Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lqWkfb4czf27JDoyTe5uDza7AFk.roa
File: lqWkfb4czf27JDoyTe5uDza7AFk.roa (raw, json)
Hash identifier: 88kPye2CS0u3RubDK1bNpm9/B9nsXH3Ns9RNF/STjIQ=
Subject key identifier: 96:A5:A4:7D:BE:1C:CD:FD:BB:24:3A:32:4D:EE:6E:0F:36:BB:00:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C28B3CE88F4BD20CE5100A36D5A1F089C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lqWkfb4czf27JDoyTe5uDza7AFk.roa
Signing time: Sat 02 Dec 2023 04:05:21 +0000
ROA not before: Sat 02 Dec 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:28b3:16f2/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:b3:ce:88:f4:bd:20:ce:51:00:a3:6d:5a:1f:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96a5a47dbe1ccdfdbb243a324dee6e0f36bb0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:c9:2e:a9:30:19:e1:c6:73:7d:af:af:95:
ae:36:df:c4:d7:d3:fd:f5:4d:08:0c:52:50:41:d3:
05:93:ed:90:74:17:11:88:a3:16:06:39:ed:15:a6:
f9:d7:5a:a2:5c:d8:38:1a:4d:8f:32:d5:7d:fd:f5:
2b:88:78:7e:92:6c:c2:23:c8:50:48:a2:83:8c:6e:
95:d9:41:5d:4f:28:d3:d7:01:2d:ed:cc:d5:f6:10:
19:bd:a9:b5:ac:b5:06:55:13:82:3b:e7:0a:bd:b6:
a7:9f:ad:a4:c5:5c:7f:72:c8:c3:c3:83:3c:f5:27:
85:fe:e2:4e:e6:1f:fd:ff:cc:0a:e0:2c:49:59:50:
f5:63:25:b0:b4:90:95:90:9c:ae:ea:6e:f5:9d:bf:
89:df:1e:35:b7:76:1f:f5:7f:89:ee:3d:86:a6:6d:
a3:0b:51:be:a6:ac:cb:19:25:74:8f:6c:38:8a:28:
0e:1d:71:82:e2:c5:95:8e:d5:20:b8:ee:c6:b4:33:
50:21:d3:62:79:c0:d8:73:46:d6:4a:e1:f8:74:68:
09:3d:7a:02:0e:79:49:5e:7d:b8:11:4e:be:f6:e8:
08:20:83:e3:15:fa:4e:66:d3:34:af:68:0f:f4:2d:
51:d9:79:06:75:e5:ee:7a:db:8a:1c:c2:a9:29:b5:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:A4:7D:BE:1C:CD:FD:BB:24:3A:32:4D:EE:6E:0F:36:BB:00:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lqWkfb4czf27JDoyTe5uDza7AFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:64:7a:03:c9:67:3b:f3:aa:e5:40:e2:f1:4b:95:da:2e:f3:
d9:f1:98:09:7b:50:e6:8e:fc:37:f4:8d:12:e5:eb:62:55:55:
1b:de:cf:92:81:d5:c2:8d:f0:38:82:11:2c:85:9e:94:54:6f:
56:cd:b0:42:8b:5b:f6:dd:b8:92:0f:f8:fd:73:df:c6:f3:fc:
57:08:2c:64:d4:b8:56:02:16:3a:ce:57:dd:96:c7:9a:ed:80:
3f:9a:91:2f:3c:f3:c3:54:03:fe:24:27:e6:43:2e:ed:8e:5e:
9e:72:dd:b8:82:82:26:6b:de:a9:2d:d3:66:5c:f4:7c:55:77:
29:60:f9:57:b4:5c:0a:a1:3b:06:78:73:9a:84:50:5c:79:a3:
34:d9:40:5a:d4:09:cf:16:7a:64:a8:33:51:e8:83:2a:27:88:
cb:20:21:19:eb:fc:2f:49:50:f3:e6:b6:e4:45:73:fe:aa:6f:
ef:e8:5f:8a:3c:c3:dd:ea:c8:be:d8:40:40:93:2b:d1:cf:40:
f0:22:eb:17:d7:94:59:b9:dd:3e:16:b6:09:83:6e:56:1a:70:
01:ca:1a:f2:15:64:d6:e0:ce:f9:37:19:f1:a4:8b:72:52:8e:
67:98:4f:dc:56:67:23:1f:c1:aa:3a:f1:59:be:1d:fa:58:1a:
37:04:c8:af
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwos86I9L0gzlEAo21aHwicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAyMDQwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmE1YTQ3ZGJlMWNjZGZkYmIyNDNhMzI0ZGVlNmUwZjM2YmIwMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmXJLqkwGeHGc32vr5WuNt/E19P9
9U0IDFJQQdMFk+2QdBcRiKMWBjntFab511qiXNg4Gk2PMtV9/fUriHh+kmzCI8hQ
SKKDjG6V2UFdTyjT1wEt7czV9hAZvam1rLUGVROCO+cKvbann62kxVx/csjDw4M8
9SeF/uJO5h/9/8wK4CxJWVD1YyWwtJCVkJyu6m71nb+J3x41t3Yf9X+J7j2Gpm2j
C1G+pqzLGSV0j2w4iigOHXGC4sWVjtUguO7GtDNQIdNiecDYc0bWSuH4dGgJPXoC
DnlJXn24EU6+9ugIIIPjFfpOZtM0r2gP9C1R2XkGdeXuetuKHMKpKbVjjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJalpH2+HM39uyQ6Mk3ubg82uwBZMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvbHFXa2ZiNGN6ZjI3SkRveVRlNXVEemE3QUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZkegPJZzvzquVA4vFL
ldou89nxmAl7UOaO/Df0jRLl62JVVRvez5KB1cKN8DiCESyFnpRUb1bNsEKLW/bd
uJIP+P1z38bz/FcILGTUuFYCFjrOV92Wx5rtgD+akS8888NUA/4kJ+ZDLu2OXp5y
3biCgiZr3qkt02Zc9HxVdylg+Ve0XAqhOwZ4c5qEUFx5ozTZQFrUCc8WemSoM1Ho
gyoniMsgIRnr/C9JUPPmtuRFc/6qb+/oX4o8w93qyL7YQECTK9HPQPAi6xfXlFm5
3T4WtgmDblYacAHKGvIVZNbgzvk3GfGki3JSjmeYT9xWZyMfwao68Vm+HfpYGjcE
yK8=
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:26 2025 by rpki-client