Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQD1hpucbDh0r0U3IfxasmjPccM.roa
File: cQD1hpucbDh0r0U3IfxasmjPccM.roa (raw, json)
Hash identifier: EDXGpYNVpvJoTRwb0p66X6uf6krpt9natEuIqAypVMc=
Subject key identifier: 71:00:F5:86:9B:9C:6C:38:74:AF:45:37:21:FC:5A:B2:68:CF:71:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B75C43B332218D0F77446EB2A7E901977
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQD1hpucbDh0r0U3IfxasmjPccM.roa
Signing time: Sat 28 Oct 2023 10:11:16 +0000
ROA not before: Sat 28 Oct 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:c4:3b:33:22:18:d0:f7:74:46:eb:2a:7e:90:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7100f5869b9c6c3874af453721fc5ab268cf71c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:5e:6f:43:57:58:65:d8:de:58:5d:a3:fb:
40:7d:22:d4:d0:c2:1f:60:f8:1a:a1:4a:af:b8:71:
53:3f:c4:16:27:be:f0:79:52:2d:0a:33:11:2a:f6:
be:70:cc:12:0d:6a:e7:bf:ad:30:99:de:9f:83:a9:
df:df:a1:61:4f:c5:78:a9:76:73:67:4c:31:3f:cc:
96:30:33:4c:fa:57:10:88:a0:01:a0:29:d2:f7:e7:
d9:eb:9f:7a:d4:5f:49:ac:88:87:e7:59:ca:45:ac:
d8:b1:d8:73:a0:aa:71:ef:11:88:f5:23:68:0b:34:
89:f9:0f:39:94:f2:25:79:58:01:63:1c:1e:87:4f:
4c:bb:7f:8b:f2:cf:f6:c2:4f:6f:4f:a6:18:8e:f8:
0c:d3:5d:ee:eb:e2:96:0c:0b:f9:b6:3e:b8:f7:20:
b0:c7:e2:ea:b8:57:c7:31:ba:62:81:10:c9:11:ae:
b3:9d:bd:f2:7f:5b:9f:e9:76:24:f0:06:b4:3c:99:
47:a0:60:ef:09:f3:33:f3:97:6b:8c:34:3c:73:e9:
ad:a0:d2:0b:cb:2a:2b:a4:50:6e:91:60:0a:5f:8c:
58:41:7d:ea:8b:32:c6:8b:4b:a9:c3:60:38:30:38:
f8:04:e7:7d:04:cf:02:3c:d3:96:73:35:ef:48:3b:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:F5:86:9B:9C:6C:38:74:AF:45:37:21:FC:5A:B2:68:CF:71:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cQD1hpucbDh0r0U3IfxasmjPccM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:99:3e:f3:2a:96:b1:19:9a:c7:0e:ac:50:ca:bc:0e:c1:8a:
81:d6:ad:bd:93:83:0a:1e:78:0f:62:57:d8:b3:c5:23:b5:42:
39:3a:60:dc:bd:79:2a:c7:9c:9f:ed:cc:2d:6c:50:36:97:56:
02:01:c9:35:40:0d:33:1c:95:39:59:c8:fd:87:19:65:9c:35:
4c:c0:4a:fb:e6:0e:c4:6f:56:49:d9:53:44:73:ad:94:70:c4:
bb:15:f2:c8:5b:a7:f6:96:44:5e:ca:96:6f:1d:a0:1c:5d:da:
ca:f1:69:d3:1a:5a:95:12:20:f8:b0:0c:07:9b:2e:72:71:8f:
d4:e3:ea:8f:54:9f:ea:c5:0a:ab:d1:ad:16:e8:b1:ab:de:9e:
5c:34:66:a4:6a:59:79:a6:4f:0c:2b:eb:13:56:31:39:ea:56:
48:50:e0:af:20:71:2a:29:eb:c9:07:7d:18:2c:a4:45:ab:c5:
ca:bb:8f:fa:1b:f7:8c:91:4a:c6:00:79:83:d6:0a:04:02:38:
92:7f:b7:38:1a:1c:9d:f5:31:63:f5:c7:db:f9:41:16:5e:ba:
03:b9:c4:0e:af:e2:71:61:c6:50:07:50:03:f0:da:36:ac:44:
ca:66:eb:9b:50:34:7f:4c:f6:b8:29:45:a6:6b:62:b3:c2:60:
e0:41:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:08 2025 by rpki-client