Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLqWKeNCoV2GDPqF7YCjzpXN53E.roa
File: vLqWKeNCoV2GDPqF7YCjzpXN53E.roa (raw, json)
Hash identifier: Ue1yB6iRSpGHXvnetKNfguuH4pTudJ1ZQdqwZmsCWa4=
Subject key identifier: BC:BA:96:29:E3:42:A1:5D:86:0C:FA:85:ED:80:A3:CE:95:CD:E7:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0B16531E162C8D60890E0E0D6912F919
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLqWKeNCoV2GDPqF7YCjzpXN53E.roa
Signing time: Sun 26 Nov 2023 10:04:21 +0000
ROA not before: Sun 26 Nov 2023 10:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:b16:3a18/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:16:53:1e:16:2c:8d:60:89:0e:0e:0d:69:12:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 10:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcba9629e342a15d860cfa85ed80a3ce95cde771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:f5:95:99:e3:4f:2a:cf:d4:2a:d5:d0:97:
da:c3:5d:86:b1:b6:7d:fc:c1:07:3c:dc:3c:ea:bf:
53:25:28:37:f3:00:02:ba:37:4a:d9:30:5d:83:25:
67:9e:5f:3a:0b:df:2b:8b:8b:3d:71:a1:2f:a3:35:
66:60:6d:5c:52:aa:d1:a3:4a:f9:ae:c2:ad:c5:92:
7e:e6:20:74:33:e0:44:e6:19:16:68:aa:6b:b9:f9:
bd:2b:68:75:43:f9:cb:81:87:13:09:b7:68:a7:33:
7c:68:b4:17:33:1a:4c:06:36:88:64:cf:06:b0:ce:
23:a6:d9:3e:98:2e:d7:10:40:8a:06:5a:f1:53:84:
8a:83:9f:94:05:f1:3f:63:ce:7e:4b:74:1c:d4:77:
1d:78:41:b5:f1:db:f8:13:c0:35:1d:c1:ef:4e:48:
99:52:47:5a:c6:af:e0:ec:07:6e:a7:25:cf:2b:c6:
c2:74:fe:83:5e:c1:44:c5:08:ec:9d:8f:10:48:9b:
dc:0f:70:c7:14:0a:08:f9:ee:eb:d2:00:f5:ec:9c:
2f:85:d2:8d:02:5f:79:c5:ce:13:ae:32:f1:c0:6b:
47:ec:78:b4:dd:1f:95:3d:54:cd:98:00:49:9f:f9:
6d:81:0f:e3:70:fd:5d:c0:f6:cc:4b:bd:07:84:63:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:96:29:E3:42:A1:5D:86:0C:FA:85:ED:80:A3:CE:95:CD:E7:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vLqWKeNCoV2GDPqF7YCjzpXN53E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:59:a2:35:1c:d1:3f:89:56:2e:f6:2d:79:11:02:ca:24:dc:
57:1a:94:49:cd:04:9b:57:37:2e:25:ef:d8:2f:1e:45:e9:19:
ac:02:a5:8b:eb:03:e6:aa:2c:2a:52:5f:d5:9b:5f:c1:9d:8d:
96:ef:b6:6f:99:ca:8d:af:94:f1:f6:4b:7b:5d:b9:f5:a9:5f:
f7:45:2d:3a:31:fc:43:cf:32:6a:98:b9:4f:56:f7:20:3e:fe:
da:58:e6:9a:4d:ab:24:37:9b:0e:85:03:de:20:00:2b:bc:32:
50:d3:a9:eb:70:7f:f6:e7:5d:bd:01:7d:7d:81:3c:20:ef:9d:
9e:37:a1:75:43:d5:e6:12:b4:68:ad:85:79:b0:aa:49:62:50:
cb:51:59:c0:ef:f6:58:7d:06:d0:39:19:4c:9a:9f:3e:03:63:
52:aa:1f:1a:4f:dd:dd:44:3e:5e:41:44:77:7d:aa:7c:56:6d:
0c:57:43:7f:e4:53:25:eb:ed:cb:34:c2:ff:d9:7d:ff:22:f6:
ba:53:da:8e:58:eb:0d:09:f3:61:05:a1:57:03:32:ba:9a:e3:
12:8e:89:93:14:3a:0b:8b:eb:86:23:ad:b7:c0:55:fa:9d:e2:
c3:6b:7e:5d:94:22:19:e4:d2:99:69:88:e9:ca:08:5f:1c:25:
8d:76:d3:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwLFlMeFiyNYIkODg1pEvkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI2MTAwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2JhOTYyOWUzNDJhMTVkODYwY2ZhODVlZDgwYTNjZTk1Y2RlNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTL1lZnjTyrP1CrV0Jfaw12GsbZ9
/MEHPNw86r9TJSg38wACujdK2TBdgyVnnl86C98ri4s9caEvozVmYG1cUqrRo0r5
rsKtxZJ+5iB0M+BE5hkWaKprufm9K2h1Q/nLgYcTCbdopzN8aLQXMxpMBjaIZM8G
sM4jptk+mC7XEECKBlrxU4SKg5+UBfE/Y85+S3Qc1HcdeEG18dv4E8A1HcHvTkiZ
Ukdaxq/g7AdupyXPK8bCdP6DXsFExQjsnY8QSJvcD3DHFAoI+e7r0gD17JwvhdKN
Al95xc4TrjLxwGtH7Hi03R+VPVTNmABJn/ltgQ/jcP1dwPbMS70HhGO0owIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLy6linjQqFdhgz6he2Ao86VzedxMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvdkxxV0tlTkNvVjJHRFBxRjdZQ2p6cFhONTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGJZojUc0T+JVi72LXkR
Asok3FcalEnNBJtXNy4l79gvHkXpGawCpYvrA+aqLCpSX9WbX8GdjZbvtm+Zyo2v
lPH2S3tdufWpX/dFLTox/EPPMmqYuU9W9yA+/tpY5ppNqyQ3mw6FA94gACu8MlDT
qetwf/bnXb0BfX2BPCDvnZ43oXVD1eYStGithXmwqkliUMtRWcDv9lh9BtA5GUya
nz4DY1KqHxpP3d1EPl5BRHd9qnxWbQxXQ3/kUyXr7cs0wv/Zff8i9rpT2o5Y6w0J
82EFoVcDMrqa4xKOiZMUOguL64YjrbfAVfqd4sNrfl2UIhnk0plpiOnKCF8cJY12
07Q=
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:02:37 2025 by rpki-client