Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q5JUgMjZXyHyWRNxf6hQQW8tGcs.roa
File: q5JUgMjZXyHyWRNxf6hQQW8tGcs.roa (raw, json)
Hash identifier: IenuO94LzsRuspT60QcfCFDrh4YgIoqkIA0TslKn3Eo=
Subject key identifier: AB:92:54:80:C8:D9:5F:21:F2:59:13:71:7F:A8:50:41:6F:2D:19:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBA6E10B2656D3D00B9C313281108C9F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q5JUgMjZXyHyWRNxf6hQQW8tGcs.roa
Signing time: Fri 10 Nov 2023 18:10:57 +0000
ROA not before: Fri 10 Nov 2023 18:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:6e:10:b2:65:6d:3d:00:b9:c3:13:28:11:08:c9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 18:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab925480c8d95f21f25913717fa850416f2d19cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:6f:3a:91:cb:b8:3a:04:e3:d2:78:14:59:
62:a0:b6:41:8e:c4:1a:d3:fc:9e:94:65:71:6e:cb:
0b:6c:96:2f:b8:4b:bb:23:9c:54:ac:b3:9f:fb:0b:
dd:05:7f:b1:50:42:59:fb:46:6f:36:36:8d:c0:41:
58:36:1e:92:35:24:60:a5:14:ff:d4:64:df:8f:f5:
9d:7e:03:0e:95:14:f8:8a:e5:19:61:35:18:4d:7e:
f0:46:56:da:42:09:02:16:a7:17:c6:40:01:39:25:
eb:68:6b:e6:53:c8:6c:74:4e:2c:c7:0a:3b:61:25:
48:f5:22:fc:ad:a7:1a:e7:69:06:b8:ad:14:77:58:
ed:85:ba:ab:c8:a3:d6:fa:1c:45:cf:61:69:4f:c4:
5b:50:b6:2d:40:c9:f9:e3:0c:0f:a6:48:58:08:03:
3d:5a:8b:c9:70:52:94:ca:4e:ee:e1:0d:22:f3:f9:
d9:2d:a8:e2:6b:0d:d3:6c:fc:5b:c8:f9:59:e6:79:
61:54:a7:d3:e5:10:55:8c:92:73:0f:56:e5:ef:04:
7a:de:70:0b:1f:7b:94:8a:62:ba:8f:77:6b:c5:cb:
09:d3:89:83:d0:ea:cb:f9:1b:e2:d2:3a:9e:eb:b5:
bc:ac:74:ac:c1:d3:77:3e:f8:6b:02:89:ff:57:23:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:54:80:C8:D9:5F:21:F2:59:13:71:7F:A8:50:41:6F:2D:19:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/q5JUgMjZXyHyWRNxf6hQQW8tGcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:87:eb:61:20:3b:ec:46:1e:8d:65:a1:be:85:69:80:61:e0:
da:20:e0:76:60:70:69:8b:ae:2c:a9:02:de:3a:81:b2:e6:70:
ac:b0:31:67:08:69:1b:a8:72:08:6b:5a:56:ed:c7:be:fe:1d:
fa:79:81:e9:47:c2:cc:78:9a:93:00:6f:58:fd:23:b4:8c:b3:
5f:d4:1e:6f:a1:75:22:0c:fe:27:92:41:9c:f9:83:1e:0b:17:
33:4a:09:68:77:63:21:43:4f:48:c6:56:59:5d:ff:39:2c:b0:
6f:96:24:e4:12:33:89:d1:ae:9a:20:56:13:13:da:c8:cc:b3:
7f:b7:72:01:32:4c:18:bd:69:68:3c:3e:7e:04:0b:03:c3:bb:
4d:f5:46:37:b1:af:56:86:67:d1:e9:60:e4:01:d9:8f:e5:52:
ac:7f:6c:d8:5a:66:aa:62:ef:e1:ac:d6:2a:de:fc:ed:90:74:
f3:92:f4:b2:9b:f6:f1:9b:d5:13:bf:a8:4a:37:45:e3:e9:28:
8e:59:cf:2d:6b:74:da:bb:5a:cd:f8:02:db:7f:07:b3:ad:05:
5a:a3:f3:13:a7:57:fb:27:20:b1:6a:5f:21:b2:17:bb:b0:a7:
38:8c:fa:ec:97:88:fe:38:91:b6:d2:d6:3b:8c:76:c9:9c:76:
a8:02:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:38:23 2025 by rpki-client