Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ySeSqUX9qPgl4vbrrOAJqpBmuq0.roa
File: ySeSqUX9qPgl4vbrrOAJqpBmuq0.roa (raw, json)
Hash identifier: smkXTsEQuuJc4GpyINspS8rBWnt2CtmjPa3RlA2laZI=
Subject key identifier: C9:27:92:A9:45:FD:A8:F8:25:E2:F6:EB:AC:E0:09:AA:90:66:BA:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0E905C55F2049182F2D7A85D3BF44095
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ySeSqUX9qPgl4vbrrOAJqpBmuq0.roa
Signing time: Sun 08 Oct 2023 09:13:43 +0000
ROA not before: Sun 08 Oct 2023 09:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:90:5c:55:f2:04:91:82:f2:d7:a8:5d:3b:f4:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 09:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c92792a945fda8f825e2f6ebace009aa9066baad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:11:91:45:56:bf:d1:37:d7:86:3a:eb:54:
5e:8e:14:16:86:a0:99:da:6d:31:f8:a2:c8:e6:0b:
41:13:d6:af:97:4c:fd:a2:2e:08:56:fd:84:1e:22:
f3:a8:ec:64:18:48:46:02:cc:16:1b:52:1c:67:be:
04:5f:9b:56:8b:9a:fc:cd:2e:8e:1b:db:08:6b:69:
3f:7a:e7:9b:9c:8f:8a:87:d5:db:1c:0d:6f:88:cc:
43:6a:32:a1:6a:ef:cf:3c:59:e1:63:11:d8:f5:f6:
c3:d4:56:1e:fa:e7:88:ea:4b:40:76:03:c3:e9:74:
02:80:6e:c0:e3:06:be:ee:00:25:90:56:fc:2d:74:
53:47:ea:4d:de:71:26:d9:1b:f3:ff:20:4d:69:d1:
00:fd:9b:e7:5c:50:de:84:3f:1b:2b:df:8c:6e:b8:
bb:a7:b7:b1:1d:fd:f2:c8:a0:c3:87:d3:5c:60:39:
5c:fe:2e:90:ab:99:7b:78:21:8a:d0:92:44:ad:ae:
3e:41:4e:c1:62:b0:6e:08:a1:0d:f2:fb:e6:e3:59:
e2:8b:e4:2c:92:fd:5e:cc:d3:e4:4b:6e:f4:de:6c:
80:35:4c:f8:f1:a3:8a:72:58:04:4b:c0:a5:38:75:
61:96:35:ff:c0:fc:54:94:2f:a2:ad:09:c1:82:82:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:92:A9:45:FD:A8:F8:25:E2:F6:EB:AC:E0:09:AA:90:66:BA:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ySeSqUX9qPgl4vbrrOAJqpBmuq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:8a:04:dc:17:22:30:49:8a:cb:6e:31:22:42:7f:8a:3d:75:
48:76:ab:a5:b6:90:0d:93:48:e6:3f:25:3e:ae:46:50:ff:c5:
90:ee:d7:77:7f:55:ae:e3:92:0d:61:a9:ce:d8:f2:dd:a7:ce:
81:05:78:5d:45:95:20:39:e4:00:a8:5f:0d:58:d6:c6:0f:4c:
9b:a5:e2:bb:00:d9:f6:e6:0d:7a:6d:1c:6d:92:b9:83:ec:20:
bd:ad:92:e3:8f:3e:78:da:d0:a2:16:b0:e5:77:12:c9:a9:86:
73:c9:73:31:81:c0:55:c8:b4:97:56:4a:8a:ad:05:22:c5:be:
fb:cf:c5:05:28:15:c6:32:00:52:73:10:05:3c:7e:10:e1:3d:
f6:d4:f8:eb:5d:a2:10:ba:94:5c:d1:34:fa:42:9b:9f:9a:07:
ae:5f:bf:c9:26:21:e2:78:72:11:bc:c5:ba:ad:79:f3:77:b0:
89:56:8e:4d:79:7f:12:5b:33:ef:0a:d0:86:d0:dd:9f:0c:65:
d0:54:25:6b:e4:ce:95:ab:49:57:9b:fe:e2:0c:d9:ec:5c:a5:
b8:d0:83:81:da:d2:dc:9a:e0:17:2a:dd:b6:02:94:a7:74:65:
30:2c:61:66:32:f6:df:95:01:0d:b0:5b:8d:10:50:a6:a8:cd:
d6:6d:00:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsOkFxV8gSRgvLXqF079ECVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA4MDkxMzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTI3OTJhOTQ1ZmRhOGY4MjVlMmY2ZWJhY2UwMDlhYTkwNjZiYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygwRkUVWv9E314Y661RejhQWhqCZ
2m0x+KLI5gtBE9avl0z9oi4IVv2EHiLzqOxkGEhGAswWG1IcZ74EX5tWi5r8zS6O
G9sIa2k/euebnI+Kh9XbHA1viMxDajKhau/PPFnhYxHY9fbD1FYe+ueI6ktAdgPD
6XQCgG7A4wa+7gAlkFb8LXRTR+pN3nEm2Rvz/yBNadEA/ZvnXFDehD8bK9+Mbri7
p7exHf3yyKDDh9NcYDlc/i6Qq5l7eCGK0JJEra4+QU7BYrBuCKEN8vvm41nii+Qs
kv1ezNPkS2703myANUz48aOKclgES8ClOHVhljX/wPxUlC+irQnBgoKJ+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMknkqlF/aj4JeL266zgCaqQZrqtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveVNlU3FVWDlxUGdsNHZicnJPQUpxcEJtdXEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMWKBNwXIjBJistuMSJC
f4o9dUh2q6W2kA2TSOY/JT6uRlD/xZDu13d/Va7jkg1hqc7Y8t2nzoEFeF1FlSA5
5ACoXw1Y1sYPTJul4rsA2fbmDXptHG2SuYPsIL2tkuOPPnja0KIWsOV3EsmphnPJ
czGBwFXItJdWSoqtBSLFvvvPxQUoFcYyAFJzEAU8fhDhPfbU+OtdohC6lFzRNPpC
m5+aB65fv8kmIeJ4chG8xbqtefN3sIlWjk15fxJbM+8K0IbQ3Z8MZdBUJWvkzpWr
SVeb/uIM2excpbjQg4Ha0tya4Bcq3bYClKd0ZTAsYWYy9t+VAQ2wW40QUKaozdZt
AJM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:43:52 2025 by rpki-client