Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q1kXp0sb4sEqhRu8TCTLwmy6Wds.roa
File: Q1kXp0sb4sEqhRu8TCTLwmy6Wds.roa (raw, json)
Hash identifier: 0YF3MxyiZcuQOsz4aO3ohpb/r3ji8yMJgRAXlrg6lgU=
Subject key identifier: 43:59:17:A7:4B:1B:E2:C1:2A:85:1B:BC:4C:24:CB:C2:6C:BA:59:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB08E4B2E68FA5CEBEEBBF0F4E0772958
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q1kXp0sb4sEqhRu8TCTLwmy6Wds.roa
Signing time: Wed 08 Nov 2023 20:09:57 +0000
ROA not before: Wed 08 Nov 2023 20:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:8e:4b:2e:68:fa:5c:eb:ee:bb:f0:f4:e0:77:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 20:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=435917a74b1be2c12a851bbc4c24cbc26cba59db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:2f:23:df:e0:a3:37:9c:42:8a:9a:7d:47:
49:7e:cc:d1:e3:0b:18:6f:57:0e:6f:55:d3:d4:56:
56:b1:dc:a0:91:45:74:e8:1d:07:82:69:31:0d:bd:
d0:e2:3e:4c:0e:f1:f5:b5:50:27:dc:06:92:03:d9:
b3:23:07:6a:a4:fc:50:4f:c4:15:bf:f1:ac:84:45:
e0:2e:51:f3:63:44:69:8d:d1:9b:31:9f:31:6f:df:
ff:db:be:57:e1:94:21:d0:5d:75:23:55:21:4a:eb:
e3:03:65:16:3d:b6:59:35:f1:9e:85:e5:72:15:8f:
20:82:bc:b0:13:31:a5:8f:df:36:31:d2:f5:62:b2:
d1:20:5c:7e:df:74:bb:8c:00:f8:7c:5e:ff:19:4c:
23:6d:cb:b6:46:ec:8d:93:e3:72:19:46:64:20:7b:
9a:c0:c8:c4:68:7b:11:45:6b:1f:fe:75:cd:6a:e5:
4b:d7:3e:fc:09:c5:f8:28:b1:98:2a:59:41:1c:32:
0b:2e:fd:a3:b6:90:aa:75:10:73:c5:02:10:06:cd:
60:59:9c:16:c1:50:5f:b3:f0:d6:83:50:31:13:3d:
d6:78:59:48:1b:88:46:45:c0:37:bd:0f:f8:4c:8a:
24:d6:dd:44:fe:17:20:ec:76:36:02:01:ef:1e:17:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:17:A7:4B:1B:E2:C1:2A:85:1B:BC:4C:24:CB:C2:6C:BA:59:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q1kXp0sb4sEqhRu8TCTLwmy6Wds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:8d:d0:01:2b:a0:0a:7e:0e:22:0c:cb:73:79:22:49:20:0c:
7c:04:45:14:83:03:2f:75:92:14:fc:80:cc:d3:72:41:91:98:
4c:f9:90:1d:b3:f4:68:6a:eb:e2:15:09:36:b9:7f:53:7c:f5:
fb:db:77:80:5f:b1:70:83:c1:b2:c8:22:26:90:b9:ce:b3:f8:
bb:12:14:9e:62:30:be:14:c2:e6:4c:cc:19:5e:6e:08:01:8c:
12:e0:40:97:ed:63:0b:61:4d:c1:7f:fb:30:d9:bb:a1:d3:96:
fd:47:e7:d9:62:5a:7d:10:4c:9d:6a:ac:30:5f:fe:b5:d8:f7:
1f:8c:88:49:57:c7:dd:16:44:83:e5:9b:7f:79:2f:17:b6:a3:
75:65:83:45:d5:7a:2c:3a:0c:e8:d8:7e:29:ff:6d:20:ed:47:
3f:55:55:2d:eb:57:48:da:a4:91:54:b9:05:22:06:da:c3:2c:
d6:0f:fb:58:5e:f7:bd:5f:a0:50:a7:83:5f:ae:10:ca:33:e2:
58:ab:d3:8d:74:31:96:5d:ee:3a:79:9c:4a:12:84:7a:4d:5f:
e4:b3:a7:5d:9c:d5:61:c6:14:9c:d0:37:18:0f:17:92:da:e4:
fb:30:34:c6:04:6e:aa:81:55:99:88:95:b8:c5:f7:44:c6:d7:
70:df:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:01:22 2025 by rpki-client