Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q93EGtmtHNbOB5vRu41w1zJc7JM.roa
File: Q93EGtmtHNbOB5vRu41w1zJc7JM.roa (raw, json)
Hash identifier: btQj0oXzrIkxlYxvVvtLsk/srpmUz/RB49h9XgzYeqA=
Subject key identifier: 43:DD:C4:1A:D9:AD:1C:D6:CE:07:9B:D1:BB:8D:70:D7:32:5C:EC:93
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B03D4DD0B0AEBD3D8137389BCEF90FCBB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q93EGtmtHNbOB5vRu41w1zJc7JM.roa
Signing time: Fri 06 Oct 2023 07:12:43 +0000
ROA not before: Fri 06 Oct 2023 07:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:d4:dd:0b:0a:eb:d3:d8:13:73:89:bc:ef:90:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 07:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43ddc41ad9ad1cd6ce079bd1bb8d70d7325cec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:9c:30:4b:7e:c3:48:d7:f9:26:58:55:a6:
04:ac:e5:05:06:ef:35:92:4d:74:a3:95:12:48:86:
60:7b:23:6b:0f:1f:b6:7c:f5:ca:94:80:94:19:6a:
46:4d:6b:a4:89:64:16:69:a0:ff:05:84:d5:d1:b7:
c3:57:60:0d:80:24:28:74:59:27:bc:6d:8b:0f:d0:
dc:6a:a0:d4:30:df:27:a0:dd:cf:a4:c0:05:db:e2:
c6:68:36:eb:e0:b9:e2:43:1e:e1:14:07:05:5d:f5:
a3:c3:c2:17:8c:46:b9:38:16:0b:27:90:88:c5:05:
05:8a:1a:cc:02:cc:83:7e:79:db:1b:cc:2e:a2:ae:
31:55:11:f7:54:a1:7b:a6:bb:b9:1f:57:46:09:15:
98:07:9d:ca:fe:2c:90:55:11:53:67:84:1d:89:c6:
e4:83:c1:80:07:5d:96:a0:19:b2:87:73:1d:49:e4:
e9:2e:2e:8b:7a:84:c9:9f:c0:7a:2e:5e:6b:00:a0:
fa:1e:03:26:c4:88:c6:12:92:6b:5f:b1:3b:2e:fc:
77:12:31:03:ec:16:21:33:f5:83:4a:95:74:7e:e9:
e5:b3:44:ee:11:d9:79:03:74:ed:fb:d1:7c:fb:5a:
bc:6d:f7:86:c9:e8:00:ce:8c:b3:cc:47:6b:c8:ed:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:C4:1A:D9:AD:1C:D6:CE:07:9B:D1:BB:8D:70:D7:32:5C:EC:93
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q93EGtmtHNbOB5vRu41w1zJc7JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:a1:33:46:38:0f:cd:6e:4f:dd:11:03:17:61:ff:28:ec:b9:
c7:5b:cb:3d:92:53:0f:a9:06:a0:7e:26:91:20:26:c6:b9:0d:
29:15:9f:51:ae:d7:11:cf:5d:60:8e:7b:34:6b:7b:2f:c3:ba:
15:43:58:9d:8e:a4:e8:28:12:4f:1b:00:d5:ec:3f:e1:91:e5:
54:15:61:0c:d2:f9:33:24:64:2e:6e:70:f9:92:41:e7:0c:36:
f1:3b:5a:14:7e:40:c9:0e:e2:15:18:1b:b1:45:11:d6:f1:20:
0e:a5:94:8b:58:07:fd:f7:d5:84:93:8a:50:a7:2b:0d:a6:81:
af:3e:34:3b:92:de:58:e7:bb:97:41:64:7f:97:e3:00:a7:78:
bc:cf:b6:bb:ad:0c:6b:ff:b6:3f:4a:e9:e7:a8:7b:f0:fe:66:
1a:71:de:47:ce:09:21:c7:f8:c4:65:4d:1f:72:6b:aa:bb:88:
63:7c:1a:4b:bb:0e:06:ae:ea:2c:9c:57:b3:89:64:f8:34:c8:
14:4e:a2:e9:c4:1b:2b:75:ea:ed:a1:04:7a:7f:fd:13:a5:49:
ab:de:ae:f3:83:71:88:15:77:4b:56:0c:45:35:47:6e:f1:e7:
c2:ce:a7:14:12:8e:dd:97:55:2a:d7:02:eb:b8:d7:9d:29:68:
35:25:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:12:37 2025 by rpki-client