Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f_Q0-2-s7TDKn3exQROLY9CIdXE.roa
File: f_Q0-2-s7TDKn3exQROLY9CIdXE.roa (raw, json)
Hash identifier: BnSOG4Hp/qMdo7cSHZfunAPkMs4FUCPat0IG3w0Gdpc=
Subject key identifier: 7F:F4:34:FB:6F:AC:ED:30:CA:9F:77:B1:41:13:8B:63:D0:88:75:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1E662B837D2A639E9C21C8848CE1F080
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f_Q0-2-s7TDKn3exQROLY9CIdXE.roa
Signing time: Thu 30 Nov 2023 04:04:21 +0000
ROA not before: Thu 30 Nov 2023 04:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1e66:1f8a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:66:2b:83:7d:2a:63:9e:9c:21:c8:84:8c:e1:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 04:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff434fb6faced30ca9f77b141138b63d0887571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:38:eb:28:9e:d3:55:32:b0:92:b4:ad:c7:
17:d5:95:b6:06:17:1a:cb:ee:27:4b:5c:5b:80:b7:
23:e2:6a:47:c2:f8:ab:07:05:a2:37:16:9c:fc:f1:
69:96:83:94:1b:60:be:60:f3:e7:af:fa:53:fc:16:
96:e6:17:0e:56:69:38:b4:81:c5:d6:e6:9a:04:70:
31:3e:00:1b:5f:30:37:ea:7e:09:cc:8f:29:7e:70:
f2:cf:53:e9:17:4e:2e:d5:fa:f9:d4:3e:df:58:aa:
e0:95:f9:91:3c:1d:30:1b:da:31:84:0e:c0:ac:f3:
6b:95:c8:12:cb:87:8e:00:51:aa:fc:b5:00:8f:30:
2c:b8:40:e4:3b:2d:9f:6f:31:50:7a:e7:77:d9:05:
db:d5:5e:52:3c:43:1c:64:c7:4d:a2:4f:41:2a:8d:
7f:dc:6f:21:5f:69:ce:67:8a:e4:ff:1e:d2:ad:8c:
49:c7:25:fa:9d:12:12:38:7c:9d:56:2c:38:5a:59:
10:42:b7:e3:4d:8f:b0:c7:73:6b:de:8e:8a:e2:70:
c2:16:4e:98:6a:c7:38:2b:14:db:83:de:7e:c7:20:
84:33:9d:d8:0e:26:e1:dc:11:aa:bd:f4:9b:06:32:
4c:76:8f:50:3c:bb:ba:50:e2:f6:2b:49:19:6b:50:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:34:FB:6F:AC:ED:30:CA:9F:77:B1:41:13:8B:63:D0:88:75:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f_Q0-2-s7TDKn3exQROLY9CIdXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:6f:5d:35:d0:84:84:eb:4d:b2:cd:f1:c5:19:a6:59:44:e8:
73:14:3d:3f:a5:e7:25:7b:06:26:1f:dd:ab:f3:0b:b2:9a:5a:
97:70:fc:ac:d5:8a:0e:7b:ec:d9:97:2d:ba:b7:2b:bf:a2:0f:
fc:30:19:32:d7:ce:bd:47:1d:bd:59:95:43:64:b5:35:f9:25:
57:ab:3b:c3:7b:06:f6:fc:28:18:fe:7a:5c:af:7e:9c:9c:ae:
5b:83:d1:da:c2:f8:31:6f:87:7d:db:9d:4d:13:d8:d4:71:47:
0f:25:5c:12:3e:a8:a7:aa:ee:50:e5:fe:88:30:ee:b7:f7:25:
34:12:8a:34:03:4b:1f:bb:04:72:41:81:58:fa:8a:e4:9b:38:
28:fb:e5:9b:e8:d9:c4:4f:9b:d8:f2:03:0b:03:21:9e:77:3b:
25:df:27:0f:2f:d7:cd:92:eb:c8:89:65:94:b7:64:ab:8f:45:
f1:89:da:5a:fd:fb:6c:4c:17:ed:26:50:9f:ba:ed:92:2d:dd:
50:2d:da:d9:1c:e7:42:5e:b0:fb:cf:1f:63:5b:d5:c7:2a:73:
2d:19:20:9a:2f:1c:e1:e4:d6:9f:88:86:e8:1b:30:ae:c6:9a:
59:81:d3:87:f0:fc:c7:5a:52:ce:15:3d:86:1e:5f:4b:25:f8:
d4:fb:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:47:04 2025 by rpki-client