Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q55iudoaDGzcjFn_hoJas8hBocs.roa
File: q55iudoaDGzcjFn_hoJas8hBocs.roa (raw, json)
Hash identifier: eSenrphdgTO7ZU9rWtc4z8NowdWK5LLtquWmlsFHpiQ=
Subject key identifier: AB:9E:62:B9:DA:1A:0C:6C:DC:8C:59:FF:86:82:5A:B3:C8:41:A1:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2E102E27BB71FF84D5FFCE82130B78E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q55iudoaDGzcjFn_hoJas8hBocs.roa
Signing time: Sun 03 Dec 2023 05:04:21 +0000
ROA not before: Sun 03 Dec 2023 05:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:2e0f:f463/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:10:2e:27:bb:71:ff:84:d5:ff:ce:82:13:0b:78:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 05:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab9e62b9da1a0c6cdc8c59ff86825ab3c841a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:2e:3e:17:b3:f5:d5:30:00:d7:2b:08:c5:
a6:40:b1:16:b0:88:cd:99:19:5f:a9:a8:8b:b8:9b:
f0:75:70:ff:fa:ba:f3:9c:45:f7:9b:0b:cf:e0:45:
2d:e5:b2:19:40:1a:2c:98:bb:50:a8:8d:a7:2c:0a:
da:48:c9:ee:f3:95:d4:02:e4:28:9d:38:59:a5:fb:
a6:be:e0:7a:d3:cb:44:bd:3a:59:63:fb:98:4f:61:
1f:c8:4c:5a:68:3d:7e:3c:63:2e:f1:63:c5:b2:47:
2b:cb:29:8f:94:93:cf:47:2d:3c:75:eb:99:4e:fb:
76:04:b3:9d:34:b3:be:f8:31:bb:04:77:25:84:9d:
67:72:54:e1:93:52:98:32:8a:4f:96:bc:5b:49:90:
46:23:c6:ce:05:a4:f2:29:f4:f5:8e:fc:ca:0b:56:
af:ad:6c:ad:e4:e6:4a:c4:7c:36:3a:d2:01:88:79:
65:da:ff:58:7a:76:03:c2:3e:7d:f0:39:90:5e:21:
c6:51:6c:a7:b8:f3:15:bf:76:ca:95:f9:b5:fc:06:
8a:26:e2:28:da:9b:dd:07:ea:51:42:63:2a:14:be:
7d:58:cc:b7:2b:6e:46:8c:94:f7:97:cd:88:ab:96:
fe:07:54:6d:65:51:e7:16:c0:25:82:7f:2c:d5:c5:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:62:B9:DA:1A:0C:6C:DC:8C:59:FF:86:82:5A:B3:C8:41:A1:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q55iudoaDGzcjFn_hoJas8hBocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:1e:11:15:7e:6d:fa:76:6d:fc:6f:11:1c:04:0f:91:5b:0c:
b8:97:79:1a:3a:2d:71:1e:b2:e0:e4:68:79:68:0a:fa:72:03:
28:3e:cc:cc:10:59:fd:ca:8d:20:f9:9a:85:c6:ad:38:02:9b:
1c:cc:fb:bc:73:54:0a:36:c2:99:54:6f:81:45:43:70:c4:5d:
f8:8e:d1:62:95:48:23:00:95:97:1a:a8:68:a8:6d:40:3b:8f:
f8:c2:b6:05:20:78:2e:97:94:80:cc:68:19:17:f1:4d:3f:8a:
65:82:7d:75:a2:88:85:ec:60:21:39:13:c1:81:38:38:90:2c:
fb:75:b7:5c:67:89:a6:8b:43:2c:63:61:ce:ab:d5:8c:63:97:
6c:2f:27:a0:21:e1:48:90:be:0e:e7:d3:c1:3f:82:6e:cf:e6:
e2:54:6c:9e:4c:d9:70:77:b7:e9:f4:8a:a9:bd:2d:46:93:00:
00:8e:e8:93:61:90:ef:10:86:57:cb:80:35:dd:f1:a7:db:d6:
9e:6c:62:ed:69:c2:a4:24:4a:2c:12:fa:33:43:70:03:a2:11:
09:7c:ac:de:3b:cd:30:93:42:cf:89:13:79:f9:cf:7b:35:b7:
9c:0b:a2:0a:b5:d1:4a:f9:2f:66:43:22:40:98:ec:03:91:5c:
fb:c3:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:15:44 2025 by rpki-client