Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qEs5jupza6_cz38zvzrV47j5Agk.roa
File: qEs5jupza6_cz38zvzrV47j5Agk.roa (raw, json)
Hash identifier: nQCyBkQnjJDcGVFzDfD/RlbKl9ZaeDjpGZh5SjBgg+w=
Subject key identifier: A8:4B:39:8E:EA:73:6B:AF:DC:CF:7F:33:BF:3A:D5:E3:B8:F9:02:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7DE62263DC0438C95013040B439D146F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qEs5jupza6_cz38zvzrV47j5Agk.roa
Signing time: Mon 30 Oct 2023 00:05:15 +0000
ROA not before: Mon 30 Oct 2023 00:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7de5:4c0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:e6:22:63:dc:04:38:c9:50:13:04:0b:43:9d:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 00:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84b398eea736bafdccf7f33bf3ad5e3b8f90209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:ad:73:aa:eb:97:de:b2:ae:36:5e:06:32:
92:fa:dd:ad:62:d0:da:d4:bb:f0:f6:4a:0f:12:62:
eb:73:c8:73:7e:df:2a:09:dc:da:9e:27:d6:05:63:
9f:de:82:57:be:ee:5f:5f:2d:e4:5f:33:b1:2c:3c:
c0:4f:40:c8:a0:66:9b:20:71:d3:1b:2f:3d:a4:a2:
56:51:ac:2c:ee:53:f3:36:30:c8:6a:e9:b1:ba:dd:
bd:e4:e9:4a:16:d4:78:30:31:bb:13:8f:af:87:71:
e5:fb:f0:e2:73:a3:f1:9a:12:a5:ed:90:c5:57:2b:
99:42:06:ca:89:e9:a9:23:3c:a2:db:6d:d1:7c:32:
05:c9:ea:1f:14:1d:b7:c3:93:bf:6b:94:98:2e:8e:
10:93:76:8d:e6:e2:33:b4:dd:a6:0e:5c:ad:8f:ac:
a4:7a:5c:e5:db:21:0a:5d:fe:df:30:c6:0a:f9:7d:
e9:12:e0:70:f6:81:3b:fe:4a:94:16:31:a2:4a:32:
ba:87:83:74:9d:40:bd:7b:07:0f:c7:ef:38:d5:4d:
76:06:ab:ba:27:1e:fa:41:a6:57:84:54:27:92:16:
0b:8f:61:74:7d:63:e4:e1:34:a1:34:38:1d:2f:75:
07:c9:d3:ac:73:c8:df:d3:a6:77:bd:e4:44:47:65:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:39:8E:EA:73:6B:AF:DC:CF:7F:33:BF:3A:D5:E3:B8:F9:02:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qEs5jupza6_cz38zvzrV47j5Agk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:67:4c:f7:a9:91:85:8d:9c:bd:02:62:1a:23:db:51:fd:4b:
8b:c4:23:ae:08:7c:ce:1d:58:24:99:df:9f:a4:9f:ab:0f:59:
4a:ba:24:6f:aa:a0:bd:7f:16:1a:b6:c8:29:d4:06:2b:58:6f:
ae:60:a5:7a:39:8d:fa:7c:51:40:dd:0e:69:4b:41:e8:5c:da:
dd:55:14:32:ea:26:0f:59:c0:ce:37:aa:89:db:f3:ab:54:1f:
f0:e9:f2:0e:6a:cf:9f:87:0a:9b:77:40:14:ad:17:46:85:8e:
83:a6:0b:2a:50:ff:26:0d:f3:99:32:2c:90:e6:73:80:b1:aa:
e9:2d:70:88:27:86:8d:71:34:e3:62:49:7f:9f:07:f6:4a:94:
36:96:da:28:98:5c:19:83:8d:13:cc:8a:25:e1:26:97:61:98:
f7:03:5e:57:eb:7f:63:9e:5b:3b:d9:4d:e8:b5:e3:72:24:24:
ee:ac:f2:3c:a7:11:b1:07:06:40:5f:9c:1a:72:1a:e1:50:16:
f2:06:ea:ca:e8:85:e6:ea:af:1f:1b:61:91:c6:b2:97:a3:a1:
a7:f2:8c:0e:e6:21:e6:51:b0:8b:1f:fc:99:8c:63:5a:00:24:
84:63:c3:6f:ee:2f:9b:d4:3a:10:d1:25:6f:c5:7e:23:00:b7:
95:ad:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:15:36 2025 by rpki-client