:50:9a:56:83:50:90:b7:10:
a9:65:07:45:84:be:59:6f:cf:f2:7f:06:68:f0:b9:
8a:17:65:c5:d9:c0:d2:02:ea:89:71:b1:6b:31:02:
c2:1f:ec:90:b3:ca:d1:20:f4:36:9e:0f:5a:b6:13:
f5:47:cb:78:f6:32:1b:f3:12:76:0b:94:3f:a0:ad:
24:8f:18:57:f8:12:90:a0:42:73:e1:87:79:69:0e:
bd:d9:10:db:96:6f:7c:de:ba:0f:15:09:e3:c5:12:
40:b5:3b:b5:a9:d3:e0:26:1a:b6:bd:44:e8:2b:4c:
48:8a:72:71:ea:e0:66:4b:65:c6:a8:a2:d5:a3:64:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:8C:8E:21:C2:77:5A:E2:39:EE:6C:F1:71:CD:19:47:D6:4A:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vUuMjiHCd1riOe5s8XHNGUfWSqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:30:5d:ee:16:a0:ad:0a:96:ea:30:89:c5:36:13:21:2b:d0:
3c:98:5b:6b:ac:8c:9f:e3:cc:20:0f:03:14:02:31:92:1c:40:
9f:ac:e9:46:24:24:65:34:1e:ba:17:0c:c9:09:58:c1:84:13:
92:fd:c9:2f:69:fa:74:83:0a:7c:f9:f3:df:a8:2f:2e:0a:c1:
96:0d:e1:a4:2e:52:47:e4:2b:7c:ee:eb:9e:21:5f:f7:3b:5d:
a2:da:b5:5c:b6:96:00:7d:5e:11:6f:97:4c:13:df:49:44:8f:
51:f5:40:b7:63:1d:a2:84:a3:c8:5c:a3:09:04:18:49:1e:8c:
35:14:65:49:89:f5:4f:ca:54:13:35:f0:c6:8e:3a:5e:cf:a0:
1c:f4:9b:ec:e5:e2:a2:b4:94:e2:4a:96:ef:3e:db:c4:95:05:
96:7e:9b:55:f6:af:8f:b7:00:4c:62:7f:5b:dd:3e:f7:52:a6:
85:3e:85:1e:ab:65:59:70:a7:d3:ca:6f:dd:93:d6:82:89:16:
0e:ee:95:88:1d:c1:4d:16:1c:10:7b:ad:6b:8b:c6:8e:40:bb:
71:f8:53:3b:58:9f:ed:6b:c1:0d:a5:dd:2e:66:1b:cb:6e:95:
30:87:52:26:a0:c2:84:94:98:2d:2f:1c:ef:49:a2:f7:e4:0a:
48:0f:8f:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq4GMWH8bOae0Xr/QVWuKJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIxMTQxNTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRiOGM4ZTIxYzI3NzVhZTIzOWVlNmNmMTcxY2QxOTQ3ZDY0YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5jq4Ki3qDa39KDi3+tbBDIcwWrd
mdrEsuH9sapuLQKZ0Ihc/IFuhGI3iVO3zTwOHCAxFsdWF0LDCe2X/fwFTjFTODp4
mslB4RguH7tr5WiFiq4/aloHtAIE/9ILDVdeS9bHK52KiMy9FL1zdTkYNmVgl2nv
XpD90DT88UfmUJpWg1CQtxCpZQdFhL5Zb8/yfwZo8LmKF2XF2cDSAuqJcbFrMQLC
H+yQs8rRIPQ2ng9athP1R8t49jIb8xJ2C5Q/oK0kjxhX+BKQoEJz4Yd5aQ692RDb
lm983roPFQnjxRJAtTu1qdPgJhq2vUToK0xIinJx6uBmS2XGqKLVo2TJkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL1LjI4hwnda4jnubPFxzRlH1kqpMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdlV1TWppSENkMXJpT2U1czhYSE5HVWZXU3FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI0wXe4WoK0KluowicU2
EyEr0DyYW2usjJ/jzCAPAxQCMZIcQJ+s6UYkJGU0HroXDMkJWMGEE5L9yS9p+nSD
Cnz589+oLy4KwZYN4aQuUkfkK3zu654hX/c7XaLatVy2lgB9XhFvl0wT30lEj1H1
QLdjHaKEo8hcowkEGEkejDUUZUmJ9U/KVBM18MaOOl7PoBz0m+zl4qK0lOJKlu8+
28SVBZZ+m1X2r4+3AExif1vdPvdSpoU+hR6rZVlwp9PKb92T1oKJFg7ulYgdwU0W
HBB7rWuLxo5Au3H4UztYn+1rwQ2l3S5mG8tulTCHUiagwoSUmC0vHO9JovfkCkgP
j/E=
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:08 2025 by rpki-client