Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xigMoxE6yjfVIbH7UL1koab2a-w.roa
File: xigMoxE6yjfVIbH7UL1koab2a-w.roa (raw, json)
Hash identifier: VtgQnBefPtSGIWwMqCJVkcfk6Fv3XIR32BqXiDRXUaY=
Subject key identifier: C6:28:0C:A3:11:3A:CA:37:D5:21:B1:FB:50:BD:64:A1:A6:F6:6B:EC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C317F16E328669777FF1B26D325EFAA8B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xigMoxE6yjfVIbH7UL1koab2a-w.roa
Signing time: Sun 03 Dec 2023 21:04:21 +0000
ROA not before: Sun 03 Dec 2023 21:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:317f:360/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:7f:16:e3:28:66:97:77:ff:1b:26:d3:25:ef:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 21:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6280ca3113aca37d521b1fb50bd64a1a6f66bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:14:a8:2c:15:b8:6a:8b:a7:a8:e5:39:21:
80:34:97:e3:b6:36:4b:f0:86:72:46:d8:d5:c6:b2:
93:5d:d8:18:ae:44:33:23:9e:44:3e:bf:ee:1e:4b:
53:8e:6e:24:0e:0c:0b:76:c3:b2:74:9c:87:40:69:
0c:12:07:2c:2e:e0:4e:9c:0b:33:84:a6:6c:fa:2d:
2c:56:6b:e6:d1:e5:44:99:40:31:c0:02:9c:e9:a8:
50:e1:f7:88:ea:9a:6d:be:2d:02:be:e3:44:94:bc:
3a:05:d0:2e:d3:98:51:95:eb:a2:52:54:f3:ee:29:
4b:3f:5c:8a:cf:9b:79:8a:46:1c:65:89:cf:7c:60:
00:8b:91:08:ef:76:d5:64:17:f4:c2:52:a4:0e:20:
ca:0c:f3:53:7e:dd:05:1f:f6:81:40:93:00:ce:65:
30:8d:2c:29:ac:e3:36:36:3a:11:4f:c9:7b:88:15:
7e:4d:cf:5b:f3:96:4d:d7:a1:a4:de:a9:d0:7f:11:
6b:1f:62:c4:a9:d8:ee:6e:5b:58:e0:e4:ec:f6:c7:
d1:f7:ed:66:c1:ba:de:da:64:2f:f3:37:b4:7e:70:
ca:3f:c8:27:2a:5d:dd:a5:51:f8:6c:cd:8a:0b:ac:
f8:9f:58:62:59:68:26:65:0c:ab:33:bd:7b:23:f7:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:0C:A3:11:3A:CA:37:D5:21:B1:FB:50:BD:64:A1:A6:F6:6B:EC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xigMoxE6yjfVIbH7UL1koab2a-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:40:af:76:e5:9c:9b:c2:e5:b9:a0:da:6f:c4:17:0e:4c:4e:
7b:d9:00:d8:32:48:7b:29:e2:bd:9d:34:d3:cc:20:91:52:c8:
e1:3d:f3:45:64:df:94:c1:38:0a:ea:de:71:f7:b5:0d:81:d7:
65:7c:1e:c0:4d:ec:7e:51:23:62:b2:76:48:96:02:73:75:d4:
58:7f:0f:42:35:64:03:4f:fc:ba:89:e7:dd:d5:4c:e0:1f:c5:
57:b0:12:78:75:48:7c:2d:17:53:6e:1a:de:0d:09:e5:3f:16:
f6:31:1f:d7:2f:11:ca:db:22:1d:8a:47:6f:6f:59:85:a3:4e:
35:08:d7:04:eb:e2:49:40:9d:f0:e6:14:30:6f:04:33:4b:2e:
ee:a5:f6:11:ca:f7:b5:c1:03:7e:ae:44:cf:92:ae:db:7d:75:
d8:0b:9b:e6:eb:e5:37:f6:af:20:1f:2a:a9:05:ca:97:cb:c6:
a9:8d:50:d7:54:49:dd:3a:06:77:c4:e4:30:91:99:3e:69:b6:
68:17:e4:29:68:c5:f7:f8:32:41:c0:0f:07:e0:13:fe:90:65:
99:f3:38:93:b1:c7:57:e1:c7:6c:b1:d6:c0:c0:65:82:05:10:
c8:83:99:11:69:ae:00:05:34:db:a7:4b:37:56:c1:15:68:01:
e6:08:bc:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwxfxbjKGaXd/8bJtMl76qLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAzMjEwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjI4MGNhMzExM2FjYTM3ZDUyMWIxZmI1MGJkNjRhMWE2ZjY2YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEUqCwVuGqLp6jlOSGANJfjtjZL
8IZyRtjVxrKTXdgYrkQzI55EPr/uHktTjm4kDgwLdsOydJyHQGkMEgcsLuBOnAsz
hKZs+i0sVmvm0eVEmUAxwAKc6ahQ4feI6pptvi0CvuNElLw6BdAu05hRleuiUlTz
7ilLP1yKz5t5ikYcZYnPfGAAi5EI73bVZBf0wlKkDiDKDPNTft0FH/aBQJMAzmUw
jSwprOM2NjoRT8l7iBV+Tc9b85ZN16Gk3qnQfxFrH2LEqdjubltY4OTs9sfR9+1m
wbre2mQv8ze0fnDKP8gnKl3dpVH4bM2KC6z4n1hiWWgmZQyrM717I/eGTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMYoDKMROso31SGx+1C9ZKGm9mvsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveGlnTW94RTZ5amZWSWJIN1VMMWtvYWIyYS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALNAr3blnJvC5bmg2m/E
Fw5MTnvZANgySHsp4r2dNNPMIJFSyOE980Vk35TBOArq3nH3tQ2B12V8HsBN7H5R
I2KydkiWAnN11Fh/D0I1ZANP/LqJ593VTOAfxVewEnh1SHwtF1NuGt4NCeU/FvYx
H9cvEcrbIh2KR29vWYWjTjUI1wTr4klAnfDmFDBvBDNLLu6l9hHK97XBA36uRM+S
rtt9ddgLm+br5Tf2ryAfKqkFypfLxqmNUNdUSd06BnfE5DCRmT5ptmgX5Cloxff4
MkHADwfgE/6QZZnzOJOxx1fhx2yx1sDAZYIFEMiDmRFprgAFNNunSzdWwRVoAeYI
vAk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:27:58 2025 by rpki-client