Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XQSLyeFNwByCGqrfCFLvrKfXd60.roa
File: XQSLyeFNwByCGqrfCFLvrKfXd60.roa (raw, json)
Hash identifier: vWQs4twyV4Pix1PezFDuvxSpNN2MCcg1WWY71jaLMsg=
Subject key identifier: 5D:04:8B:C9:E1:4D:C0:1C:82:1A:AA:DF:08:52:EF:AC:A7:D7:77:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE827D8C0ED44495AD38F5C253C1FDBD3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XQSLyeFNwByCGqrfCFLvrKfXd60.roa
Signing time: Sat 30 Sep 2023 22:13:59 +0000
ROA not before: Sat 30 Sep 2023 22:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e8:27:d8:c0:ed:44:49:5a:d3:8f:5c:25:3c:1f:db:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 22:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d048bc9e14dc01c821aaadf0852efaca7d777ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:3e:89:86:4f:cc:d6:10:29:e3:c9:4f:5e:
c9:0f:28:04:ad:4c:51:2f:84:7d:49:fe:b1:0e:2b:
01:a4:6d:85:07:64:27:65:d6:31:e9:33:70:01:75:
13:7c:a4:57:d6:00:b7:14:bc:1e:84:63:ba:d5:ac:
cb:15:30:90:b5:85:f8:7d:e0:cc:9b:73:db:57:0b:
89:73:97:01:c3:81:36:4a:7d:7d:99:d9:a1:15:9a:
7e:f4:66:98:b8:40:90:94:07:11:65:c3:94:da:92:
76:aa:59:60:b9:76:f8:0f:f0:a6:c8:b1:13:a8:2b:
c5:0f:e4:d2:3a:d7:a8:e6:21:92:46:a9:f6:2b:ac:
fc:b2:59:c1:6a:3c:aa:4a:4c:35:df:da:e5:30:9a:
f3:a9:05:8a:10:0c:16:86:96:e1:a8:57:1e:42:9b:
37:5a:51:6d:9f:4c:ff:c7:d0:76:5a:07:5d:28:ae:
b5:78:56:db:07:75:f8:79:ee:7f:83:49:e6:c4:09:
7c:5a:7b:74:ca:2f:c2:b6:2e:bd:7f:16:99:f8:68:
19:64:79:59:9f:17:49:eb:b0:83:2b:9c:76:3f:9b:
b7:24:4b:e1:d6:9f:95:9e:e8:6a:1e:2b:21:5a:94:
ef:66:c1:55:fa:cd:84:f0:a0:eb:0f:ee:48:0c:13:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:8B:C9:E1:4D:C0:1C:82:1A:AA:DF:08:52:EF:AC:A7:D7:77:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XQSLyeFNwByCGqrfCFLvrKfXd60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:69:a4:17:8d:fd:ed:06:e5:ea:5e:1e:fd:40:57:89:61:89:
7d:a0:21:66:9c:00:ba:9b:80:03:ee:f8:3e:d9:ff:91:a5:98:
c3:44:95:78:ca:9d:69:16:0f:b8:55:d2:6d:23:67:c6:31:91:
67:99:36:91:ac:c3:33:31:0c:36:f8:a5:86:d5:90:7e:75:5e:
99:90:8d:64:e3:ba:96:c7:60:9b:16:b7:ca:b4:6b:fb:89:79:
90:73:0c:a5:6d:e8:e5:48:25:22:0a:c0:96:e5:bc:a4:5a:44:
e6:9c:f6:7b:25:78:7a:4c:23:1d:3a:89:c1:12:44:91:69:90:
bd:78:2c:d4:24:72:0a:1d:bf:eb:10:a7:63:a9:0f:98:33:9f:
1d:59:62:d0:75:f6:f2:20:53:29:a9:b9:05:7b:a4:b5:2b:50:
72:6f:c0:35:df:2d:77:e9:f9:08:c2:c5:9d:86:7e:6c:10:99:
24:c7:2d:a2:8f:ff:11:fc:09:0b:6f:12:2c:9b:1a:37:80:95:
7b:9b:8a:a8:b0:1e:c9:e2:2f:be:16:ce:58:51:4c:b6:da:fc:
68:bb:86:f3:90:b1:4b:e2:2b:46:60:25:95:cb:95:80:d9:9e:
11:c7:94:53:a1:8c:56:24:bd:7d:59:93:40:c5:02:f4:1c:ba:
96:65:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:50:18 2025 by rpki-client