Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6vUiy0KlrvEXkQtdTQWgHCV3H4.roa
File: M6vUiy0KlrvEXkQtdTQWgHCV3H4.roa (raw, json)
Hash identifier: nc9+eiIxSvhz4BoZuLOT3AiEMRb1MGCALZ3fk54cFKw=
Subject key identifier: 33:AB:D4:8B:2D:0A:96:BB:C4:5E:44:2D:75:34:16:80:70:95:DC:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB7678807EE8451F434957E379FEEAE4E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6vUiy0KlrvEXkQtdTQWgHCV3H4.roa
Signing time: Fri 10 Nov 2023 04:04:57 +0000
ROA not before: Fri 10 Nov 2023 04:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:b767:26f7/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:67:88:07:ee:84:51:f4:34:95:7e:37:9f:ee:ae:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 04:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33abd48b2d0a96bbc45e442d753416807095dc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:8c:05:73:12:96:71:59:fc:c6:94:0c:07:
6f:67:12:24:9f:22:63:ee:ea:6a:ad:71:19:87:93:
53:5c:09:b8:2c:ac:32:07:cf:fc:d3:eb:46:68:f6:
28:27:69:23:71:f1:3a:a7:13:01:b3:e2:bf:32:83:
7e:9b:1d:4a:d1:cc:a2:d6:3c:11:20:c1:24:36:71:
dd:a6:f0:23:21:a0:38:f9:93:7b:0a:bc:7a:17:67:
f8:a1:af:31:b1:e0:c0:ef:24:7b:b1:dc:65:77:15:
68:46:c4:5e:f2:f9:56:a7:bb:30:64:e5:f2:24:80:
cd:b2:f0:4d:a8:09:b0:4a:db:d4:54:8a:f3:5a:50:
eb:8e:d1:c9:fa:e3:49:76:b3:08:d6:13:d7:a5:84:
ad:8f:55:e8:56:f1:b0:cb:b7:e6:cc:00:39:aa:c0:
ee:dc:95:01:a3:1d:05:68:a7:53:e0:2b:9d:55:97:
05:2a:6c:e4:ea:e1:34:a1:1e:68:26:d1:a2:be:04:
be:cd:fd:82:e8:17:65:f2:c7:63:3e:6f:00:5d:55:
a5:b9:98:d0:b9:67:de:31:f2:74:30:dc:eb:d3:3c:
ad:e6:00:4d:41:95:37:87:c6:12:d9:42:13:6e:f4:
54:b2:ad:b1:8d:7e:77:a0:ca:92:b8:e7:b5:3e:13:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:D4:8B:2D:0A:96:BB:C4:5E:44:2D:75:34:16:80:70:95:DC:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6vUiy0KlrvEXkQtdTQWgHCV3H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:24:61:ee:8e:93:74:88:1b:25:0f:de:0d:3e:3d:32:05:b7:
b8:dd:50:14:c1:1f:ee:a2:a3:1a:8c:ac:0a:4b:24:f8:57:05:
ea:5d:e4:e5:c7:e5:22:00:6d:99:84:47:fc:59:18:24:e9:7e:
c4:47:4a:08:9e:a7:6a:93:86:18:68:13:91:db:e4:b1:26:20:
dd:7a:54:57:ad:22:38:8a:3e:14:04:58:40:1c:eb:ba:60:24:
c4:ac:45:4e:a0:5e:7d:6f:30:da:f0:64:0b:50:48:26:77:76:
87:2c:de:9f:e2:b3:8d:c4:28:2d:dd:29:e6:5d:97:60:87:59:
bb:e2:8c:8a:3b:02:4f:e4:fe:84:b5:9b:f9:69:ff:2b:90:b8:
4a:c8:2e:ea:f1:d7:43:fc:81:77:7f:2f:9a:18:6b:a8:69:6c:
71:76:f7:69:83:82:05:c6:89:8a:1a:be:4b:27:e1:ea:6f:1a:
0e:49:af:9e:d5:af:8f:84:dd:35:0f:3b:7f:8a:a9:1b:cf:f1:
a7:5c:1b:bf:b9:1e:ca:37:80:5a:ed:24:36:16:9b:f1:42:6a:
71:f9:94:ea:cd:b1:63:7e:87:53:ba:8a:70:62:b8:86:a5:4b:
f7:42:54:d5:dc:b6:01:8c:18:3e:35:b1:57:13:5a:c2:eb:46:
90:50:08:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu3Z4gH7oRR9DSVfjef7q5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDQwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FiZDQ4YjJkMGE5NmJiYzQ1ZTQ0MmQ3NTM0MTY4MDcwOTVkYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7SMBXMSlnFZ/MaUDAdvZxIknyJj
7upqrXEZh5NTXAm4LKwyB8/80+tGaPYoJ2kjcfE6pxMBs+K/MoN+mx1K0cyi1jwR
IMEkNnHdpvAjIaA4+ZN7Crx6F2f4oa8xseDA7yR7sdxldxVoRsRe8vlWp7swZOXy
JIDNsvBNqAmwStvUVIrzWlDrjtHJ+uNJdrMI1hPXpYStj1XoVvGwy7fmzAA5qsDu
3JUBox0FaKdT4CudVZcFKmzk6uE0oR5oJtGivgS+zf2C6Bdl8sdjPm8AXVWluZjQ
uWfeMfJ0MNzr0zyt5gBNQZU3h8YS2UITbvRUsq2xjX53oMqSuOe1PhNQ3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDOr1IstCpa7xF5ELXU0FoBwldx+MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTTZ2VWl5MEtscnZFWGtRdGRUUVdnSENWM0g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACUkYe6Ok3SIGyUP3g0+
PTIFt7jdUBTBH+6ioxqMrApLJPhXBepd5OXH5SIAbZmER/xZGCTpfsRHSgiep2qT
hhhoE5Hb5LEmIN16VFetIjiKPhQEWEAc67pgJMSsRU6gXn1vMNrwZAtQSCZ3docs
3p/is43EKC3dKeZdl2CHWbvijIo7Ak/k/oS1m/lp/yuQuErILurx10P8gXd/L5oY
a6hpbHF292mDggXGiYoavksn4epvGg5Jr57Vr4+E3TUPO3+KqRvP8adcG7+5Hso3
gFrtJDYWm/FCanH5lOrNsWN+h1O6inBiuIalS/dCVNXctgGMGD41sVcTWsLrRpBQ
CI4=
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:58:32 2025 by rpki-client