Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3aJ1f6N-0ny5XDiQ6GPOxP_YvA.roa
File: 1-3aJ1f6N-0ny5XDiQ6GPOxP_YvA.roa (raw, json)
Hash identifier: iqDOW5J0wCxwneNOFnHcJprI+OHbEokNSvQa5NGC0xg=
Subject key identifier: FB:76:89:D5:FE:8D:FB:49:F2:E5:70:E2:43:A1:8F:3B:13:FF:62:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C45AB18AB7906ABDD3CEA378C86F94D7C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3aJ1f6N-0ny5XDiQ6GPOxP_YvA.roa
Signing time: Thu 07 Dec 2023 19:04:50 +0000
ROA not before: Thu 07 Dec 2023 19:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:45aa:9589/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:ab:18:ab:79:06:ab:dd:3c:ea:37:8c:86:f9:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 19:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb7689d5fe8dfb49f2e570e243a18f3b13ff62f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:32:92:79:7c:e4:d9:09:41:2e:c4:a4:6e:
aa:73:e7:aa:9e:f0:c0:fa:20:a1:82:20:27:58:29:
91:78:78:6b:31:53:9b:77:92:f8:d0:6f:15:72:e6:
c2:9a:a7:eb:fa:c2:8c:7a:aa:20:a5:2e:a9:93:b3:
ea:fe:7d:20:f5:c1:b5:22:79:10:aa:6b:71:44:bf:
c0:20:d2:f1:e5:69:56:22:5a:c9:f8:f6:44:44:6b:
19:05:6c:80:a1:ff:3e:aa:ff:c5:39:8f:b0:31:9c:
d6:5f:a5:06:8a:06:7a:65:04:f7:ea:05:1a:3a:87:
de:af:05:cb:78:8e:2a:58:80:a2:a8:95:74:2c:65:
5f:6b:27:94:93:c5:72:96:af:9d:1d:9e:39:3c:0a:
f8:d5:0f:d9:ac:44:e3:61:2b:8f:7f:ab:2b:bf:b6:
f6:55:ee:41:de:98:77:a3:e7:33:43:18:52:dc:8f:
b7:43:86:ee:cb:76:69:3b:4e:08:ef:bd:d8:db:7b:
5c:2e:88:cd:f0:81:3d:78:1d:d4:f2:d8:9a:e4:8e:
6b:90:c2:28:ad:21:c6:76:b7:52:b7:7d:12:44:72:
01:ce:0c:86:8a:10:79:9d:09:47:f0:ce:99:07:b8:
81:b0:45:eb:85:d7:c4:8c:86:5f:fa:b3:aa:0f:22:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:89:D5:FE:8D:FB:49:F2:E5:70:E2:43:A1:8F:3B:13:FF:62:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3aJ1f6N-0ny5XDiQ6GPOxP_YvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:d2:c1:66:48:a2:67:4b:44:b4:ed:95:b6:9b:c6:30:bf:70:
a7:b5:cc:4d:4b:6d:73:1e:b9:d3:37:74:91:3d:1a:b2:56:53:
20:9a:7f:80:c1:b1:50:56:3d:7c:3a:1f:c4:40:6f:52:94:65:
44:18:4f:1e:dc:ca:29:58:31:d2:8a:6d:53:4a:60:27:66:f1:
b8:d8:1d:e2:ce:fa:05:b7:18:b2:e2:48:82:52:a0:f2:3f:dd:
4a:ea:d0:ad:49:d5:24:65:c9:bc:c7:91:e5:44:3e:51:d3:ce:
f1:8c:f7:d5:3a:91:ba:cd:27:68:09:10:35:72:1c:0e:eb:bd:
a5:4e:75:a0:69:81:3c:07:0b:79:f8:f1:e8:3c:4b:d3:80:a0:
e4:6c:be:3a:6c:e7:88:38:11:a3:42:4b:5f:1e:2d:90:07:50:
16:cb:cc:4e:69:21:a3:cb:55:5b:02:f2:3c:ad:35:d4:69:b5:
1e:81:9c:a2:a7:0d:1d:f9:c2:ea:1b:5b:25:0d:7c:7c:c4:c1:
a8:c0:9b:9a:cf:73:09:52:7d:c5:0d:f0:7e:13:d6:62:d3:1e:
b1:fa:9f:26:33:73:4a:cf:a0:0c:39:69:46:2c:81:2b:ba:d6:
94:12:ae:28:d9:08:e2:d8:d8:dd:0c:c6:c8:42:ac:4e:cb:17:
82:99:81:5f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxFqxireQar3TzqN4yG+U18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA3MTkwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjc2ODlkNWZlOGRmYjQ5ZjJlNTcwZTI0M2ExOGYzYjEzZmY2MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rkyknl85NkJQS7EpG6qc+eqnvDA
+iChgiAnWCmReHhrMVObd5L40G8VcubCmqfr+sKMeqogpS6pk7Pq/n0g9cG1InkQ
qmtxRL/AINLx5WlWIlrJ+PZERGsZBWyAof8+qv/FOY+wMZzWX6UGigZ6ZQT36gUa
OoferwXLeI4qWICiqJV0LGVfayeUk8Vylq+dHZ45PAr41Q/ZrETjYSuPf6srv7b2
Ve5B3ph3o+czQxhS3I+3Q4buy3ZpO04I773Y23tcLojN8IE9eB3U8tia5I5rkMIo
rSHGdrdSt30SRHIBzgyGihB5nQlH8M6ZB7iBsEXrhdfEjIZf+rOqDyLCsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPt2idX+jftJ8uVw4kOhjzsT/2LwMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMS0zYUoxZjZOLTBueTVYRGlRNkdQT3hQX1l2QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvZjYwMTc4LTk5MWEtNDI2MS05NmEwLWRkNWMzMDBiZTU0
ZS8xL1F3T2FhQk1QR1dNZUZTZVViaDRTZmJIby1kay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCD0sFmSKJnS0S07ZW2
m8Ywv3CntcxNS21zHrnTN3SRPRqyVlMgmn+AwbFQVj18Oh/EQG9SlGVEGE8e3Mop
WDHSim1TSmAnZvG42B3izvoFtxiy4kiCUqDyP91K6tCtSdUkZcm8x5HlRD5R087x
jPfVOpG6zSdoCRA1chwO672lTnWgaYE8Bwt5+PHoPEvTgKDkbL46bOeIOBGjQktf
Hi2QB1AWy8xOaSGjy1VbAvI8rTXUabUegZyipw0d+cLqG1slDXx8xMGowJuaz3MJ
Un3FDfB+E9Zi0x6x+p8mM3NKz6AMOWlGLIErutaUEq4o2Qji2NjdDMbIQqxOyxeC
mYFf
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:56:46 2025 by rpki-client