Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QRvpHTVZtj1OfFHMoKc_AiBI8x4.roa
File: QRvpHTVZtj1OfFHMoKc_AiBI8x4.roa (raw, json)
Hash identifier: teB94FGUvwTDuZwyrHlj+gwTUnmcQ3LcFw+XkgqgJPs=
Subject key identifier: 41:1B:E9:1D:35:59:B6:3D:4E:7C:51:CC:A0:A7:3F:02:20:48:F3:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3C4203FB374682CDBDC7D507C4056E02
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QRvpHTVZtj1OfFHMoKc_AiBI8x4.roa
Signing time: Tue 05 Dec 2023 23:13:28 +0000
ROA not before: Tue 05 Dec 2023 23:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3c:42:03:fb:37:46:82:cd:bd:c7:d5:07:c4:05:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 23:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411be91d3559b63d4e7c51cca0a73f022048f31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:e7:c6:38:bb:7f:d5:be:b2:ec:07:3f:b0:
b1:35:1a:e0:c8:1b:01:68:21:02:74:4c:54:4e:e8:
a0:5a:41:d3:4e:00:4c:8f:e8:ab:f8:4f:1c:1e:7a:
29:40:a9:f8:6f:14:21:05:a3:01:46:ad:a1:4b:03:
4f:37:5d:71:cc:86:c2:36:1f:23:78:31:1a:0e:a2:
f2:cc:f5:f6:e8:f8:6d:9f:95:86:a1:cb:a1:1b:d1:
31:b3:a7:66:fa:6f:1f:45:c1:27:55:c1:14:5e:63:
74:9f:20:70:8e:85:58:6a:b3:1f:fb:f2:b7:40:c2:
4f:b3:23:30:f9:45:71:c5:f8:f2:7b:2f:6d:70:7b:
6a:64:20:e3:3f:9e:fb:25:bb:0b:68:63:11:58:36:
47:29:41:ff:78:d5:e2:e2:ca:37:1e:e0:6a:4a:5d:
27:41:9f:6a:d4:09:c2:84:5a:2c:92:f0:40:62:77:
43:23:5e:4f:ff:cf:d3:e0:57:c3:47:a4:e3:af:ad:
e5:5d:31:41:42:8b:73:80:1f:36:f4:f2:13:7c:55:
fd:75:5d:c3:c2:94:a8:08:20:64:da:9d:a6:ae:c4:
8e:80:38:cf:52:eb:93:de:b6:20:2d:67:bf:af:09:
e8:b7:ea:c0:cd:c0:b3:42:9c:c4:04:2c:65:87:10:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:E9:1D:35:59:B6:3D:4E:7C:51:CC:A0:A7:3F:02:20:48:F3:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QRvpHTVZtj1OfFHMoKc_AiBI8x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:08:29:08:87:cb:8b:24:c0:bf:8f:ab:b2:f6:32:55:3d:73:
99:45:28:de:a3:44:d4:8b:0f:0a:95:2b:06:18:87:84:d5:2c:
18:19:ec:d8:bd:f4:25:f2:6c:b5:9a:ab:ff:37:f8:e2:ae:c5:
9a:37:ea:8c:c4:0b:7e:51:4e:1f:f4:16:6e:e5:7b:97:94:0c:
32:e9:2c:37:73:3f:ed:d2:71:ff:98:cd:95:22:22:fa:6d:be:
5f:0f:5a:89:ec:4f:46:d4:6a:76:e0:a2:b4:32:cc:ee:2a:aa:
6e:90:f2:90:34:f2:2d:54:a8:d3:ff:de:35:7a:da:e9:8f:76:
24:3e:72:19:54:1c:7d:1a:5e:e9:b6:da:4f:4a:aa:df:c6:00:
3b:19:ea:92:a8:d6:ba:dc:2f:79:b2:69:b1:06:75:53:00:d6:
79:e2:1f:ae:40:23:39:a9:59:70:b5:63:cf:86:23:3f:d6:a8:
36:3e:4f:b3:b7:f6:40:f5:c0:e6:16:03:5e:1b:84:7d:03:cc:
45:f9:45:66:69:58:61:3d:5d:4f:9f:01:64:a4:67:34:d6:ab:
01:cf:51:1a:39:f3:32:81:48:0e:d7:f1:6d:e3:52:bc:cb:60:
29:6f:84:29:4c:2a:5e:a0:6c:e2:17:f9:42:10:9d:8c:ca:e4:
5c:03:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:14 2025 by rpki-client