Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qJ85qsl-1lhwAkzeGT-GB1ylFcQ.roa
File: qJ85qsl-1lhwAkzeGT-GB1ylFcQ.roa (raw, json)
Hash identifier: pXiSNey65eJBpwzf08befalFj2wU5+AB5bRTDPCP2sE=
Subject key identifier: A8:9F:39:AA:C9:7E:D6:58:70:02:4C:DE:19:3F:86:07:5C:A5:15:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B77E40C93456E47365CA9FDDB80DD0580
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qJ85qsl-1lhwAkzeGT-GB1ylFcQ.roa
Signing time: Sat 28 Oct 2023 20:05:15 +0000
ROA not before: Sat 28 Oct 2023 20:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:77e3:3136/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:e4:0c:93:45:6e:47:36:5c:a9:fd:db:80:dd:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 20:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89f39aac97ed65870024cde193f86075ca515c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:55:42:a7:0f:94:96:fb:d7:a7:5e:ec:aa:
ec:81:04:0d:15:46:cd:86:cc:0d:90:82:97:ae:03:
94:ae:4a:7e:e2:1b:f6:0a:95:35:f7:59:2c:27:64:
51:25:41:64:2b:71:da:58:57:0e:93:12:24:08:6c:
a4:0b:83:20:fa:fe:53:f4:e8:b2:c8:68:66:b8:91:
a2:1a:78:78:3e:cd:e0:6a:ce:4e:07:d2:8b:0f:3b:
d8:96:fe:56:00:60:50:bc:c2:b6:76:c3:96:2c:b9:
4f:e0:e5:c6:af:eb:07:2a:13:09:66:26:2b:92:4d:
63:02:a3:98:e6:f7:a4:29:a4:e6:13:b9:83:52:c7:
ec:93:00:a2:6f:52:a9:d8:63:1e:94:23:31:fa:c3:
89:da:b0:b5:17:33:80:05:d2:04:41:9f:35:34:3e:
1f:f6:97:27:d3:59:66:94:93:5f:3b:fb:3b:6c:3c:
f4:a1:8c:21:ec:16:58:1a:22:04:5e:9a:50:53:86:
16:36:e9:82:f1:6b:6c:3d:49:d6:fc:2a:2e:2b:84:
32:08:31:32:6d:c3:4c:1b:4a:76:f0:82:91:6f:8c:
8e:89:40:f0:cf:4e:df:f4:55:5b:5f:9a:54:79:be:
38:79:5f:6c:9c:f2:13:40:98:a8:ae:b0:12:81:7a:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:39:AA:C9:7E:D6:58:70:02:4C:DE:19:3F:86:07:5C:A5:15:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qJ85qsl-1lhwAkzeGT-GB1ylFcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:d5:61:4a:00:6f:b2:ca:32:d5:37:e2:6c:2d:09:52:5f:9e:
9f:a4:f7:48:ff:3d:40:32:16:66:b7:16:73:06:9f:98:d1:ae:
a8:e3:ed:cc:11:3c:7e:b3:11:16:2a:92:12:7d:b9:cd:76:67:
67:b5:90:ec:3b:6a:14:06:bc:06:a6:61:b1:3b:db:db:47:df:
a3:ab:f6:17:bb:8d:41:9d:3b:ac:46:48:03:c0:f4:3f:ca:31:
ef:a8:e8:12:33:f2:2d:1e:10:2b:49:5a:30:89:36:70:c4:20:
16:10:c6:c2:79:47:e1:bd:b2:51:d4:0c:5c:48:47:8d:28:57:
19:3f:5d:60:4a:d6:6b:0c:10:97:37:af:43:78:eb:18:81:e5:
69:b7:52:0f:e2:3b:95:d1:cb:67:bc:7b:b3:1c:92:5a:28:88:
a2:63:29:27:f7:66:92:b2:bc:21:27:f3:36:2c:bb:04:da:00:
84:00:4a:03:a5:75:8a:bb:e7:77:6d:25:87:bd:64:74:11:98:
27:ba:13:0a:0b:22:2f:77:76:55:a3:5d:06:86:a3:14:99:b0:
95:ba:27:fe:69:dd:12:9c:16:e5:03:31:51:c3:32:b5:30:d2:
8e:c2:0f:7d:7c:d9:4c:82:5c:20:4f:3c:8c:5c:f0:d8:1b:bf:
2d:99:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:44:04 2025 by rpki-client