Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QqaqZ7A2XKYI-cLchQSH-t31r10.roa
File: QqaqZ7A2XKYI-cLchQSH-t31r10.roa (raw, json)
Hash identifier: bXGldvAyG8SGDyfx85J8tggu2Ycgs6dMHYb1WZKYPhQ=
Subject key identifier: 42:A6:AA:67:B0:36:5C:A6:08:F9:C2:DC:85:04:87:FA:DD:F5:AF:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B02BAE1C45F6DB1C2CE24AB8470531CBA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QqaqZ7A2XKYI-cLchQSH-t31r10.roa
Signing time: Fri 06 Oct 2023 02:04:43 +0000
ROA not before: Fri 06 Oct 2023 02:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2ba:526f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:ba:e1:c4:5f:6d:b1:c2:ce:24:ab:84:70:53:1c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 02:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42a6aa67b0365ca608f9c2dc850487faddf5af5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:1b:db:12:60:27:0f:be:84:5e:b0:c1:83:
36:a0:9b:a2:4a:43:5b:53:94:7e:db:60:66:a5:a9:
47:b4:df:7b:b1:72:b5:e9:6f:67:9d:30:1a:85:b6:
75:6e:20:9c:45:4f:e7:ed:71:f0:64:34:97:38:20:
cf:fc:19:04:c1:d5:4b:e0:2c:86:25:fe:c1:18:2c:
bf:46:a6:32:83:ce:cb:70:8e:22:d7:cb:e5:97:16:
45:4e:9c:7a:a8:97:42:cc:12:14:97:17:88:f5:b3:
2c:c4:a2:69:c4:ae:b3:67:44:24:d1:40:15:59:06:
54:f9:49:b8:3a:c0:1c:a4:f6:47:53:72:d4:a2:73:
8f:ee:8b:76:25:08:66:10:4f:76:01:84:5b:84:7b:
8b:36:e1:31:60:b1:42:fb:8e:43:27:e4:91:d1:7d:
8a:b0:c3:f0:7a:06:9b:7d:46:6c:59:81:24:8a:7e:
e4:7e:08:77:b6:61:11:e2:22:38:16:f2:94:ef:5e:
89:46:59:35:43:55:ef:ae:c8:4e:62:df:3a:9d:1f:
a5:4e:ac:b6:d9:90:bd:b0:7f:a5:e5:a7:cd:2a:0c:
46:a3:48:24:03:b8:55:e4:4d:b4:e1:4e:c1:c4:9f:
1a:90:92:ad:25:e5:4a:3d:bb:2c:a7:c8:20:88:40:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:AA:67:B0:36:5C:A6:08:F9:C2:DC:85:04:87:FA:DD:F5:AF:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QqaqZ7A2XKYI-cLchQSH-t31r10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:10:3c:69:ca:bd:98:43:0c:ec:5d:93:f2:d5:62:65:eb:58:
82:ed:9c:a8:e9:01:6c:a8:e3:43:86:25:fb:ea:93:8a:8c:7c:
72:11:8d:1a:36:9a:33:2b:19:c5:d8:d0:61:8d:3d:e5:00:fd:
e5:e0:b8:c7:62:73:32:ee:ab:ae:a0:69:f1:4c:5c:f8:f4:80:
27:30:1a:f7:de:53:c4:5d:0b:06:13:51:26:0b:06:24:8c:f6:
bb:73:b2:40:83:04:de:ca:66:c1:6c:b7:8e:ac:d9:eb:b9:f8:
0c:49:95:f3:f1:79:53:76:eb:14:25:d0:93:a9:c9:62:c2:fc:
b0:9a:84:07:60:c9:c9:12:25:d5:c1:ee:5b:e8:58:46:91:7b:
e9:78:48:b8:85:dd:93:e9:14:79:c9:5c:c8:89:64:bc:30:a7:
1a:6d:7e:5a:d6:02:73:ba:6f:ea:d3:7d:17:9f:68:b9:6e:e3:
4a:18:49:12:d6:42:d4:b4:1c:61:80:e7:d9:f4:6c:43:f7:21:
d4:cd:bc:d5:6b:9a:e1:5e:59:73:ba:e9:ee:8e:78:3b:14:b3:
96:e3:fa:4d:30:12:5b:37:43:16:8a:16:a8:dc:e9:72:21:c2:
b2:34:7b:21:3f:f3:e0:bf:12:56:a8:05:ca:8d:dd:72:2c:6b:
79:0a:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:12 2025 by rpki-client