Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qWw64aUfDsO--O6XTy6iw2GJ81I.roa
File: qWw64aUfDsO--O6XTy6iw2GJ81I.roa (raw, json)
Hash identifier: nTAPlgA/JWvlRPxyAIqZqFLB7k12cP8e47spkcpRsTA=
Subject key identifier: A9:6C:3A:E1:A5:1F:0E:C3:BE:F8:EE:97:4F:2E:A2:C3:61:89:F3:52
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD1A06FEECADD0CC1361FF2AC9EF9B0A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qWw64aUfDsO--O6XTy6iw2GJ81I.roa
Signing time: Tue 26 Sep 2023 13:14:27 +0000
ROA not before: Tue 26 Sep 2023 13:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:a0:6f:ee:ca:dd:0c:c1:36:1f:f2:ac:9e:f9:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 13:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a96c3ae1a51f0ec3bef8ee974f2ea2c36189f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:4b:a4:56:65:cf:a1:36:38:99:c9:c1:05:
28:c8:c0:47:50:21:0c:09:04:78:65:94:76:54:cc:
6a:20:e9:5a:bc:08:23:37:1b:56:9f:06:4a:57:68:
0f:7e:9a:3c:7f:b8:c1:c0:fa:4c:15:4f:48:a6:c7:
82:3a:51:29:65:b4:d9:9d:60:4e:c0:a4:d2:e4:58:
0d:c6:4d:6e:5d:e2:5b:0c:5c:e5:04:d0:56:39:ba:
b1:52:85:3d:59:4f:3b:5c:72:14:9c:10:db:8c:4c:
db:18:98:c7:33:7c:96:10:8b:9e:0a:39:10:9f:cf:
f9:47:05:86:16:1e:84:d2:57:8c:6a:8f:3c:c6:e9:
29:68:59:dd:4b:32:91:33:cd:51:b9:33:76:aa:e9:
de:14:7a:c1:fb:dc:62:aa:b3:2f:8b:15:6d:35:99:
cb:1e:41:c9:32:06:ef:5e:99:4a:cd:34:81:5b:71:
9d:49:7a:73:d3:9b:ba:f8:f9:5d:51:58:16:67:0b:
43:69:bd:73:f3:b6:c8:4f:0b:15:7e:f1:1d:4f:f3:
13:8d:a2:b8:fd:07:30:4d:bd:a1:2e:f2:1b:27:c1:
90:77:88:85:0d:4b:23:22:75:1a:16:38:7f:c5:e2:
e7:3d:fa:d8:c7:3e:f2:e4:d3:bf:a6:3e:74:a3:01:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:3A:E1:A5:1F:0E:C3:BE:F8:EE:97:4F:2E:A2:C3:61:89:F3:52
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qWw64aUfDsO--O6XTy6iw2GJ81I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:74:db:36:d2:9a:78:50:6e:85:15:aa:17:89:98:53:41:0e:
88:27:4d:e1:46:68:57:cf:a3:03:ce:bb:de:99:c1:3b:d9:14:
99:83:5c:97:a2:d2:9b:f5:fd:32:e7:9f:33:32:08:b9:1e:45:
5c:dc:13:73:bc:79:d0:d8:b2:aa:4e:21:29:d3:c4:97:b2:24:
44:a4:10:2b:c1:c6:e4:00:f0:cc:6a:a5:ce:c5:10:ec:22:c5:
88:d4:2a:7e:ba:40:48:b3:d1:46:e1:ba:03:05:07:f7:ce:47:
d5:ae:2c:a4:12:3e:55:1d:46:46:18:95:4a:ed:bc:76:dc:fc:
3e:6e:36:c1:1b:0b:fe:e7:94:2e:3d:29:c5:98:08:61:25:45:
bd:ad:63:62:72:bb:53:76:40:64:46:a7:0f:cd:56:28:7f:75:
5a:2a:52:0b:d6:7d:77:3c:75:41:13:b3:4f:72:04:de:73:0b:
86:00:d8:36:2a:98:93:79:be:3b:c4:04:54:5b:ef:db:98:33:
2f:85:c9:97:8b:91:e2:f6:e1:85:12:b3:c9:c9:e8:8c:c2:03:
97:0b:22:c6:f4:40:61:9c:73:7b:71:6f:fc:60:a9:9f:51:2d:
c4:7b:9c:aa:3c:0c:3c:b1:3c:aa:9c:7c:bd:ec:f9:e0:50:4b:
32:35:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:55:28 2025 by rpki-client