Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qnp4Gvu4EShv6DdH4p-3-7nmyHA.roa
File: Qnp4Gvu4EShv6DdH4p-3-7nmyHA.roa (raw, json)
Hash identifier: +EGPwXGArdno3I4qtinn6m1pYQNDiu1c7uEnUsdZxQ4=
Subject key identifier: 42:7A:78:1A:FB:B8:11:28:6F:E8:37:47:E2:9F:B7:FB:B9:E6:C8:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3BD574535299DAA5066380CDE6278C44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qnp4Gvu4EShv6DdH4p-3-7nmyHA.roa
Signing time: Tue 17 Oct 2023 04:12:06 +0000
ROA not before: Tue 17 Oct 2023 04:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:d5:74:53:52:99:da:a5:06:63:80:cd:e6:27:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 04:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427a781afbb811286fe83747e29fb7fbb9e6c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:11:ef:f9:12:c0:51:41:72:b9:15:81:b9:
af:bf:dd:3d:b8:de:ab:a3:e2:0e:7a:57:6f:a3:ba:
e6:21:f3:49:48:1e:a1:d2:38:72:6b:0b:87:1e:cd:
5c:72:83:90:6a:79:75:98:0c:a5:a4:db:92:94:a5:
1e:c9:04:37:f1:30:3a:f2:ad:33:32:da:4b:e6:1d:
ef:e6:28:10:9e:a4:af:ee:b9:fb:47:39:be:ef:1e:
db:68:32:31:5b:76:39:61:c0:ab:a0:da:5b:36:ec:
9a:d0:ac:47:b7:43:8b:01:bb:b7:3b:3e:92:ee:fc:
22:27:57:04:6b:c3:b5:dc:77:18:79:00:2f:a0:45:
6a:6e:c8:69:ed:b9:09:50:47:07:94:f6:7c:0c:7c:
8d:5a:73:96:9d:46:e4:f0:ad:35:3c:e5:ee:6c:80:
af:56:3e:5d:66:a6:8c:95:85:5c:a5:da:c8:94:16:
b3:7c:34:ad:49:19:d3:6e:9a:5b:6a:81:55:de:c4:
8a:c5:f8:7b:a5:92:d0:b9:81:1d:41:c5:0e:4b:21:
7a:59:c2:bd:d2:9e:3a:08:9d:fe:92:de:b0:46:34:
dd:fd:a8:ec:f4:ae:24:a2:51:ca:4e:ba:a1:d0:3f:
27:3b:95:d6:dd:d6:06:d6:91:17:c0:2c:fb:0d:4f:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:78:1A:FB:B8:11:28:6F:E8:37:47:E2:9F:B7:FB:B9:E6:C8:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qnp4Gvu4EShv6DdH4p-3-7nmyHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:b1:a7:43:fd:ae:5a:4c:94:fb:ae:f6:ab:b9:36:e7:72:70:
76:12:93:d1:d8:6f:bc:77:77:57:73:83:62:0e:3e:d3:71:e1:
bf:c2:c0:81:e5:f7:cc:ae:b2:b3:cc:37:e2:8f:46:bc:2a:e4:
e0:8d:e8:9c:52:11:d8:a2:38:34:9f:f1:cb:6c:8d:77:3f:96:
85:a9:7e:04:df:de:ac:dd:e5:42:eb:ac:73:52:a8:85:d2:b6:
95:5a:7c:e0:60:25:c6:05:88:dc:7c:fd:b3:bb:6a:38:66:70:
3e:44:53:9c:2f:c6:38:a3:fb:11:65:75:2d:b3:59:88:d5:a4:
2b:fb:26:aa:dc:cb:d0:70:ec:f9:0e:ec:ae:44:ec:c3:13:e0:
60:a0:e5:34:04:c4:5e:32:c5:4b:dc:f7:ec:cb:0c:15:f9:a1:
ca:45:5c:12:ab:0b:81:b9:13:b2:d3:10:98:0c:b1:d0:8b:82:
ab:e2:89:0d:56:3b:40:28:ed:c9:3b:34:72:21:84:5e:0f:93:
32:d6:08:51:4d:c6:e7:0d:df:68:fb:93:bc:da:89:df:5d:86:
28:21:01:61:c2:d7:63:96:bf:17:aa:e3:5b:9e:bf:82:01:42:
9f:05:17:c2:97:04:1f:5a:11:ef:d0:7d:ed:20:74:fa:a3:78:
54:0b:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:21 2025 by rpki-client