Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yZGXo_7GGt5K7TGnw8_mH6UpEIc.roa
File: yZGXo_7GGt5K7TGnw8_mH6UpEIc.roa (raw, json)
Hash identifier: b+dMw/2uH1mFFlJz5CvJpgxKL5HIwY3LrfuIhXi4zQ0=
Subject key identifier: C9:91:97:A3:FE:C6:1A:DE:4A:ED:31:A7:C3:CF:E6:1F:A5:29:10:87
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B25BD292B373E411BCDFE8842042DB369
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yZGXo_7GGt5K7TGnw8_mH6UpEIc.roa
Signing time: Thu 12 Oct 2023 21:13:55 +0000
ROA not before: Thu 12 Oct 2023 21:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:bd:29:2b:37:3e:41:1b:cd:fe:88:42:04:2d:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 21:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99197a3fec61ade4aed31a7c3cfe61fa5291087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:ec:36:6f:c0:9c:45:b5:8a:92:47:6c:20:
ff:e8:7a:30:10:42:3e:cf:ab:d2:90:5c:53:d0:fa:
53:fd:ee:04:1d:e8:67:be:aa:91:90:25:2f:e2:6f:
0e:9a:4c:eb:18:b5:3c:3d:0a:66:f6:bc:e6:8e:c9:
89:b6:a0:ac:97:a4:ae:85:1e:15:65:7e:a4:96:09:
91:42:8f:32:df:1e:f6:18:15:4e:6f:9c:61:40:e0:
97:30:48:e7:62:84:09:a4:de:65:21:b5:38:af:b4:
4f:ac:10:e2:bc:e4:1f:54:b9:0b:cf:e8:56:db:de:
e8:f8:5a:fc:9e:8d:2e:9e:c4:f7:c8:00:bb:c3:1a:
49:c1:96:62:53:a1:7f:40:55:9f:25:a6:70:e7:d9:
da:88:e4:a6:69:b2:5a:1a:5e:cd:62:97:2d:8a:c1:
04:36:1d:da:3c:01:76:11:11:5c:f4:0c:ff:88:eb:
c7:07:c3:14:a5:ae:e9:14:41:60:0d:3f:b7:2c:97:
63:9e:b7:df:3d:48:51:97:a7:9f:3a:e9:6d:4e:66:
4b:5b:6e:04:a5:3b:27:fd:eb:8e:37:82:47:a7:b8:
6f:d7:b4:cd:8e:7b:a6:29:de:51:2b:3e:a7:b6:04:
43:c2:f9:45:fe:08:fb:02:a7:96:00:1a:f1:82:cc:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:97:A3:FE:C6:1A:DE:4A:ED:31:A7:C3:CF:E6:1F:A5:29:10:87
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yZGXo_7GGt5K7TGnw8_mH6UpEIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:b6:14:f6:f8:a5:13:c6:e9:92:a4:7b:05:66:61:35:0e:77:
96:45:38:9d:46:9e:b9:2c:11:ae:13:d7:10:11:86:9c:7b:6c:
ae:1a:c3:b5:2b:d7:8f:84:40:2c:7e:c7:7a:26:31:90:ab:da:
c6:e9:b9:23:d7:f5:53:bf:c5:02:a2:17:09:ff:ce:a0:77:8d:
cc:31:87:26:fb:fb:f0:26:d3:7d:0c:61:5f:16:86:9c:45:35:
48:1c:ed:39:05:07:17:84:0b:a3:2a:e9:72:77:5f:62:d0:54:
31:b3:f9:f6:ed:27:1e:07:10:eb:bf:56:9a:08:20:51:a3:b1:
c4:6f:14:0c:b4:1d:77:94:55:cb:ab:bb:de:23:98:44:db:b4:
58:3c:c8:7d:e9:fb:ca:e1:7e:e8:21:98:24:1e:35:aa:57:5c:
1c:03:9a:9c:c0:f7:1f:2a:d1:f5:64:c0:31:37:56:93:9a:4d:
43:57:8c:cc:ff:27:27:fe:57:fd:72:e5:a1:f9:b7:d1:e4:3b:
4b:48:b2:46:ee:06:62:93:7b:bf:92:d2:af:a9:1f:3c:07:b4:
9a:af:57:b2:2e:aa:43:ac:f4:1c:8f:22:67:2d:79:a2:04:56:
5e:6a:f4:9a:ad:30:c9:e5:29:af:e7:72:1f:e1:95:3f:10:a0:
25:af:0f:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYslvSkrNz5BG83+iEIELbNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEyMjExMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTkxOTdhM2ZlYzYxYWRlNGFlZDMxYTdjM2NmZTYxZmE1MjkxMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpzsNm/AnEW1ipJHbCD/6HowEEI+
z6vSkFxT0PpT/e4EHehnvqqRkCUv4m8OmkzrGLU8PQpm9rzmjsmJtqCsl6SuhR4V
ZX6klgmRQo8y3x72GBVOb5xhQOCXMEjnYoQJpN5lIbU4r7RPrBDivOQfVLkLz+hW
297o+Fr8no0unsT3yAC7wxpJwZZiU6F/QFWfJaZw59naiOSmabJaGl7NYpctisEE
Nh3aPAF2ERFc9Az/iOvHB8MUpa7pFEFgDT+3LJdjnrffPUhRl6efOultTmZLW24E
pTsn/euON4JHp7hv17TNjnumKd5RKz6ntgRDwvlF/gj7AqeWABrxgsxPuwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMmRl6P+xhreSu0xp8PP5h+lKRCHMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEveVpHWG9fN0dHdDVLN1RHbnc4X21INlVwRUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ62FPb4pRPG6ZKkewVm
YTUOd5ZFOJ1GnrksEa4T1xARhpx7bK4aw7Ur14+EQCx+x3omMZCr2sbpuSPX9VO/
xQKiFwn/zqB3jcwxhyb7+/Am030MYV8WhpxFNUgc7TkFBxeEC6Mq6XJ3X2LQVDGz
+fbtJx4HEOu/VpoIIFGjscRvFAy0HXeUVcuru94jmETbtFg8yH3p+8rhfughmCQe
NapXXBwDmpzA9x8q0fVkwDE3VpOaTUNXjMz/Jyf+V/1y5aH5t9HkO0tIskbuBmKT
e7+S0q+pHzwHtJqvV7IuqkOs9ByPImcteaIEVl5q9JqtMMnlKa/nch/hlT8QoCWv
D2Q=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:41 2025 by rpki-client