Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okezBFE9__JJDVr5J8THUW4balo.roa
File: okezBFE9__JJDVr5J8THUW4balo.roa (raw, json)
Hash identifier: PB4mXFTx5HKLQsuz+Rxyqm+ZF4yquhgSVFA8M13YYg4=
Subject key identifier: A2:47:B3:04:51:3D:FF:F2:49:0D:5A:F9:27:C4:C7:51:6E:1B:6A:5A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCCE05C144842B93A4E84A7582E1D3A33
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okezBFE9__JJDVr5J8THUW4balo.roa
Signing time: Tue 14 Nov 2023 08:08:57 +0000
ROA not before: Tue 14 Nov 2023 08:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ccdf:c03c/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:e0:5c:14:48:42:b9:3a:4e:84:a7:58:2e:1d:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 08:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a247b304513dfff2490d5af927c4c7516e1b6a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:01:cd:49:81:0d:61:9b:8b:37:41:1d:e3:
60:ab:e6:15:41:9c:1c:d0:ce:fe:49:28:b2:da:b0:
c2:2c:64:8d:eb:fc:f0:62:f1:72:58:3c:2c:da:89:
cc:c0:16:c8:9c:5a:f5:fb:ff:e3:e7:c6:3d:02:fb:
12:2b:ec:f8:63:d5:31:8f:44:96:27:f6:41:69:d0:
ca:b2:ac:2b:9f:5e:c6:23:93:47:aa:1f:15:ed:97:
5d:f0:e0:28:c7:27:f4:6d:84:9f:3a:cc:f1:fd:61:
11:e8:94:d8:4c:26:3c:e3:9c:09:2f:65:bf:55:d8:
6e:9c:b0:95:1f:34:d3:c0:7b:e7:4c:fb:f5:cb:91:
21:8a:b5:39:83:33:bd:8b:bf:9c:50:a1:93:6b:d6:
37:8f:c8:0c:ad:3c:66:7d:3f:75:75:db:c0:83:5d:
9f:44:f7:c8:b6:d3:e1:c2:49:6e:46:e4:c2:d7:14:
41:a3:9e:5c:61:d0:57:b1:ac:13:c6:33:56:b6:9e:
a0:ac:97:51:6a:3a:43:04:ef:70:37:c6:b0:c8:28:
5a:41:cc:63:07:01:45:e1:bc:9f:57:96:8d:14:a1:
1f:e3:70:28:61:9b:f6:d4:6e:10:64:20:e5:17:f0:
de:94:33:b5:76:d2:82:4b:55:98:f4:b0:da:03:df:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:B3:04:51:3D:FF:F2:49:0D:5A:F9:27:C4:C7:51:6E:1B:6A:5A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okezBFE9__JJDVr5J8THUW4balo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:41:8e:1a:b7:79:84:d2:41:7a:c5:3b:3b:e1:92:a2:4c:fc:
da:66:3a:6c:40:c9:0b:95:b6:b1:9c:cf:2a:3e:08:df:11:c1:
d4:b0:a3:b3:59:8a:e0:1f:60:69:0d:08:1b:1e:67:b3:f3:35:
09:52:19:cc:25:58:10:b5:a1:01:fb:c5:bc:41:ff:48:e4:2d:
c9:9a:2d:d9:2f:64:cd:91:ea:5c:cc:f5:c0:83:86:ea:9a:e9:
1d:65:dd:50:6e:4e:12:a8:70:c8:6a:47:88:27:93:ea:74:06:
8c:d3:eb:48:92:e0:4a:0b:f7:96:c1:8b:10:54:19:47:47:f1:
dc:bf:80:b6:ec:fb:a8:13:5b:00:af:2d:16:83:27:b4:50:d3:
75:28:33:54:1a:72:de:2a:1e:6b:83:fc:3e:a7:e0:89:50:3d:
71:8a:a8:ec:5e:cc:01:c9:86:a1:08:06:39:bf:73:84:a3:51:
a8:c8:fc:d4:5a:ad:07:0c:b1:d4:e3:a3:12:a4:57:e6:c3:d5:
46:5d:a9:95:92:61:95:f0:4a:63:87:78:79:d1:45:ac:a0:94:
35:82:cf:06:37:d7:8f:ad:a7:c8:b2:76:1b:30:e0:a8:b6:f6:
bc:6f:85:d6:6b:79:7f:15:a7:4b:31:69:20:fc:94:95:16:60:
33:ce:30:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvM4FwUSEK5Ok6Ep1guHTozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MDgwODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjQ3YjMwNDUxM2RmZmYyNDkwZDVhZjkyN2M0Yzc1MTZlMWI2YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi4BzUmBDWGbizdBHeNgq+YVQZwc
0M7+SSiy2rDCLGSN6/zwYvFyWDws2onMwBbInFr1+//j58Y9AvsSK+z4Y9Uxj0SW
J/ZBadDKsqwrn17GI5NHqh8V7Zdd8OAoxyf0bYSfOszx/WER6JTYTCY845wJL2W/
VdhunLCVHzTTwHvnTPv1y5EhirU5gzO9i7+cUKGTa9Y3j8gMrTxmfT91ddvAg12f
RPfIttPhwkluRuTC1xRBo55cYdBXsawTxjNWtp6grJdRajpDBO9wN8awyChaQcxj
BwFF4byfV5aNFKEf43AoYZv21G4QZCDlF/DelDO1dtKCS1WY9LDaA9/mAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKJHswRRPf/ySQ1a+SfEx1FuG2paMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvb2tlekJGRTlfX0pKRFZyNUo4VEhVVzRiYWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGRBjhq3eYTSQXrFOzvh
kqJM/NpmOmxAyQuVtrGczyo+CN8RwdSwo7NZiuAfYGkNCBseZ7PzNQlSGcwlWBC1
oQH7xbxB/0jkLcmaLdkvZM2R6lzM9cCDhuqa6R1l3VBuThKocMhqR4gnk+p0BozT
60iS4EoL95bBixBUGUdH8dy/gLbs+6gTWwCvLRaDJ7RQ03UoM1Qact4qHmuD/D6n
4IlQPXGKqOxezAHJhqEIBjm/c4SjUajI/NRarQcMsdTjoxKkV+bD1UZdqZWSYZXw
SmOHeHnRRayglDWCzwY314+tp8iydhsw4Ki29rxvhdZreX8Vp0sxaSD8lJUWYDPO
MC4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:57:31 2025 by rpki-client