Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QWKe3xjZ4NL-pI9vZPLtlT3XVA.roa
File: 4QWKe3xjZ4NL-pI9vZPLtlT3XVA.roa (raw, json)
Hash identifier: 3iCEs/NKo4K9bSTTQIbwe/d4P+2YeBk+vf5FCK7w390=
Subject key identifier: E1:05:8A:7B:7C:63:67:83:4B:FA:92:3D:BD:93:CB:B6:54:F7:5D:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCAB761363F7364C49A41F00FFB36F463
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QWKe3xjZ4NL-pI9vZPLtlT3XVA.roa
Signing time: Mon 13 Nov 2023 22:04:57 +0000
ROA not before: Mon 13 Nov 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:cab6:d97b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:b7:61:36:3f:73:64:c4:9a:41:f0:0f:fb:36:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1058a7b7c6367834bfa923dbd93cbb654f75d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:ca:67:93:8f:5b:4a:aa:ea:17:c9:96:27:
38:23:a6:a1:3d:d0:0c:9c:04:c2:49:1c:ef:c8:95:
73:09:bb:f2:5b:70:93:8a:b2:87:73:42:a8:5f:8e:
d2:73:22:6c:b4:4b:24:6f:e4:51:fe:b7:e3:bc:3b:
d2:7b:ce:49:00:6a:46:92:86:17:45:14:dc:8e:3c:
c8:80:ff:bc:1c:39:cb:d0:7e:fe:00:2f:7b:0d:f6:
26:c2:f1:d2:f9:8f:72:00:3b:0b:40:60:6b:a2:dc:
07:10:56:2e:15:60:a6:7b:75:fe:47:7c:74:39:9a:
7e:f1:64:ed:ff:48:65:2d:74:e9:39:df:c1:32:c8:
8d:d6:42:24:1e:2d:b3:24:14:7d:18:1f:86:21:44:
4d:03:24:00:72:52:d4:06:09:be:bf:40:3c:62:cb:
de:56:81:f7:87:24:39:de:f7:7d:90:a8:44:dc:ea:
a7:7a:8c:55:c8:96:05:d2:44:89:9d:27:6a:de:16:
16:eb:33:ac:fd:34:17:80:a2:9a:0e:16:98:43:d3:
ae:69:7a:09:4e:c3:62:ca:be:16:90:b3:7a:5c:a4:
22:e5:05:4e:5b:28:45:9d:8e:f0:f4:b1:81:c0:22:
89:7f:7b:24:fd:4c:51:3a:ad:2d:f2:10:4e:57:a0:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:8A:7B:7C:63:67:83:4B:FA:92:3D:BD:93:CB:B6:54:F7:5D:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QWKe3xjZ4NL-pI9vZPLtlT3XVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:ad:d8:d6:87:d1:1f:f0:d8:11:de:f7:ac:30:c7:0e:f3:9c:
dd:e7:00:15:0f:44:67:32:ce:5b:85:44:dd:35:c4:d0:e0:6c:
66:45:ad:92:95:59:b0:68:df:eb:10:f1:c1:0a:c6:1a:7d:c2:
cd:b3:94:b4:ee:e0:db:41:05:08:1a:7c:1e:f3:c0:70:a8:fb:
14:60:32:62:18:ca:d3:8d:c4:86:ca:76:76:a6:a0:ac:42:2e:
15:89:1e:be:bd:a4:7b:26:4a:0d:9b:2c:f6:87:55:85:51:0e:
3b:fb:3d:68:1d:0f:69:21:da:f4:5f:33:66:6f:de:87:65:53:
21:f4:c2:11:fc:45:5c:bc:cb:39:5e:0b:81:5a:c1:76:38:35:
a0:29:5b:9e:02:b3:35:e1:46:40:2b:6e:63:78:07:91:dd:ad:
9c:96:4d:f4:67:fc:95:d4:07:1a:d4:6e:1f:72:9e:cb:d0:ca:
cb:0b:b2:da:85:89:b1:38:45:d3:72:a1:15:32:8c:ba:58:47:
83:b1:5f:e1:12:00:7b:c1:93:67:6a:48:d9:c6:56:2f:b9:15:
45:4d:2c:04:43:e6:27:b4:2c:e5:b9:75:50:5b:2a:8d:5c:c4:
70:ac:57:d9:8d:d3:03:85:28:9f:e5:78:b4:c8:21:d3:6d:ce:
1a:16:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:03:51 2025 by rpki-client