Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QY-HArZkI_NhqpDJKl0YsyZABBI.roa
File: QY-HArZkI_NhqpDJKl0YsyZABBI.roa (raw, json)
Hash identifier: eXwDVWYMHAJOvxZo7+px5Pp801mma0LUJp7qvwDQ3Gk=
Subject key identifier: 41:8F:87:02:B6:64:23:F3:61:AA:90:C9:2A:5D:18:B3:26:40:04:12
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A97787C14120849C86092EC6980E463DF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QY-HArZkI_NhqpDJKl0YsyZABBI.roa
Signing time: Fri 15 Sep 2023 06:12:50 +0000
ROA not before: Fri 15 Sep 2023 06:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:78:7c:14:12:08:49:c8:60:92:ec:69:80:e4:63:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 15 06:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=418f8702b66423f361aa90c92a5d18b326400412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:f9:54:b0:15:f4:a8:f6:92:40:c0:7d:08:
ac:ae:52:d0:82:33:31:7e:f7:02:1c:31:43:f2:6a:
b5:95:10:fe:f9:61:76:25:94:8b:30:69:54:3d:23:
3b:10:81:97:8b:95:dd:4c:8b:e8:82:3b:2e:fc:d9:
22:5e:d7:2d:ce:cc:22:cd:ed:ce:70:c3:0b:2a:e3:
20:8c:10:62:a9:1c:c3:62:17:20:89:e8:89:d9:d2:
f7:66:46:4b:88:29:2e:2c:83:af:b8:09:d8:57:7e:
0d:78:61:9d:74:aa:b5:c8:8d:f4:e7:19:f9:af:34:
5c:ea:fc:6b:b5:d9:cd:21:70:44:f1:f6:03:e6:74:
56:e8:13:10:08:ed:30:86:a3:ed:1e:2f:10:c2:8c:
91:7a:f8:50:e5:04:96:44:5c:75:72:cf:0b:80:69:
29:87:40:36:e5:db:3d:59:ae:92:1b:8b:fd:e8:63:
ea:8f:06:27:05:c0:9e:0f:91:e5:ea:5e:ed:84:94:
f4:86:99:ce:58:2c:65:ed:1a:78:85:49:d1:0c:ea:
39:16:da:7d:ba:29:ff:5d:92:85:7b:70:0c:48:7c:
92:4b:f5:35:b9:90:e1:ef:58:bd:cb:19:66:4e:2a:
f5:3c:7b:bf:98:8e:14:60:37:5c:45:9c:aa:e1:54:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:87:02:B6:64:23:F3:61:AA:90:C9:2A:5D:18:B3:26:40:04:12
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QY-HArZkI_NhqpDJKl0YsyZABBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:04:55:27:75:7e:5c:08:a7:96:f6:61:f4:a6:f6:7a:0f:6d:
e6:c4:63:33:bf:ec:1f:c7:88:82:06:95:8b:b6:cc:0c:9d:90:
f8:45:c0:85:1f:c3:b2:ac:f3:27:85:84:a2:11:08:9b:7c:9b:
70:eb:e1:3d:1f:21:5b:81:3d:16:08:7f:a2:d2:46:a0:06:88:
c1:eb:26:08:3f:81:ae:ea:41:3b:47:64:b0:f6:5c:36:01:4a:
9b:4a:da:6f:54:f0:a4:b1:bc:5b:d7:fd:d1:1d:6d:be:41:94:
08:ee:8f:7d:52:8c:1d:37:ea:bc:67:e1:da:b0:55:bd:67:dd:
0a:64:42:a2:83:4e:58:cf:53:79:94:54:f8:ce:5b:04:8f:ab:
d2:87:23:75:7f:11:f2:7f:9c:1a:81:e2:f2:59:1e:19:a4:3b:
37:3a:55:95:73:1a:96:57:21:9e:2d:40:9f:7e:d3:f0:27:b1:
3f:f6:8c:5d:57:40:9c:ef:6f:46:17:a0:2a:dd:c0:41:8a:15:
6c:42:8f:c3:69:c4:b3:15:f9:61:b1:51:b2:9a:1b:a8:11:04:
5b:0b:d1:4a:a8:ce:47:dc:67:34:9e:33:95:f7:65:d9:74:d7:
21:ae:c1:a4:b5:54:17:55:35:d0:e6:15:a1:98:50:7a:6a:88:
90:19:10:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqXeHwUEghJyGCS7GmA5GPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE1MDYxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MThmODcwMmI2NjQyM2YzNjFhYTkwYzkyYTVkMThiMzI2NDAwNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr575VLAV9Kj2kkDAfQisrlLQgjMx
fvcCHDFD8mq1lRD++WF2JZSLMGlUPSM7EIGXi5XdTIvogjsu/NkiXtctzswize3O
cMMLKuMgjBBiqRzDYhcgieiJ2dL3ZkZLiCkuLIOvuAnYV34NeGGddKq1yI305xn5
rzRc6vxrtdnNIXBE8fYD5nRW6BMQCO0whqPtHi8QwoyRevhQ5QSWRFx1cs8LgGkp
h0A25ds9Wa6SG4v96GPqjwYnBcCeD5Hl6l7thJT0hpnOWCxl7Rp4hUnRDOo5Ftp9
uin/XZKFe3AMSHySS/U1uZDh71i9yxlmTir1PHu/mI4UYDdcRZyq4VQlHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEGPhwK2ZCPzYaqQySpdGLMmQAQSMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvUVktSEFyWmtJX05ocXBESktsMFlzeVpBQkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIoEVSd1flwIp5b2YfSm
9noPbebEYzO/7B/HiIIGlYu2zAydkPhFwIUfw7Ks8yeFhKIRCJt8m3Dr4T0fIVuB
PRYIf6LSRqAGiMHrJgg/ga7qQTtHZLD2XDYBSptK2m9U8KSxvFvX/dEdbb5BlAju
j31SjB036rxn4dqwVb1n3QpkQqKDTljPU3mUVPjOWwSPq9KHI3V/EfJ/nBqB4vJZ
HhmkOzc6VZVzGpZXIZ4tQJ9+0/AnsT/2jF1XQJzvb0YXoCrdwEGKFWxCj8NpxLMV
+WGxUbKaG6gRBFsL0UqozkfcZzSeM5X3Zdl01yGuwaS1VBdVNdDmFaGYUHpqiJAZ
EAs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:42 2025 by rpki-client