Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GkasOFz9ZWDa1ENEODcihJNl5Kw.roa
File: GkasOFz9ZWDa1ENEODcihJNl5Kw.roa (raw, json)
Hash identifier: SLSOdddjlnq6yxBSGmH7mZVBgXCrWrE8Or5nnAaXjj8=
Subject key identifier: 1A:46:AC:38:5C:FD:65:60:DA:D4:43:44:38:37:22:84:93:65:E4:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB49FAA6C88CED502FA9E7BA35A9D207A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GkasOFz9ZWDa1ENEODcihJNl5Kw.roa
Signing time: Wed 20 Sep 2023 22:04:37 +0000
ROA not before: Wed 20 Sep 2023 22:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b49f:603f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b4:9f:aa:6c:88:ce:d5:02:fa:9e:7b:a3:5a:9d:20:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 22:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a46ac385cfd6560dad44344383722849365e4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:42:fc:b2:fa:9a:4f:1e:fe:a2:41:6d:79:
ae:6c:85:54:d0:73:6d:cf:0d:a9:3e:c7:70:e1:73:
dc:f6:dc:12:7a:99:11:0e:f2:2f:41:9a:dc:f3:03:
6e:f1:66:d0:46:f6:4c:e9:c7:61:53:7e:b3:05:b9:
4d:4f:d0:3f:f0:aa:b1:98:0d:19:1d:6d:69:fc:d3:
b7:51:31:2d:e6:c4:0e:f6:51:6d:3a:78:6b:21:6a:
26:8e:66:af:a2:4a:ff:8e:58:40:49:eb:97:e4:fc:
dd:bd:8a:83:38:8a:2b:a0:ce:61:0c:34:58:04:78:
41:20:83:14:5c:30:83:1e:ef:1e:cb:00:df:40:b7:
99:13:ff:f0:ec:55:68:92:35:44:e5:30:62:34:ad:
e1:9e:42:67:d0:6d:ed:23:e2:1d:4e:ce:72:f9:39:
73:51:a4:e5:63:98:f8:61:6c:c0:77:29:97:7c:c6:
f8:a4:40:6e:3c:a6:4b:74:08:64:c9:bd:38:c9:e4:
c6:b3:de:b3:a2:b4:74:5c:be:ec:3b:58:7d:96:91:
3f:77:3b:cd:cf:d2:80:e1:c0:aa:9a:8b:7d:a9:98:
45:d7:e0:fa:63:b3:fd:ab:3e:10:71:03:5e:59:db:
70:ac:af:23:22:13:08:31:af:53:41:85:39:a7:d9:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:46:AC:38:5C:FD:65:60:DA:D4:43:44:38:37:22:84:93:65:E4:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GkasOFz9ZWDa1ENEODcihJNl5Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:2a:bf:fb:b1:cc:9f:a8:43:08:8c:11:f0:11:00:f8:de:87:
31:f5:df:2c:72:35:6c:b0:7f:8e:e0:4f:35:93:44:e3:09:fa:
5e:87:fc:a3:44:1a:d6:12:e4:47:26:9a:a4:d6:0d:3c:9c:a1:
d6:e9:12:d3:7b:a6:95:99:21:11:03:2d:0f:75:45:83:0d:df:
11:9f:b9:50:61:61:c6:73:71:2a:1c:8a:da:35:2f:7e:2c:52:
90:bb:3e:ec:60:4b:c9:cc:7a:3b:b3:16:8e:41:ad:7c:a4:39:
7d:b3:41:a2:6a:59:35:8c:b0:f5:fb:c2:90:ab:b3:75:8b:f7:
37:dd:f3:8e:f0:c0:51:91:ef:23:5f:46:79:6d:e6:7d:95:fc:
04:3c:ae:99:fd:a6:3a:5d:ee:be:83:27:7a:6f:0b:5b:64:b8:
e5:a6:c4:96:91:42:86:05:a6:a7:59:d8:22:80:b5:c3:6e:ed:
7c:45:f0:fe:46:b1:33:32:73:30:64:81:60:a3:ca:c5:ff:4b:
76:1f:c4:03:a9:fa:10:37:18:3b:6c:3d:e1:d1:72:cb:ab:12:
8e:ee:99:04:eb:d9:9b:a8:c6:6d:d8:65:18:75:22:69:d3:42:
9c:67:e6:d4:e3:2d:62:a7:cc:8c:98:5b:5e:cc:19:70:00:30:
30:4d:88:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq0n6psiM7VAvqee6NanSB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIwMjIwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTQ2YWMzODVjZmQ2NTYwZGFkNDQzNDQzODM3MjI4NDkzNjVlNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdtC/LL6mk8e/qJBbXmubIVU0HNt
zw2pPsdw4XPc9twSepkRDvIvQZrc8wNu8WbQRvZM6cdhU36zBblNT9A/8KqxmA0Z
HW1p/NO3UTEt5sQO9lFtOnhrIWomjmavokr/jlhASeuX5PzdvYqDOIoroM5hDDRY
BHhBIIMUXDCDHu8eywDfQLeZE//w7FVokjVE5TBiNK3hnkJn0G3tI+IdTs5y+Tlz
UaTlY5j4YWzAdymXfMb4pEBuPKZLdAhkyb04yeTGs96zorR0XL7sO1h9lpE/dzvN
z9KA4cCqmot9qZhF1+D6Y7P9qz4QcQNeWdtwrK8jIhMIMa9TQYU5p9n0jwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBpGrDhc/WVg2tRDRDg3IoSTZeSsMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvR2thc09GejlaV0RhMUVORU9EY2loSk5sNUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFsqv/uxzJ+oQwiMEfAR
APjehzH13yxyNWywf47gTzWTROMJ+l6H/KNEGtYS5EcmmqTWDTycodbpEtN7ppWZ
IREDLQ91RYMN3xGfuVBhYcZzcSocito1L34sUpC7PuxgS8nMejuzFo5BrXykOX2z
QaJqWTWMsPX7wpCrs3WL9zfd847wwFGR7yNfRnlt5n2V/AQ8rpn9pjpd7r6DJ3pv
C1tkuOWmxJaRQoYFpqdZ2CKAtcNu7XxF8P5GsTMyczBkgWCjysX/S3YfxAOp+hA3
GDtsPeHRcsurEo7umQTr2Zuoxm3YZRh1ImnTQpxn5tTjLWKnzIyYW17MGXAAMDBN
iBw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:32:56 2025 by rpki-client