Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2h717NBrZhg-i8uI8Gl6G43es2c.roa
File: 2h717NBrZhg-i8uI8Gl6G43es2c.roa (raw, json)
Hash identifier: Wj3U8lUdCqYGvU00ebHOkHnlaGeCGZ2Vt/+PlDppZ6A=
Subject key identifier: DA:1E:F5:EC:D0:6B:66:18:3E:8B:CB:88:F0:69:7A:1B:8D:DE:B3:67
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0F97E37A7630E53384DE6E987364E691
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2h717NBrZhg-i8uI8Gl6G43es2c.roa
Signing time: Mon 27 Nov 2023 07:04:21 +0000
ROA not before: Mon 27 Nov 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:f97:be99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:97:e3:7a:76:30:e5:33:84:de:6e:98:73:64:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da1ef5ecd06b66183e8bcb88f0697a1b8ddeb367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:7b:a8:27:61:36:6c:d9:ac:a9:e2:b3:3e:
37:f3:3b:6c:52:5f:78:eb:75:b5:7f:d7:88:3c:4a:
27:d6:dd:f7:29:ea:25:74:56:cb:c7:58:23:e8:24:
b4:49:18:0b:a2:bf:f0:b2:a9:f7:c2:d2:61:bb:44:
14:0a:d9:fb:61:d2:59:d4:85:ee:05:4c:c4:52:2e:
53:70:2a:a4:7b:cc:8e:8f:49:bb:41:ea:22:5a:a3:
ae:da:f4:0a:c9:ac:9a:52:20:41:ea:5e:ba:71:5b:
9e:59:97:3c:ee:4d:f2:fb:df:1f:4a:ad:6c:31:07:
fc:ae:22:4e:93:f4:48:de:d1:08:06:77:64:f1:e3:
d3:5b:74:5f:47:68:6c:54:38:7d:d0:74:51:72:96:
8d:62:1b:97:80:86:64:e5:85:2c:0b:4a:a2:b3:d4:
8e:09:6c:c7:19:54:42:6b:b0:f0:94:1d:db:e5:c7:
67:20:d1:dd:dc:fe:66:13:cb:a9:4a:23:f6:82:5a:
7a:9f:7c:03:21:12:e6:57:34:44:25:ca:b5:fb:ac:
cb:5b:2c:e2:9a:6e:84:34:a0:29:0f:c5:db:e1:53:
a2:bd:d3:5f:34:84:63:54:93:62:a3:53:26:24:c4:
66:4a:65:40:74:52:a6:b3:66:25:a1:a8:a5:67:2f:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:F5:EC:D0:6B:66:18:3E:8B:CB:88:F0:69:7A:1B:8D:DE:B3:67
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2h717NBrZhg-i8uI8Gl6G43es2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:a8:4a:2e:67:6c:a2:7d:47:3c:46:d7:54:7a:30:a2:1f:46:
bb:3f:46:d9:21:fd:3e:95:78:7e:4b:28:82:66:97:e9:4b:18:
6d:a0:8c:af:62:4a:fe:88:cd:b6:13:63:a9:18:33:50:1a:76:
8e:cf:79:48:29:12:94:b7:cf:c0:f1:4f:22:5a:cf:2d:5f:be:
5a:76:66:f0:06:c5:6c:b4:9b:e7:e9:71:8c:e7:2d:da:d9:8b:
25:5f:c3:8e:a6:d8:cb:66:4b:19:04:8f:73:e8:db:ca:03:ae:
16:a9:8a:5f:b2:9e:e2:d0:46:65:66:c4:01:8a:58:77:62:75:
25:87:7a:e1:26:25:cb:f3:3d:e3:b5:ca:24:30:e9:92:2b:7a:
c1:20:d2:72:98:8d:f4:e1:4b:33:aa:10:4a:6f:d9:cd:df:83:
e5:03:7a:d1:bc:16:57:16:1b:44:47:2f:fc:5c:a7:7a:8d:89:
8e:5f:fe:39:54:50:00:25:99:47:2b:3b:99:2d:6d:27:03:ec:
79:4e:a9:a8:9a:b9:a6:01:2e:71:ef:9a:e5:d0:3d:5d:97:c1:
fc:d6:46:a9:79:6a:20:d9:c6:42:ae:0e:a9:9f:02:50:10:a3:
6b:b5:0c:a7:c7:47:77:bc:cf:86:cc:13:5d:6c:3e:ec:62:36:
e7:bd:03:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwPl+N6djDlM4TebphzZOaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI3MDcwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTFlZjVlY2QwNmI2NjE4M2U4YmNiODhmMDY5N2ExYjhkZGViMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr557qCdhNmzZrKnisz438ztsUl94
63W1f9eIPEon1t33KeoldFbLx1gj6CS0SRgLor/wsqn3wtJhu0QUCtn7YdJZ1IXu
BUzEUi5TcCqke8yOj0m7QeoiWqOu2vQKyayaUiBB6l66cVueWZc87k3y+98fSq1s
MQf8riJOk/RI3tEIBndk8ePTW3RfR2hsVDh90HRRcpaNYhuXgIZk5YUsC0qis9SO
CWzHGVRCa7DwlB3b5cdnINHd3P5mE8upSiP2glp6n3wDIRLmVzREJcq1+6zLWyzi
mm6ENKApD8Xb4VOivdNfNIRjVJNio1MmJMRmSmVAdFKms2YloailZy+1YQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNoe9ezQa2YYPovLiPBpehuN3rNnMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvMmg3MTdOQnJaaGctaTh1SThHbDZHNDNlczJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACSoSi5nbKJ9RzxG11R6
MKIfRrs/Rtkh/T6VeH5LKIJml+lLGG2gjK9iSv6IzbYTY6kYM1Aado7PeUgpEpS3
z8DxTyJazy1fvlp2ZvAGxWy0m+fpcYznLdrZiyVfw46m2MtmSxkEj3Po28oDrhap
il+ynuLQRmVmxAGKWHdidSWHeuEmJcvzPeO1yiQw6ZIresEg0nKYjfThSzOqEEpv
2c3fg+UDetG8FlcWG0RHL/xcp3qNiY5f/jlUUAAlmUcrO5ktbScD7HlOqaiauaYB
LnHvmuXQPV2XwfzWRql5aiDZxkKuDqmfAlAQo2u1DKfHR3e8z4bME11sPuxiNue9
AwE=
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:02:57 2025 by rpki-client