Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qd19ki3xPnbvw4APvelnqt7BUF4.roa
File: Qd19ki3xPnbvw4APvelnqt7BUF4.roa (raw, json)
Hash identifier: 5BntVVt3Ewuzb3IE5dRRXCo7lUuiBMuqL1JSY4LQGRA=
Subject key identifier: 41:DD:7D:92:2D:F1:3E:76:EF:C3:80:0F:BD:E9:67:AA:DE:C1:50:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD652437BD54122E9B9F2D3356AEAA9E7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qd19ki3xPnbvw4APvelnqt7BUF4.roa
Signing time: Thu 16 Nov 2023 04:09:57 +0000
ROA not before: Thu 16 Nov 2023 04:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:52:43:7b:d5:41:22:e9:b9:f2:d3:35:6a:ea:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 04:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41dd7d922df13e76efc3800fbde967aadec1505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:40:7e:f0:50:37:91:94:72:51:90:3e:2f:
80:ae:4b:82:f4:f3:2a:8a:65:b9:e6:c0:82:82:58:
2d:95:d3:5c:c7:40:cf:58:0b:89:4f:11:94:66:42:
93:b0:e8:19:d1:40:d3:c2:76:1b:6f:27:9b:22:4f:
ae:44:b9:4d:68:a1:84:7f:fd:f2:be:30:08:42:39:
4d:f1:80:8f:d8:c3:7f:c1:d7:d4:7c:e9:f7:74:a3:
ad:02:b0:e8:17:e2:77:30:ec:eb:cd:60:13:b1:8e:
67:87:f8:53:b5:40:08:83:98:81:19:73:39:7d:19:
31:89:a6:a0:11:3e:aa:80:9f:c4:e2:29:b5:6b:9d:
e8:64:b5:04:49:bc:1e:39:b2:d0:7a:cc:43:5d:6a:
e3:d7:ea:e8:e6:a8:11:9c:13:5c:b4:b4:f3:3c:5a:
1b:aa:04:de:bf:e8:0a:b4:14:0f:3d:b5:4a:3a:d5:
b5:ee:f2:f0:f2:59:c9:7d:b4:67:36:c8:1f:e5:aa:
97:7d:be:95:21:7d:01:78:be:5e:fb:16:ef:1a:dc:
fd:65:ff:7b:49:56:ac:2c:9c:95:7c:44:f7:3d:7e:
9c:25:7f:c9:43:14:fe:e5:0f:d4:f6:89:04:b5:ce:
a2:5c:1f:fe:45:93:e0:ca:e5:00:e9:6d:dd:44:bc:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:7D:92:2D:F1:3E:76:EF:C3:80:0F:BD:E9:67:AA:DE:C1:50:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qd19ki3xPnbvw4APvelnqt7BUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:d8:fe:18:9b:ca:6d:15:4a:3a:2d:9e:22:55:6c:19:7f:83:
4a:6a:82:ad:65:d9:33:ba:2a:ae:48:98:20:03:f3:c5:d2:6d:
7b:86:b3:e7:fd:6c:c5:f5:e4:17:5f:9d:86:37:fa:3b:43:85:
f5:b3:1f:f7:e8:4a:1b:ee:97:7b:81:a3:52:99:1b:65:74:5f:
bd:80:79:bf:bc:15:d2:8d:31:3e:39:fc:f4:e9:d4:d8:e7:dc:
fc:cc:97:b1:e3:87:eb:21:84:2f:42:27:22:c4:1c:60:43:ad:
0a:4e:63:64:8e:cd:53:2a:33:97:41:25:02:d9:91:36:7a:a0:
84:cf:35:f2:bb:bb:09:70:70:7f:b7:36:b6:d6:79:63:1b:c9:
5f:21:5b:3e:31:1e:a0:1f:ea:93:74:bc:a5:bc:47:ff:c1:55:
c0:75:6a:b5:c5:2f:40:b0:b5:a5:74:47:8b:c5:b0:01:d3:dc:
b5:f3:08:f2:bd:97:8e:09:d9:6f:dd:03:4c:77:a3:16:9f:77:
cf:6f:76:7d:46:8d:a8:63:a6:86:b5:f8:3d:4a:0f:79:45:86:
df:17:6e:9b:ad:78:f8:a5:86:b8:7e:1c:62:66:bf:03:9e:4a:
91:04:5f:84:74:6b:b4:d4:31:0d:67:19:49:18:98:82:6a:47:
1f:95:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:36:30 2025 by rpki-client