Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPSMgBgMoy7MlqyMw3es3KsRc1o.roa
File: xPSMgBgMoy7MlqyMw3es3KsRc1o.roa (raw, json)
Hash identifier: RlpT+0kDfob0o+0wnJkgs1bxmyE4TCu385hRs/uv4QU=
Subject key identifier: C4:F4:8C:80:18:0C:A3:2E:CC:96:AC:8C:C3:77:AC:DC:AB:11:73:5A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B49235BCA83317478919AC32840B5F2B7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPSMgBgMoy7MlqyMw3es3KsRc1o.roa
Signing time: Thu 19 Oct 2023 18:12:15 +0000
ROA not before: Thu 19 Oct 2023 18:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:23:5b:ca:83:31:74:78:91:9a:c3:28:40:b5:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 18:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4f48c80180ca32ecc96ac8cc377acdcab11735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:2e:f1:e1:0f:cf:80:3b:14:21:e4:6d:dc:
94:21:89:fc:27:39:4a:74:9f:19:41:40:43:6d:40:
f3:40:da:76:fe:06:d8:b0:65:02:0d:3e:a1:73:98:
22:d1:27:03:7c:61:68:37:a5:16:bd:c2:19:d5:a3:
f6:4e:31:41:e6:cb:9c:79:d9:ee:04:24:33:6a:d4:
ea:1e:d7:8d:6b:41:c3:79:d3:e9:c0:10:f0:ab:df:
10:dd:b4:0a:cf:08:a2:65:03:e3:dd:c9:4c:d7:26:
a5:c6:b3:18:1d:16:fc:1b:02:54:2f:9e:26:a3:28:
e0:c6:d5:55:2d:8c:34:4f:3e:34:e7:69:2f:cf:94:
c1:82:80:06:37:42:d0:c5:33:dc:83:72:18:13:9d:
ab:a5:24:45:68:f9:9e:c6:6f:92:c4:d8:79:db:f8:
80:1c:33:52:87:67:b0:9d:be:d9:e1:02:40:21:88:
be:c6:06:60:07:08:99:0a:a7:ec:dd:fe:e0:db:d0:
fe:29:e3:e6:20:24:5a:26:2a:35:83:ca:4b:7a:9c:
1f:4d:c4:5c:02:e3:af:eb:f5:cc:12:c7:03:31:74:
00:8b:41:f7:7c:df:10:42:0c:d3:d1:dc:2b:cb:9d:
db:f7:f2:cf:0a:ba:55:34:30:a7:c9:2d:79:2e:88:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:8C:80:18:0C:A3:2E:CC:96:AC:8C:C3:77:AC:DC:AB:11:73:5A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPSMgBgMoy7MlqyMw3es3KsRc1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:be:81:0d:34:c0:dc:ef:c4:26:4f:47:82:d6:7b:e5:98:f7:
5d:8b:f7:1d:42:c0:05:b4:d1:65:6d:99:a1:90:74:6c:78:b8:
1b:7a:6e:fb:7a:87:58:09:43:f2:41:6b:64:6d:58:82:31:87:
ef:95:0a:23:1c:eb:ad:92:b4:ae:2f:d5:bf:e8:c7:a8:ab:47:
65:9b:f4:10:fe:bd:61:1c:30:fd:89:d4:67:6a:4d:b7:c8:f5:
be:a5:fd:ca:49:5e:a9:5b:3f:4f:c5:81:10:53:84:a2:cc:5b:
b9:63:34:dd:5a:ae:9c:91:18:3a:c9:82:f3:ef:e0:ae:88:fa:
0c:d2:e1:9f:7f:59:f3:66:14:15:d9:c2:1e:6e:d6:69:5f:45:
d1:03:cf:a2:6f:76:0e:7f:a1:b1:f6:a6:2f:cc:f8:bd:4d:10:
df:87:9f:c1:30:d0:03:60:68:54:b5:8e:0b:2c:25:da:7c:88:
c7:c4:3b:c9:e3:f2:5c:e4:03:e1:f4:58:9c:18:ba:4a:2f:c8:
35:fd:78:82:4b:19:2a:1f:e8:34:cc:b7:f5:a5:43:e9:79:be:
91:6f:ef:33:3b:72:ed:a1:ef:97:f5:9d:50:80:c8:c5:52:d5:
fa:48:5a:aa:7c:90:7d:a9:6c:65:ee:0f:bc:6c:25:22:b7:e9:
31:74:2f:9c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtJI1vKgzF0eJGawyhAtfK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MTgxMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGY0OGM4MDE4MGNhMzJlY2M5NmFjOGNjMzc3YWNkY2FiMTE3MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3Yu8eEPz4A7FCHkbdyUIYn8JzlK
dJ8ZQUBDbUDzQNp2/gbYsGUCDT6hc5gi0ScDfGFoN6UWvcIZ1aP2TjFB5sucednu
BCQzatTqHteNa0HDedPpwBDwq98Q3bQKzwiiZQPj3clM1yalxrMYHRb8GwJUL54m
oyjgxtVVLYw0Tz4052kvz5TBgoAGN0LQxTPcg3IYE52rpSRFaPmexm+SxNh52/iA
HDNSh2ewnb7Z4QJAIYi+xgZgBwiZCqfs3f7g29D+KePmICRaJio1g8pLepwfTcRc
AuOv6/XMEscDMXQAi0H3fN8QQgzT0dwry53b9/LPCrpVNDCnyS15Loid7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMT0jIAYDKMuzJasjMN3rNyrEXNaMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveFBTTWdCZ01veTdNbHF5TXczZXMzS3NSYzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGm+gQ00wNzvxCZPR4LW
e+WY912L9x1CwAW00WVtmaGQdGx4uBt6bvt6h1gJQ/JBa2RtWIIxh++VCiMc662S
tK4v1b/ox6irR2Wb9BD+vWEcMP2J1GdqTbfI9b6l/cpJXqlbP0/FgRBThKLMW7lj
NN1arpyRGDrJgvPv4K6I+gzS4Z9/WfNmFBXZwh5u1mlfRdEDz6Jvdg5/obH2pi/M
+L1NEN+Hn8Ew0ANgaFS1jgssJdp8iMfEO8nj8lzkA+H0WJwYukovyDX9eIJLGSof
6DTMt/WlQ+l5vpFv7zM7cu2h75f1nVCAyMVS1fpIWqp8kH2pbGXuD7xsJSK36TF0
L5w=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:25 2025 by rpki-client