Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dfgw8u0ONq6dDsx_mchVkiPh5JU.roa
File: dfgw8u0ONq6dDsx_mchVkiPh5JU.roa (raw, json)
Hash identifier: KRmtQV42s8b7krEK3IFYkk4woPU+Rd02gdznD05fYao=
Subject key identifier: 75:F8:30:F2:ED:0E:36:AE:9D:0E:CC:7F:99:C8:55:92:23:E1:E4:95
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5341042EC8932039816339FA8AC5200F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dfgw8u0ONq6dDsx_mchVkiPh5JU.roa
Signing time: Sat 02 Sep 2023 00:18:04 +0000
ROA not before: Sat 02 Sep 2023 00:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:53:41:04:2e:c8:93:20:39:81:63:39:fa:8a:c5:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 00:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75f830f2ed0e36ae9d0ecc7f99c8559223e1e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:11:3d:11:7d:c4:bc:33:8f:43:59:fb:b4:
43:9b:40:99:43:7e:55:c8:0b:3f:1b:18:f4:27:d3:
ac:03:a8:b1:58:af:8c:0a:45:eb:c7:52:2f:3b:42:
07:3a:d8:bd:64:4d:77:88:a1:21:72:15:42:b8:5a:
71:9c:c4:a5:8d:90:9c:1c:40:f7:ee:8d:09:38:92:
3b:a5:d8:90:42:3a:25:e5:ce:f4:23:46:dd:24:f1:
bc:c5:c0:33:f0:b5:11:f9:f1:dd:02:85:31:65:f3:
97:a7:1f:9d:4c:57:5f:47:31:37:b6:51:82:ed:8c:
1d:24:4a:7c:2f:a2:1d:22:4a:26:69:4a:63:a9:01:
96:c7:d1:ea:9d:67:e4:dc:d5:a9:bd:f0:22:b5:7a:
10:ce:ff:b9:47:45:80:3e:36:f0:a7:ae:11:aa:c1:
23:51:82:79:86:2f:12:32:00:c9:33:11:c2:7c:63:
64:2e:f5:4b:00:a1:16:5e:0e:30:a4:23:9a:c7:1c:
f8:3f:79:83:fc:fa:a4:5d:62:7d:04:6c:d2:2d:1e:
bf:0b:69:98:a7:12:4a:ac:f4:ba:c5:a0:c7:c3:c8:
df:e8:cc:28:df:09:4f:0f:75:d5:f0:b5:e8:4a:28:
de:c4:0f:9c:f9:4e:b3:04:e7:81:1c:ff:95:d1:97:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:30:F2:ED:0E:36:AE:9D:0E:CC:7F:99:C8:55:92:23:E1:E4:95
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dfgw8u0ONq6dDsx_mchVkiPh5JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:c1:66:bf:ae:77:78:98:d1:cb:b5:a1:a4:30:1b:d7:c4:c7:
79:49:ca:c3:c2:e7:ab:e3:0f:14:b8:7a:5c:3a:0c:c2:8d:53:
99:e9:8c:1f:3d:30:bf:21:1c:13:82:b5:ed:1a:92:6f:5a:54:
a7:bf:d4:e4:54:4a:df:bd:d4:6e:28:84:46:8d:e7:d5:21:27:
db:f5:32:b8:43:fd:01:07:a2:1b:54:bd:e7:7c:fa:47:d5:ff:
e9:0a:d7:18:34:cb:d0:db:ef:be:66:95:24:0d:dd:5c:48:4c:
d7:86:12:fb:e0:2b:23:b0:3b:d2:0f:ad:87:46:c6:a1:30:fd:
a5:2b:29:5b:84:57:e5:30:07:da:84:68:65:bb:67:75:9d:a8:
c4:42:cb:ad:f5:87:98:99:de:ac:58:de:6b:2c:0d:69:07:38:
11:e5:30:59:c8:d5:dc:d6:05:05:aa:76:8c:0b:0a:74:16:4f:
2b:7e:d1:6b:b3:25:98:c4:81:27:b0:79:01:1b:b4:37:d5:b1:
ca:fa:5b:11:a4:55:37:83:47:e5:22:f5:65:9b:9a:34:4f:7e:
68:2e:fa:78:e1:29:d5:97:b9:b5:36:d6:eb:6b:1e:eb:8c:d4:
ae:cd:06:d5:4a:a0:4b:85:6e:ab:b5:63:e3:8a:67:ce:36:f1:
e0:1d:fa:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpTQQQuyJMgOYFjOfqKxSAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAyMDAxODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWY4MzBmMmVkMGUzNmFlOWQwZWNjN2Y5OWM4NTU5MjIzZTFlNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaYRPRF9xLwzj0NZ+7RDm0CZQ35V
yAs/Gxj0J9OsA6ixWK+MCkXrx1IvO0IHOti9ZE13iKEhchVCuFpxnMSljZCcHED3
7o0JOJI7pdiQQjol5c70I0bdJPG8xcAz8LUR+fHdAoUxZfOXpx+dTFdfRzE3tlGC
7YwdJEp8L6IdIkomaUpjqQGWx9HqnWfk3NWpvfAitXoQzv+5R0WAPjbwp64RqsEj
UYJ5hi8SMgDJMxHCfGNkLvVLAKEWXg4wpCOaxxz4P3mD/PqkXWJ9BGzSLR6/C2mY
pxJKrPS6xaDHw8jf6Mwo3wlPD3XV8LXoSijexA+c+U6zBOeBHP+V0Zch8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHX4MPLtDjaunQ7Mf5nIVZIj4eSVMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvZGZndzh1ME9OcTZkRHN4X21jaFZraVBoNUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACjBZr+ud3iY0cu1oaQw
G9fEx3lJysPC56vjDxS4elw6DMKNU5npjB89ML8hHBOCte0akm9aVKe/1ORUSt+9
1G4ohEaN59UhJ9v1MrhD/QEHohtUved8+kfV/+kK1xg0y9Db775mlSQN3VxITNeG
EvvgKyOwO9IPrYdGxqEw/aUrKVuEV+UwB9qEaGW7Z3WdqMRCy631h5iZ3qxY3mss
DWkHOBHlMFnI1dzWBQWqdowLCnQWTyt+0WuzJZjEgSeweQEbtDfVscr6WxGkVTeD
R+Ui9WWbmjRPfmgu+njhKdWXubU21utrHuuM1K7NBtVKoEuFbqu1Y+OKZ8428eAd
+kc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client