Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qe8xKDNsUDAPMHKcm0YZAQmOu-A.roa
File: Qe8xKDNsUDAPMHKcm0YZAQmOu-A.roa (raw, json)
Hash identifier: I7uWAmDeX6Zt/m8eEC8/CS8V2j8/bw2oYKvHollYCh0=
Subject key identifier: 41:EF:31:28:33:6C:50:30:0F:30:72:9C:9B:46:19:01:09:8E:BB:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B88A462150DBF40550774B5CBBB28C085
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qe8xKDNsUDAPMHKcm0YZAQmOu-A.roa
Signing time: Wed 01 Nov 2023 02:09:15 +0000
ROA not before: Wed 01 Nov 2023 02:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:a4:62:15:0d:bf:40:55:07:74:b5:cb:bb:28:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 02:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ef3128336c50300f30729c9b461901098ebbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:1b:7e:4d:cb:f7:b8:c2:99:c1:e7:7f:1d:
5d:69:b9:19:82:52:c6:b5:64:d8:fb:6b:f2:a4:e0:
7f:f9:c3:a0:a2:c8:72:42:ca:6b:31:ea:78:51:0f:
4d:b3:59:98:73:c0:2d:e3:e4:19:ad:5d:d8:38:ab:
df:16:98:39:d4:fe:90:21:a8:5c:87:82:d5:a4:51:
4e:d3:51:56:21:6b:2d:90:7a:f4:fe:e4:ff:ca:5c:
57:81:a1:c0:3f:a5:bf:56:2c:24:d2:44:cb:2b:60:
3b:7b:2b:cc:c5:fc:ca:bd:88:cf:bb:d9:ff:76:e2:
58:c9:14:34:bf:69:9c:1c:39:d2:42:be:3f:86:b3:
67:d0:f6:dd:26:fb:b4:b8:41:b1:1b:1f:f8:d1:52:
5d:98:9b:4a:53:68:4e:83:0d:ab:71:06:a3:ea:21:
2e:7f:e4:ce:7f:3e:cf:11:ed:f6:4a:d6:83:33:5a:
68:d3:00:19:5f:f1:85:d6:53:82:1c:cb:f0:09:8e:
4d:8f:d5:27:a1:dd:64:27:6c:f1:c6:b7:a4:d1:9d:
f2:de:46:55:dc:4c:f6:ec:03:75:ad:bf:8e:cc:85:
ef:ff:98:aa:6e:45:0b:9b:cd:40:0c:ea:07:3d:a8:
c4:1d:0d:bc:3b:b6:62:40:49:6c:0f:53:41:a6:fc:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:31:28:33:6C:50:30:0F:30:72:9C:9B:46:19:01:09:8E:BB:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qe8xKDNsUDAPMHKcm0YZAQmOu-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:8f:10:33:6a:79:43:e0:91:85:b2:f4:77:a6:a6:93:01:29:
b3:19:d6:80:bb:ca:02:07:1e:40:48:b2:37:b2:d2:ab:91:49:
12:5e:ae:c4:01:14:14:31:c6:f9:a0:a5:1e:35:6f:93:9e:29:
17:e2:da:76:7a:ea:e5:07:99:4b:fb:e9:05:2e:fc:aa:ca:b9:
c8:3b:4b:00:66:c9:b8:27:4b:50:c3:a9:68:26:ff:de:31:a2:
1b:84:f7:63:eb:12:eb:be:91:23:60:5c:4e:8b:b9:07:06:d2:
e8:d0:6a:39:64:99:bd:22:34:6b:2b:8e:62:30:bb:44:63:e8:
a4:c9:fa:58:c4:27:51:79:13:e0:30:c0:b1:79:6f:0d:8e:bd:
89:fe:dc:0a:d9:1f:01:22:60:f3:15:d9:43:bc:2e:9e:17:4c:
d0:0a:b7:4c:84:43:a8:b0:89:e0:91:b9:c6:34:65:b2:f8:1f:
ae:97:b2:66:af:e2:5d:40:0d:c9:a5:c5:a6:b3:cb:b9:9b:db:
d0:fc:53:aa:9c:6d:94:47:fc:18:af:fb:d0:d0:aa:74:c8:8a:
9b:37:5b:63:4e:58:da:79:93:b7:de:b6:29:88:b9:1a:db:9b:
44:5d:69:5c:24:1a:16:6c:8e:90:81:7c:44:e3:ca:29:3f:1c:
6e:1a:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:47:07 2025 by rpki-client