Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qMt5WDWSRN0A9XMy8MDy0303OYM.roa
File: qMt5WDWSRN0A9XMy8MDy0303OYM.roa (raw, json)
Hash identifier: s0Y4PgToqde4qTmOyUrU5oFVBtA+7IItWsm0D/V0c4g=
Subject key identifier: A8:CB:79:58:35:92:44:DD:00:F5:73:32:F0:C0:F2:D3:7D:37:39:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B72FEB0CB16CB440CA9008E8BD876DD07
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qMt5WDWSRN0A9XMy8MDy0303OYM.roa
Signing time: Fri 27 Oct 2023 21:16:15 +0000
ROA not before: Fri 27 Oct 2023 21:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:fe:b0:cb:16:cb:44:0c:a9:00:8e:8b:d8:76:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 21:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8cb7958359244dd00f57332f0c0f2d37d373983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:16:3c:51:c6:3b:af:bd:83:0c:77:1d:eb:
0f:3d:21:0b:2f:90:75:8c:fd:5c:56:d3:df:17:7e:
09:a7:45:61:c5:b7:a6:95:92:11:0e:f6:59:04:6f:
0a:8c:52:b1:aa:b6:bb:2d:6e:42:f2:06:67:07:69:
3b:9b:4f:b3:df:ef:0a:9d:96:cb:e2:16:19:09:0d:
51:51:63:d6:b3:99:d0:db:3a:82:60:20:7e:d6:ed:
05:00:37:98:be:3c:2a:03:47:12:12:da:cf:c6:16:
da:61:05:54:a7:02:f4:74:cd:46:c4:e3:49:91:8b:
1a:43:87:4d:ae:8c:b3:67:10:4e:61:1d:38:e9:88:
d0:82:e1:36:f1:d7:a6:a6:3f:42:36:32:16:7e:fb:
d4:a2:82:34:46:92:55:d3:25:15:33:84:ea:10:43:
87:96:c6:76:42:20:d5:a2:e0:9c:2b:ef:d4:b9:8a:
e5:95:df:59:cd:b1:e5:ec:6c:ed:2e:a2:d2:53:63:
b4:d4:c5:21:c1:99:a9:dd:34:be:a5:93:c0:36:ee:
2c:72:f1:bf:e5:93:b7:36:ac:92:e0:4a:57:4e:4b:
34:dd:2e:32:6a:cb:b4:04:50:6d:be:55:6a:92:9d:
6e:bb:4b:1d:c3:b5:bb:50:96:51:f0:a5:65:ff:ab:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:79:58:35:92:44:DD:00:F5:73:32:F0:C0:F2:D3:7D:37:39:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qMt5WDWSRN0A9XMy8MDy0303OYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:44:13:43:b0:fd:c2:32:a4:bc:60:f8:79:d9:1b:bc:e5:55:
88:20:24:a3:53:d6:c8:0c:c9:27:6b:0b:3c:ef:1f:4c:8d:ef:
84:1e:fa:84:f4:68:a6:d9:78:36:f4:4d:f3:c1:1d:9a:26:2d:
dd:b1:30:12:2a:4f:52:ba:e6:6f:a3:67:1e:50:1f:2c:e1:b2:
89:4a:99:b5:0b:88:ca:bc:8e:8c:99:10:37:ee:19:5c:e4:c4:
ca:89:f8:23:b3:50:81:fe:01:68:1f:80:89:25:72:6b:c7:3e:
73:03:ce:0c:bc:93:5d:74:6c:f5:b8:21:9b:6c:bc:fa:1b:15:
24:bb:ca:2b:d5:f0:26:24:3c:1c:75:14:50:a4:8f:39:61:39:
6f:94:a0:51:55:61:70:bc:be:45:00:72:43:b1:66:11:47:d7:
ec:1c:64:47:f5:b9:f8:4e:92:fd:1f:38:6c:10:c8:09:f7:03:
50:6b:48:36:4b:b0:70:63:83:d9:4b:03:47:eb:49:dc:4f:81:
41:f0:dc:6c:5d:a7:8e:3e:c2:d6:4b:6e:e2:42:7b:bf:f8:4c:
2c:40:3d:0b:c8:e3:4c:d7:31:ab:4b:40:d1:dc:43:5b:14:e1:
d4:1d:d6:15:f5:c9:e5:66:d6:0d:ee:d9:e2:6b:e8:ea:33:16:
fd:da:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:53:51 2025 by rpki-client