Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qR6-aDWLj6QZ11T7e2Cbp7qsX1E.roa
File: qR6-aDWLj6QZ11T7e2Cbp7qsX1E.roa (raw, json)
Hash identifier: +aKCLLZz7Z7sT5dLl0U9qXn6BFCAGXNL3FvLOba+f3M=
Subject key identifier: A9:1E:BE:68:35:8B:8F:A4:19:D7:54:FB:7B:60:9B:A7:BA:AC:5F:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B33B0A1BF6E2F333529FB7F32D73D6528
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qR6-aDWLj6QZ11T7e2Cbp7qsX1E.roa
Signing time: Sun 15 Oct 2023 14:14:55 +0000
ROA not before: Sun 15 Oct 2023 14:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:b0:a1:bf:6e:2f:33:35:29:fb:7f:32:d7:3d:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 14:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a91ebe68358b8fa419d754fb7b609ba7baac5f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:a6:65:66:ef:a5:2c:ba:59:d0:69:de:78:
16:54:f4:ad:1c:26:ff:10:03:ca:18:93:ab:0a:c1:
aa:b7:45:eb:d9:7c:29:56:4b:0c:21:8b:18:ee:e5:
c6:7e:da:68:60:a4:6f:49:93:cc:76:f6:de:44:58:
fd:b6:fe:c0:0a:d8:e4:5e:49:21:5c:43:15:ca:1b:
67:59:56:61:dc:2e:b3:9f:24:66:92:96:a3:48:4c:
03:e9:fe:d6:00:9b:95:75:f8:07:c7:ce:ef:b4:69:
93:9a:cd:e4:af:66:9d:b4:fd:91:0a:ae:19:db:a5:
b3:ca:60:de:98:b6:3c:9e:6a:9a:2f:0b:61:41:10:
cb:47:38:73:84:d4:d5:fb:70:ec:25:4d:cd:fc:c7:
43:f7:71:73:f9:01:56:81:a2:81:05:c1:f6:0a:81:
c9:95:49:e1:ce:04:4d:38:d2:97:21:ed:ee:af:86:
bd:af:8b:d2:71:36:92:08:2d:1c:9f:d5:48:90:e5:
22:46:40:37:70:92:0e:6a:a1:c6:ff:92:65:77:36:
19:47:e6:ec:d8:72:8b:00:d6:5a:d4:d2:64:72:a2:
a6:04:16:54:1f:c9:57:19:e1:72:63:5a:52:2e:50:
3f:86:ba:61:81:6b:39:93:b9:ab:90:0e:ba:10:fd:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:BE:68:35:8B:8F:A4:19:D7:54:FB:7B:60:9B:A7:BA:AC:5F:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qR6-aDWLj6QZ11T7e2Cbp7qsX1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:62:41:98:d7:b0:df:23:b1:3c:a2:c6:7e:41:11:16:0c:de:
d2:ec:24:5b:3c:b7:2d:76:12:16:ca:32:b0:8a:03:41:ec:3a:
8c:39:14:95:62:ec:b0:f9:c1:7f:f7:b7:c9:39:da:02:67:bc:
4e:2d:ce:f9:cf:90:d1:30:1a:ae:30:fa:6e:08:fb:01:7c:c0:
cf:03:eb:bb:99:08:d0:15:ed:f6:3c:97:20:a1:94:0e:b2:d0:
c7:bc:db:74:76:81:5d:85:bd:c0:e9:fa:15:e2:4e:ac:9a:dc:
98:51:e9:37:08:b4:a6:60:cf:63:46:99:d5:28:5c:aa:fb:af:
ee:9a:21:5e:4b:bb:ba:49:12:f9:5d:27:b7:72:4f:c6:98:9b:
b9:9c:f7:72:5f:ea:9e:5e:db:a4:74:1e:33:32:8d:4d:21:5b:
0d:b4:06:9a:95:2e:0d:8b:3f:95:63:69:3b:c6:f2:2d:ea:ab:
04:2c:58:ce:6f:4b:3c:59:c4:20:cb:98:97:01:42:00:97:9e:
1b:e7:65:f2:b5:12:23:ac:84:3c:cb:20:6e:3d:99:74:cf:c5:
3a:e3:50:f3:f6:54:66:05:8f:8b:f7:71:79:5b:92:44:39:96:
64:29:39:1e:07:6e:9e:66:94:ea:c1:6d:de:63:30:c3:04:3d:
08:6c:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:39:36 2025 by rpki-client