Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q22DcklGGHK_1iFNOcCTNcT9Ijk.roa
File: Q22DcklGGHK_1iFNOcCTNcT9Ijk.roa (raw, json)
Hash identifier: V6cDBZ/um/6tiqTaQfXoY9JKL6kiI3SOrovqlKuLdd4=
Subject key identifier: 43:6D:83:72:49:46:18:72:BF:D6:21:4D:39:C0:93:35:C4:FD:22:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4D2D90BDE08F20467111A79234D3578B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q22DcklGGHK_1iFNOcCTNcT9Ijk.roa
Signing time: Sat 09 Dec 2023 06:04:40 +0000
ROA not before: Sat 09 Dec 2023 06:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4d2d:2bf7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:2d:90:bd:e0:8f:20:46:71:11:a7:92:34:d3:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 06:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=436d837249461872bfd6214d39c09335c4fd2239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:5a:56:75:58:54:de:9a:05:a6:88:6d:ad:
3a:5a:34:e7:5a:ab:c3:85:fe:18:f1:ef:ac:8f:ab:
a9:05:52:bb:dc:ef:43:48:90:cd:fc:f9:1e:2a:21:
7c:a8:c2:d7:3d:de:bc:7f:ae:cf:ef:a5:da:04:a2:
f5:f6:be:e4:31:f0:35:e9:31:82:76:7a:89:21:80:
25:af:7b:dd:62:c5:28:bf:91:42:51:da:92:a9:df:
c6:89:77:3c:cd:f7:de:2c:72:9e:e4:4c:04:02:9c:
b5:f1:30:63:ea:73:d1:b8:9f:1d:78:36:33:06:2c:
47:4e:26:e5:eb:0c:06:88:90:6b:73:44:50:3b:f2:
72:48:d5:3a:f7:9d:aa:c1:97:d5:03:17:e8:07:21:
fb:90:6a:12:2f:df:68:3f:df:c6:97:1a:c3:ff:17:
d7:40:90:a3:ab:4f:f1:ba:6b:5a:63:24:f4:5f:7a:
02:77:6d:c0:36:fa:e1:15:c2:99:21:e5:41:e4:61:
f7:89:5e:06:56:4a:8c:a9:da:e1:b6:5f:0d:35:9b:
40:93:98:ce:30:4e:54:c0:a8:87:fe:78:da:a4:a7:
fc:8d:ae:f5:07:36:48:c4:33:cd:2a:d1:a7:0c:45:
0e:13:c0:7f:0e:5a:26:dc:12:3c:f4:68:e3:3f:2f:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:83:72:49:46:18:72:BF:D6:21:4D:39:C0:93:35:C4:FD:22:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q22DcklGGHK_1iFNOcCTNcT9Ijk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f8:1d:d7:55:ef:ab:8e:39:fd:d1:16:3b:d2:2d:eb:43:03:
76:e1:45:8f:51:47:36:5d:cb:ff:c1:68:2f:41:10:f4:05:0e:
f8:0b:0c:c8:db:eb:25:36:4a:c5:31:00:17:42:68:d0:1a:69:
f9:b3:14:27:ad:bf:9f:1e:ec:50:cb:47:fa:c2:0a:86:2f:ac:
b0:af:c3:b8:8a:a0:ea:c0:fb:38:26:62:d4:b2:89:94:a4:c0:
1d:02:cc:f3:9e:87:99:95:38:43:68:6f:94:1b:58:4e:49:81:
84:82:29:35:e6:da:94:2f:7d:6d:7a:fa:76:80:b4:47:f0:8a:
a6:4c:7a:80:4e:53:2a:c5:75:c2:37:8f:0d:7b:e4:af:62:a6:
24:14:30:a9:b1:fb:95:b1:f3:9b:a5:b9:04:69:64:a1:1d:f0:
58:a6:93:32:f8:1a:83:ff:e7:e2:31:c7:4d:ca:a1:14:c7:f5:
81:7a:65:a7:dc:cd:22:fe:23:e0:d6:b5:a1:da:95:2a:79:b4:
25:e6:91:78:1c:2b:b4:70:13:83:8c:26:59:30:68:f1:8b:47:
6f:75:e7:f2:00:31:4d:c0:d6:10:b5:80:72:50:01:13:73:4a:
36:77:5c:ee:0c:f2:04:a2:6b:5e:90:5a:94:01:bc:8e:ca:f0:
1d:ca:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:20:26 2025 by rpki-client