Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qZftYXG9Ft0lPMsGz2UINyveg2c.roa
File: qZftYXG9Ft0lPMsGz2UINyveg2c.roa (raw, json)
Hash identifier: 9AeGF1yAtaFdojwVzxathCPS58gHfWOL7IdJBZMHbWk=
Subject key identifier: A9:97:ED:61:71:BD:16:DD:25:3C:CB:06:CF:65:08:37:2B:DE:83:67
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6C52517214DF4FCCA6D9F360F868D66E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qZftYXG9Ft0lPMsGz2UINyveg2c.roa
Signing time: Thu 26 Oct 2023 14:10:15 +0000
ROA not before: Thu 26 Oct 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:52:51:72:14:df:4f:cc:a6:d9:f3:60:f8:68:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a997ed6171bd16dd253ccb06cf6508372bde8367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:ad:65:e4:ca:40:4c:e4:66:e8:b4:64:f5:
83:f6:68:ff:54:26:75:a1:b3:12:80:32:ed:80:78:
2a:49:48:f0:0b:af:21:b7:8a:1e:2e:0b:18:d0:1f:
aa:ab:0c:ab:aa:8f:25:88:ae:b6:03:b7:db:9a:b6:
26:68:5c:95:99:b4:98:93:e0:93:38:91:fe:4b:8f:
13:56:f1:f3:0f:4e:1c:05:26:6c:34:1f:3a:79:a7:
fd:aa:d7:8a:34:05:d9:c6:65:4a:fd:5b:70:1d:ec:
76:e2:16:f1:d6:60:cb:6a:12:98:02:83:02:00:26:
dd:55:d4:63:e3:51:ce:85:b9:e6:3a:a4:0e:31:34:
67:3c:b0:8c:55:25:4a:cf:a4:a1:c2:11:a6:7a:ec:
00:6e:dd:4c:0c:ce:45:10:67:70:3a:7e:71:df:ed:
a9:a7:14:c4:70:9c:d3:0f:23:33:24:74:d6:73:4f:
46:dd:86:6d:88:c0:b6:a7:d3:e8:1d:06:4f:f4:b4:
ff:6a:c0:fb:4d:66:b4:27:33:e4:81:dd:ec:5d:9a:
94:6c:17:a3:f7:a7:c3:4b:a5:b9:38:d8:41:ce:b2:
e2:62:5b:94:95:19:19:fb:b1:ce:e6:24:48:6d:17:
e8:79:8a:46:82:45:8a:bc:00:42:a3:e3:41:88:68:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:ED:61:71:BD:16:DD:25:3C:CB:06:CF:65:08:37:2B:DE:83:67
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qZftYXG9Ft0lPMsGz2UINyveg2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:6c:b5:50:51:4d:f7:c4:9c:1a:be:66:45:c2:3d:c5:6a:ff:
f8:51:33:47:b4:d2:82:60:d4:39:2d:22:0f:7f:06:f8:ec:4b:
9e:2d:b5:08:ee:ad:e4:56:c0:09:d6:74:84:de:d1:6a:07:9d:
b6:94:52:e6:e1:0c:4c:9f:55:7c:8f:26:68:1a:14:0e:6b:db:
c8:2e:9e:a5:96:be:ea:54:99:b1:0b:f0:0f:4d:4f:03:8d:3d:
4d:ed:64:8f:6c:10:0a:e3:5c:08:68:a1:1c:3b:ee:bd:29:ef:
c6:29:de:d9:8b:0d:ee:69:bb:d4:4a:d3:23:c1:d1:94:77:48:
05:52:ba:75:b3:05:99:3c:d8:3a:c7:36:60:91:48:7c:c5:8d:
c4:bf:e1:7f:9b:74:e7:e7:02:48:42:8d:a3:21:1c:4f:3f:22:
1f:00:99:46:4c:9d:a1:8e:73:64:96:2b:ec:8c:46:9e:78:e5:
cb:83:d1:da:77:2e:b4:b7:78:87:10:9c:a8:d8:a6:61:d1:8f:
bb:b2:fd:c0:1d:53:6b:25:1a:60:1a:1f:c6:64:f5:34:8f:9d:
de:d3:5a:51:7f:03:17:32:b3:8e:fb:f0:ca:ec:82:cd:dd:8b:
33:e1:7f:d7:87:76:bc:85:d7:53:16:69:73:27:a3:f7:6d:8a:
09:ad:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:30 2025 by rpki-client