Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kqnoRHS1TIB6fVvlJPLnnZaiUEI.roa
File: kqnoRHS1TIB6fVvlJPLnnZaiUEI.roa (raw, json)
Hash identifier: Jlvwi3YJUmZUUNBfqqHcn0cUIyRA3TUHbx8H7+AcBZs=
Subject key identifier: 92:A9:E8:44:74:B5:4C:80:7A:7D:5B:E5:24:F2:E7:9D:96:A2:50:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1B02F5CBAB95A69CFA4896843071A914
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kqnoRHS1TIB6fVvlJPLnnZaiUEI.roa
Signing time: Wed 29 Nov 2023 12:17:08 +0000
ROA not before: Wed 29 Nov 2023 12:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:02:f5:cb:ab:95:a6:9c:fa:48:96:84:30:71:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 12:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a9e84474b54c807a7d5be524f2e79d96a25042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:07:11:6c:4d:54:c3:cd:f6:55:70:b0:58:
14:51:77:18:9d:32:cf:ae:26:1e:53:f1:71:dc:d0:
36:7c:b7:2b:84:5d:b8:0b:c9:4e:ed:9a:ba:08:b7:
be:f0:2f:4f:ae:23:29:8b:0e:da:f8:cf:7e:cc:da:
4c:0e:72:3b:ae:cf:9c:b0:61:a6:6d:6a:25:2a:b9:
b2:fc:fd:b0:7c:45:ab:48:79:2c:65:12:5b:9b:fa:
c3:77:5f:e7:56:93:3d:63:05:75:a2:99:95:ec:fc:
26:ce:e0:ff:89:a9:89:47:aa:99:90:8f:8f:25:ee:
ce:75:d8:c3:c6:82:c4:fa:70:9e:6f:c6:37:ff:4a:
37:be:79:3a:3c:b5:5a:be:3f:1f:17:ca:a9:25:ac:
32:21:55:ce:55:d8:5b:98:a7:ee:b0:11:d9:87:5d:
81:73:c5:b3:79:43:72:14:9c:b9:73:80:7d:08:ee:
8c:f4:1e:c9:11:78:a0:8c:f8:9d:c5:68:6f:10:95:
14:97:e7:c8:c7:49:96:39:d5:b4:82:61:87:6e:a1:
36:13:eb:0a:48:ce:3d:1b:90:4a:88:af:a2:d0:71:
ec:17:a5:23:fb:f7:26:16:5a:10:4f:19:93:96:0d:
45:2f:a0:26:f4:92:da:08:d3:4f:04:86:a5:84:53:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:E8:44:74:B5:4C:80:7A:7D:5B:E5:24:F2:E7:9D:96:A2:50:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kqnoRHS1TIB6fVvlJPLnnZaiUEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:33:69:35:12:74:6b:73:de:a2:b2:eb:5b:29:b0:9e:a6:31:
6b:87:31:e4:ec:37:c0:f8:36:76:2c:78:02:f6:8d:ec:da:f1:
66:4b:75:14:86:44:ea:23:b0:f2:7c:40:6c:ac:b8:9b:b4:55:
59:57:2a:90:c1:05:5e:97:e9:be:51:58:c9:3e:e1:b9:da:30:
95:33:f9:11:a3:68:3d:82:68:6f:4c:b9:01:31:b2:d6:27:a4:
e4:f0:15:c3:ca:fa:83:35:c5:ed:5b:2f:42:07:70:57:d0:de:
3f:c5:46:7c:d5:14:15:e2:0f:65:5a:2d:82:aa:ce:45:b9:22:
ed:e1:1f:89:b0:ed:ae:46:55:6e:24:94:ad:24:af:7c:a9:0e:
34:46:3b:59:f1:50:f3:7f:44:25:4d:21:cd:22:e6:14:f2:a2:
eb:52:a0:68:69:58:b1:5f:f2:c2:84:c6:21:3b:1b:43:f1:c7:
0e:cc:5e:d4:28:07:81:1c:7a:b5:ac:ea:a4:2a:4f:3c:a1:73:
36:10:b8:59:87:11:99:5b:32:c6:c5:62:97:08:37:c0:f9:2a:
ad:66:2c:0d:2e:6d:90:20:9b:a8:dd:14:bb:96:5c:bc:de:fd:
7f:98:b8:f9:e3:4c:d6:80:76:36:43:d9:cd:90:f9:74:6b:31:
5e:13:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:12:22 2025 by rpki-client