Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYekCs6cY7O3hleGzbmVaTuYOZk.roa
File: DYekCs6cY7O3hleGzbmVaTuYOZk.roa (raw, json)
Hash identifier: TE9vvBRsnJmzPhzFWQAbr/DIHfH+7qCkWJkjI0mCA4c=
Subject key identifier: 0D:87:A4:0A:CE:9C:63:B3:B7:86:57:86:CD:B9:95:69:3B:98:39:99
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADE77AE27FC1B7BA0BB5DDFE91D43F323
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYekCs6cY7O3hleGzbmVaTuYOZk.roa
Signing time: Fri 29 Sep 2023 01:04:59 +0000
ROA not before: Fri 29 Sep 2023 01:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:de77:1356/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:77:ae:27:fc:1b:7b:a0:bb:5d:df:e9:1d:43:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 01:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d87a40ace9c63b3b7865786cdb995693b983999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:7b:4e:34:c8:12:ae:2c:6d:98:48:e9:1e:
a4:d3:5e:c7:5a:91:65:c4:f2:ff:da:a9:2e:4f:e7:
3f:ad:26:3c:de:af:49:1e:40:81:d8:84:73:98:09:
06:1c:ad:7c:fe:89:b7:85:42:57:ff:27:5f:91:76:
25:6c:6d:75:b2:fc:f7:87:54:c7:69:c3:68:fd:3a:
1b:8f:4d:5b:e0:c3:0d:81:83:cc:12:76:bf:80:ca:
fa:b8:17:b4:81:df:d4:91:19:91:88:8f:18:ad:44:
d9:c6:55:36:40:69:36:b3:6c:15:59:fe:24:70:29:
dd:60:c5:49:57:ab:f2:e0:aa:b7:c5:07:23:36:29:
61:db:7c:61:c1:e4:c0:ba:08:de:f4:be:ab:5a:6f:
0a:45:29:1d:41:57:25:35:08:c4:0a:f5:3a:eb:62:
9e:a6:62:54:02:79:94:62:15:6c:69:94:9b:a2:7c:
53:a1:b4:69:cc:3b:23:b6:51:89:c0:1d:6d:ab:16:
95:72:e8:2a:be:e7:05:86:dc:9d:ad:87:80:9f:16:
e9:7b:24:c2:8e:1a:37:b4:2e:c7:2c:3f:6a:f5:87:
ac:23:62:58:9e:ce:37:6c:ee:b9:63:8b:95:66:43:
17:3f:26:6c:22:94:f1:40:22:5c:8a:5a:42:fc:7e:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:A4:0A:CE:9C:63:B3:B7:86:57:86:CD:B9:95:69:3B:98:39:99
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DYekCs6cY7O3hleGzbmVaTuYOZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:2c:ea:8e:a6:b7:0d:aa:2a:da:58:9e:42:a9:a7:45:10:3f:
53:c4:58:c3:b4:b6:e8:6f:8a:a9:1d:cd:d2:e7:d4:0d:4f:d7:
1b:0b:45:90:2e:e0:80:c2:20:e7:5f:e3:80:8c:31:a5:1d:c5:
69:91:1b:12:8d:86:6f:a5:3c:08:b0:2e:7c:b7:26:26:5c:98:
2f:79:77:13:98:8b:5f:a9:02:a0:e1:cf:10:c5:08:98:55:7f:
0d:1a:37:b6:89:e8:ee:3f:da:7e:55:f5:36:2e:da:ee:3f:07:
5a:55:c2:1f:40:2a:8e:5a:71:51:51:1d:be:85:ef:56:ea:02:
b1:04:83:75:f0:cb:40:56:3c:97:8c:05:11:a8:95:a6:70:ba:
4c:49:ae:11:cf:5a:4a:e8:58:71:95:7f:87:3d:3d:30:4c:b8:
30:f5:ea:1b:db:df:3f:5e:0d:0f:7f:1d:4a:e5:28:a8:1f:b2:
da:0b:39:fa:da:dd:7f:03:5b:9a:87:a0:95:b9:1a:82:54:a8:
46:22:62:c1:8b:94:3e:b9:cd:f3:60:d3:6f:e2:a9:c8:da:2b:
a3:1d:0f:5d:b1:c9:88:14:c0:41:61:3a:de:37:14:6f:65:f6:
1a:cc:4a:a9:a4:f8:45:0e:33:5a:58:92:d4:fa:b8:65:d7:0a:
c6:72:1b:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYred64n/Bt7oLtd3+kdQ/MjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI5MDEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDg3YTQwYWNlOWM2M2IzYjc4NjU3ODZjZGI5OTU2OTNiOTgzOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlF7TjTIEq4sbZhI6R6k017HWpFl
xPL/2qkuT+c/rSY83q9JHkCB2IRzmAkGHK18/om3hUJX/ydfkXYlbG11svz3h1TH
acNo/Tobj01b4MMNgYPMEna/gMr6uBe0gd/UkRmRiI8YrUTZxlU2QGk2s2wVWf4k
cCndYMVJV6vy4Kq3xQcjNilh23xhweTAugje9L6rWm8KRSkdQVclNQjECvU662Ke
pmJUAnmUYhVsaZSbonxTobRpzDsjtlGJwB1tqxaVcugqvucFhtydrYeAnxbpeyTC
jho3tC7HLD9q9YesI2JYns43bO65Y4uVZkMXPyZsIpTxQCJcilpC/H7JMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA2HpArOnGOzt4ZXhs25lWk7mDmZMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRFlla0NzNmNZN08zaGxlR3pibVZhVHVZT1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGks6o6mtw2qKtpYnkKp
p0UQP1PEWMO0tuhviqkdzdLn1A1P1xsLRZAu4IDCIOdf44CMMaUdxWmRGxKNhm+l
PAiwLny3JiZcmC95dxOYi1+pAqDhzxDFCJhVfw0aN7aJ6O4/2n5V9TYu2u4/B1pV
wh9AKo5acVFRHb6F71bqArEEg3Xwy0BWPJeMBRGolaZwukxJrhHPWkroWHGVf4c9
PTBMuDD16hvb3z9eDQ9/HUrlKKgfstoLOfra3X8DW5qHoJW5GoJUqEYiYsGLlD65
zfNg02/iqcjaK6MdD12xyYgUwEFhOt43FG9l9hrMSqmk+EUOM1pYktT6uGXXCsZy
G2Y=
-----END CERTIFICATE-----
Generated at Thu Jun 19 23:13:52 2025 by rpki-client