Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qta0fmTZnZiILcs5eHArIH1IVW8.roa
File: Qta0fmTZnZiILcs5eHArIH1IVW8.roa (raw, json)
Hash identifier: Ntnt0jrv+odBxcVaLNT1VCCHlq1/Ry+Wc8AMEIoSNSU=
Subject key identifier: 42:D6:B4:7E:64:D9:9D:98:88:2D:CB:39:78:70:2B:20:7D:48:55:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1E73510D6EEC7A49D751D09833560B59
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qta0fmTZnZiILcs5eHArIH1IVW8.roa
Signing time: Wed 11 Oct 2023 11:15:55 +0000
ROA not before: Wed 11 Oct 2023 11:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:73:51:0d:6e:ec:7a:49:d7:51:d0:98:33:56:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 11:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42d6b47e64d99d98882dcb3978702b207d48556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:8e:bc:9b:a8:92:28:60:e3:5c:f2:60:c7:
a6:32:e9:d0:40:41:26:4a:e0:2e:c3:18:2d:64:9e:
e8:4e:79:c4:58:bc:ce:42:a7:c0:d8:63:a3:11:0c:
d2:8a:67:88:e6:1c:28:99:b8:73:e6:53:fd:2a:9e:
8e:28:c4:bd:67:4e:28:65:1e:c4:39:8b:91:5f:69:
7e:29:cc:cd:6e:ab:42:6c:92:ae:c1:53:00:fc:9f:
7c:eb:5b:1f:6d:a0:8a:a6:d3:d7:cc:bc:1d:ec:16:
17:8a:89:9f:2f:8e:3b:ac:f6:be:9d:56:31:fa:76:
64:30:28:43:f7:76:28:11:0f:71:f1:17:df:c0:38:
63:e3:7e:cb:fa:59:3e:cd:c0:c2:53:c7:e7:bf:02:
cc:3a:c8:08:7c:99:9a:b5:42:d3:99:d9:be:bb:07:
43:d0:f3:05:9a:94:02:77:45:7a:de:47:45:ab:8c:
0d:fd:98:c9:51:2a:60:d2:fd:19:b8:d6:57:ba:1d:
73:2b:01:70:d8:67:b3:d5:ae:45:a8:d8:4f:8b:ed:
e8:6c:5a:39:50:f7:17:99:f2:69:48:6a:8f:2b:8b:
9d:f2:50:06:da:a1:f2:c8:92:dd:c5:52:b7:ae:3b:
ed:e6:41:a2:37:df:f9:9b:36:1f:04:46:bc:4d:8c:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:B4:7E:64:D9:9D:98:88:2D:CB:39:78:70:2B:20:7D:48:55:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Qta0fmTZnZiILcs5eHArIH1IVW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:47:31:e4:12:6d:95:08:16:a1:c2:93:3b:15:a6:1c:25:be:
ea:4d:1d:be:9a:4b:bf:a5:f3:b2:ab:25:13:03:47:21:22:a8:
20:1c:c2:cb:8e:f3:13:20:21:5c:46:95:8f:2c:e1:6c:0f:b2:
d1:32:88:bf:53:42:e1:64:98:30:93:43:b6:26:71:0c:0d:f9:
22:fa:88:ff:82:b0:9c:49:eb:e4:5c:97:9f:54:7a:05:b9:3c:
18:38:be:33:82:a4:8b:e3:79:42:96:6c:2d:96:e5:8f:6d:b1:
fe:51:21:b3:c2:79:4b:8e:18:d1:d6:cd:4f:2a:eb:ad:37:9f:
ae:75:d2:21:d5:9a:65:94:01:0d:91:25:a8:fb:f8:d5:57:b3:
d4:5c:51:f1:f4:0a:5e:ec:36:98:7b:7c:14:33:ec:f6:56:00:
e7:4d:b6:4b:95:33:38:4d:fd:a8:3a:72:c7:2b:0a:b9:a1:38:
b0:c0:0d:33:0d:54:2d:c6:3f:c6:d2:c6:ef:52:5e:86:06:37:
08:04:af:37:93:83:14:3d:28:18:97:9b:1c:06:63:a3:65:53:
03:46:78:9a:ee:39:ba:ff:6b:ef:5c:b4:e7:59:d3:d4:b0:0c:
12:46:c0:bd:fd:c6:05:68:55:82:e4:65:43:9f:6a:4a:e7:0f:
e3:1a:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:50:10 2025 by rpki-client