Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A4qXqeGs9p_3seZjAut0MiPcCUU.roa
File: A4qXqeGs9p_3seZjAut0MiPcCUU.roa (raw, json)
Hash identifier: RNjJutBi1zQsdMy/HhBAGptfnOHuTA+wBSvvm9u5xJs=
Subject key identifier: 03:8A:97:A9:E1:AC:F6:9F:F7:B1:E6:63:02:EB:74:32:23:DC:09:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5FAED8A186C53618B5A8DF09ECF41AAC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A4qXqeGs9p_3seZjAut0MiPcCUU.roa
Signing time: Tue 24 Oct 2023 03:16:16 +0000
ROA not before: Tue 24 Oct 2023 03:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:ae:d8:a1:86:c5:36:18:b5:a8:df:09:ec:f4:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 03:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038a97a9e1acf69ff7b1e66302eb743223dc0945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:cf:6d:90:87:10:e4:ff:1c:87:53:6b:6b:
0e:9a:60:a3:11:2c:2d:31:4b:8e:a2:6e:3f:50:fe:
e8:2f:35:8c:df:a8:b3:9c:21:bb:3b:fa:02:8a:d1:
27:1d:a0:a0:9d:d9:7d:34:79:c3:fb:ee:82:39:10:
e9:f3:1f:a2:be:06:38:8b:6e:08:b9:9c:59:a4:80:
27:2c:0f:9e:c0:c9:45:59:58:49:ca:a9:72:4e:dd:
1a:1b:2b:19:85:96:15:30:89:45:1d:d8:ae:1b:8d:
77:ea:ed:76:75:42:cd:15:86:9e:03:f2:9d:ca:ec:
89:de:e7:17:c1:4f:ad:61:7d:d4:3d:e7:52:82:74:
84:53:2d:46:78:fe:30:9a:15:55:b0:f8:fa:5d:bb:
fb:2e:9e:08:16:e4:88:0d:68:76:b7:ad:af:2b:2e:
b5:33:f9:e4:6f:16:ac:45:b2:c4:80:91:fb:e0:42:
44:76:31:db:22:9f:14:86:f8:17:f5:09:21:cf:30:
29:1e:63:c0:f2:d1:6c:65:92:09:5c:ab:b5:6a:49:
5c:c2:09:06:4b:5d:fb:50:e4:13:72:a8:13:a5:14:
6d:db:ca:82:86:67:ba:70:9d:99:d4:5b:15:ac:f0:
4e:9f:ec:23:77:3a:10:c9:ee:cc:2c:36:a0:fc:7c:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:97:A9:E1:AC:F6:9F:F7:B1:E6:63:02:EB:74:32:23:DC:09:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A4qXqeGs9p_3seZjAut0MiPcCUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:90:dd:96:ea:a1:0b:1f:97:59:d4:d0:68:fe:24:89:0e:13:
a7:39:31:bb:9d:44:13:06:aa:7b:68:a9:35:0a:f2:47:15:d2:
be:05:16:cb:4a:5a:e2:d2:ee:92:7b:4d:18:fa:4b:45:a7:18:
c4:db:26:04:34:22:83:c4:7a:ae:f2:a2:6f:e8:c8:a5:30:13:
8f:e1:0b:c0:cf:22:28:d0:d5:a5:27:76:2b:f0:35:27:2c:ba:
89:36:45:c4:fd:a5:ea:5f:e0:b5:f8:48:81:98:fe:c2:f4:9b:
a8:08:97:30:db:04:c0:22:22:5e:8f:0a:48:73:30:a1:4d:26:
b1:36:11:94:29:d1:ea:2d:18:7f:b9:fd:7e:c7:0b:01:77:92:
80:3d:f3:2b:b7:23:90:2d:1b:90:17:ff:07:1b:d7:d7:8e:43:
0d:26:89:72:b4:3c:f8:d9:66:79:c5:10:61:b2:7e:43:ba:0c:
e0:c5:fe:5c:2a:30:d2:ef:fb:43:58:9e:41:23:4c:3a:26:32:
d2:dd:ac:79:44:9e:16:06:9a:0d:b0:b7:10:41:3b:36:35:c0:
d7:ed:4e:64:c1:d5:4d:86:d3:40:e8:86:c5:f7:d5:4b:38:41:
43:b5:35:9d:ac:26:30:95:0e:6e:6b:96:21:a8:3e:26:81:51:
e7:9e:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:29:32 2025 by rpki-client