Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1QfOOXyk0etzfkWCRNpvslfMW-s.roa
File: 1QfOOXyk0etzfkWCRNpvslfMW-s.roa (raw, json)
Hash identifier: 8xHPpzMLmGTyNWCd2onuCZtSSeXd0NGly3zfbdJPJNQ=
Subject key identifier: D5:07:CE:39:7C:A4:D1:EB:73:7E:45:82:44:DA:6F:B2:57:CC:5B:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B702F177A999E8E9F4FB5E8AF5DF44A58
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1QfOOXyk0etzfkWCRNpvslfMW-s.roa
Signing time: Fri 27 Oct 2023 08:10:16 +0000
ROA not before: Fri 27 Oct 2023 08:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:2f:17:7a:99:9e:8e:9f:4f:b5:e8:af:5d:f4:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 08:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d507ce397ca4d1eb737e458244da6fb257cc5beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:ec:c5:44:c4:eb:ac:7b:ad:1d:aa:a5:44:
f1:d9:3a:c6:1a:52:f9:a2:08:1b:6d:ec:aa:1c:49:
f5:2f:01:2e:3f:f5:0e:3f:35:a7:2d:d4:9a:86:04:
5c:44:79:ce:7e:62:35:89:3a:39:06:aa:e1:12:91:
98:4d:7d:97:4f:76:b6:b5:57:aa:0e:65:43:3c:7b:
c4:de:8f:f6:a1:d7:cd:8b:8b:bd:60:27:2f:6f:12:
d3:fe:d9:4f:a0:b8:91:fc:82:62:5b:b4:31:6a:b4:
c2:b0:12:d5:31:34:db:3f:43:62:91:41:29:2e:ea:
13:6c:02:d4:70:1d:6c:86:73:7b:a4:18:11:6f:48:
ce:ab:93:1e:46:2f:08:92:6d:13:7e:44:94:ac:c6:
18:de:d9:50:c8:b8:ca:69:3b:ea:e3:13:11:2f:fc:
de:ac:9d:e7:0e:a5:ae:da:61:6d:fc:5c:aa:76:c4:
c2:fa:c9:f8:e1:6b:6f:e2:ad:60:3c:c7:fa:50:68:
55:cc:42:30:f1:78:6e:55:91:fa:d5:1c:ee:4a:4a:
ad:1b:c0:e3:5f:4e:52:77:9d:04:b7:e4:9a:d3:d5:
d2:c6:1e:ac:d6:ae:04:37:38:f3:98:cb:c1:ae:81:
5e:53:50:da:c1:d2:9b:df:32:9e:58:76:98:87:13:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:CE:39:7C:A4:D1:EB:73:7E:45:82:44:DA:6F:B2:57:CC:5B:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1QfOOXyk0etzfkWCRNpvslfMW-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:f7:e4:73:37:b2:9f:55:36:7e:81:29:e7:50:59:d0:92:c6:
80:36:42:24:bf:16:05:f6:bf:0f:d3:06:ba:4c:68:be:ff:c0:
be:8b:9a:66:39:f0:50:d9:dd:b2:7d:a6:b4:28:9d:81:ac:f5:
35:eb:95:74:c2:51:e2:f0:fb:10:0c:2a:d5:b0:91:a4:53:5b:
89:83:be:b2:60:9e:7e:2f:fe:e3:22:f7:87:bd:85:8a:8a:38:
17:bd:0f:a1:d1:67:98:6b:2f:fc:48:c8:45:f0:36:53:11:cc:
0e:f9:32:00:47:69:b9:16:5e:c7:d4:31:d9:19:c3:79:bb:fe:
16:27:6f:cb:26:b7:4d:8b:1b:69:6d:17:f6:93:25:b5:d2:04:
07:37:50:d1:2f:b8:d2:a9:6a:4a:da:ae:eb:c9:3e:e4:db:0b:
8a:fb:d8:6a:1b:72:0a:d5:89:8a:dd:e2:4e:89:a7:50:85:08:
3b:d7:19:08:88:e3:6f:a2:90:35:71:c9:05:0f:62:dc:92:00:
2d:5d:12:38:19:f3:30:6e:3e:d7:4b:5a:be:5f:7b:23:9c:75:
c7:f5:03:16:a6:14:e2:72:bc:eb:34:39:4c:6f:c9:35:61:c7:
04:3b:19:a2:3d:02:8c:f0:3c:e4:9e:dc:4e:24:50:a3:dc:1a:
92:2a:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:25 2025 by rpki-client