Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TXQVFCeFCVpFb4wQRKQJ5RYHTeo.roa
File: TXQVFCeFCVpFb4wQRKQJ5RYHTeo.roa (raw, json)
Hash identifier: SmnX1hcWeY7Pm9p6vA+mqNn3O76hdd35qiHlDKkqKPo=
Subject key identifier: 4D:74:15:14:27:85:09:5A:45:6F:8C:10:44:A4:09:E5:16:07:4D:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADB093078F3B0F5FCAA01CB6F3F9D0507
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TXQVFCeFCVpFb4wQRKQJ5RYHTeo.roa
Signing time: Thu 28 Sep 2023 09:05:27 +0000
ROA not before: Thu 28 Sep 2023 09:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:db08:5f03/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:09:30:78:f3:b0:f5:fc:aa:01:cb:6f:3f:9d:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 09:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d7415142785095a456f8c1044a409e516074dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:ed:84:40:7e:f8:fc:e8:65:1b:a2:5e:f9:
8b:67:30:09:29:03:06:9b:93:95:4a:82:dc:c9:21:
9c:ec:c8:d5:07:4f:b4:e8:91:00:f7:a8:c3:7f:ff:
7d:09:35:17:27:c6:ad:86:ba:9b:f3:bf:b3:49:ce:
cd:26:1f:83:c8:ab:b1:76:4b:6b:5d:d3:44:a9:48:
25:b1:10:79:06:b7:4e:be:32:22:a3:1b:04:27:fc:
0b:18:f5:ea:ba:a6:53:f8:60:49:24:93:84:1d:87:
8f:34:c8:ad:a6:2d:35:12:e3:02:0f:42:49:40:ee:
a5:9e:44:c5:8a:47:dd:bd:50:49:6f:23:14:5e:25:
90:49:31:af:a0:66:35:23:9c:3e:26:13:cb:f3:17:
d6:d4:6b:7a:f5:68:9c:2b:f3:76:07:10:fa:96:58:
ab:e6:18:dd:38:55:d8:bb:24:3e:39:da:c2:bc:27:
bc:ba:02:7b:7c:6a:33:61:8f:26:da:47:c1:af:65:
3c:d8:40:cc:03:e5:49:79:df:d4:f7:a4:e0:e7:4f:
41:b0:96:ae:c7:cb:bb:b8:92:d2:8d:81:56:57:55:
2e:88:fb:d9:57:60:77:7f:02:16:dc:f5:d4:0e:f8:
69:69:bf:0f:c4:c5:09:34:66:50:98:db:08:e0:fb:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:15:14:27:85:09:5A:45:6F:8C:10:44:A4:09:E5:16:07:4D:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TXQVFCeFCVpFb4wQRKQJ5RYHTeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:2f:6c:a2:ab:1a:f4:74:bf:76:65:a0:7d:3e:c4:9a:64:bd:
35:df:38:6c:d5:df:83:f9:c8:0b:b5:85:21:4c:f4:2e:78:8c:
58:49:ea:25:fc:f9:48:f7:ca:35:15:bb:c6:f7:20:d4:6b:bc:
6d:0f:12:3a:1b:cb:9f:78:21:28:48:db:7d:ef:65:af:e9:0c:
14:ff:73:94:e2:dd:5f:ca:4a:da:8c:5b:af:8f:a7:4d:9a:23:
55:f8:9e:5e:9e:9c:f5:3a:12:06:91:14:ae:c5:1d:19:cb:ac:
f3:c1:15:3a:bc:9b:08:0c:00:19:4b:e7:ec:de:35:db:e9:57:
87:bd:6d:0e:86:bf:14:73:59:d0:2e:23:78:2d:fe:14:33:1d:
b0:df:d7:0b:89:06:25:ed:9e:70:f1:67:08:69:29:ad:b9:f3:
e0:87:92:9e:68:cd:33:6f:4e:9f:28:4c:c8:89:00:19:be:e8:
d9:25:b3:67:43:18:7d:ea:df:6e:0b:0a:26:a4:11:14:4b:c7:
c4:e4:5c:d1:57:3d:95:56:07:ec:b7:81:42:11:73:f5:fc:a4:
02:fe:13:41:5b:43:72:ed:49:d4:de:db:47:dc:0b:ec:e2:57:
8c:f2:47:79:33:8b:44:a8:46:ee:49:57:0b:78:9a:80:be:fe:
d2:7c:bf:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrbCTB487D1/KoBy28/nQUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI4MDkwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc0MTUxNDI3ODUwOTVhNDU2ZjhjMTA0NGE0MDllNTE2MDc0ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ALthEB++PzoZRuiXvmLZzAJKQMG
m5OVSoLcySGc7MjVB0+06JEA96jDf/99CTUXJ8athrqb87+zSc7NJh+DyKuxdktr
XdNEqUglsRB5BrdOvjIioxsEJ/wLGPXquqZT+GBJJJOEHYePNMitpi01EuMCD0JJ
QO6lnkTFikfdvVBJbyMUXiWQSTGvoGY1I5w+JhPL8xfW1Gt69WicK/N2BxD6llir
5hjdOFXYuyQ+OdrCvCe8ugJ7fGozYY8m2kfBr2U82EDMA+VJed/U96Tg509BsJau
x8u7uJLSjYFWV1UuiPvZV2B3fwIW3PXUDvhpab8PxMUJNGZQmNsI4PthnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE10FRQnhQlaRW+MEESkCeUWB03qMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVFhRVkZDZUZDVnBGYjR3UVJLUUo1UllIVGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAsvbKKrGvR0v3ZloH0+
xJpkvTXfOGzV34P5yAu1hSFM9C54jFhJ6iX8+Uj3yjUVu8b3INRrvG0PEjoby594
IShI233vZa/pDBT/c5Ti3V/KStqMW6+Pp02aI1X4nl6enPU6EgaRFK7FHRnLrPPB
FTq8mwgMABlL5+zeNdvpV4e9bQ6GvxRzWdAuI3gt/hQzHbDf1wuJBiXtnnDxZwhp
Ka258+CHkp5ozTNvTp8oTMiJABm+6Nkls2dDGH3q324LCiakERRLx8TkXNFXPZVW
B+y3gUIRc/X8pAL+E0FbQ3LtSdTe20fcC+ziV4zyR3kzi0SoRu5JVwt4moC+/tJ8
vxI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:32 2025 by rpki-client