Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qdwcqb9ZxUeayTUvAQS_GPwpT24.roa
File: qdwcqb9ZxUeayTUvAQS_GPwpT24.roa (raw, json)
Hash identifier: jqlda5zBzVJw7CykP/wkzpdGpkc8Byx6U8fZyybeeuM=
Subject key identifier: A9:DC:1C:A9:BF:59:C5:47:9A:C9:35:2F:01:04:BF:18:FC:29:4F:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C68AD7101D01E40BF2F5FB40D7BBED193
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qdwcqb9ZxUeayTUvAQS_GPwpT24.roa
Signing time: Thu 14 Dec 2023 14:14:06 +0000
ROA not before: Thu 14 Dec 2023 14:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:ad:71:01:d0:1e:40:bf:2f:5f:b4:0d:7b:be:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 14:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9dc1ca9bf59c5479ac9352f0104bf18fc294f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:2b:55:d9:2b:35:5d:90:fa:59:82:3e:c6:
be:15:16:da:f8:d0:7c:5d:34:b3:55:82:06:ee:d6:
00:40:2c:a2:24:0a:9f:5b:43:43:65:00:0b:ad:4a:
88:fb:6e:29:af:c4:47:8b:ae:25:22:50:d4:47:a4:
1a:35:e3:1a:a1:27:82:96:27:15:8e:81:5d:d9:57:
f9:83:25:89:e2:48:3b:b5:cd:63:a5:ca:bc:98:45:
cb:a0:c0:f9:2e:da:22:7e:63:f7:a5:5f:36:b9:47:
8b:2a:52:27:df:9e:c6:d1:28:0b:6d:9e:4d:72:26:
eb:08:ae:1e:c6:34:dd:5e:0f:6d:9c:40:da:18:29:
53:18:13:87:e2:87:0e:70:68:7b:41:59:ce:97:68:
fc:a4:99:04:b4:0f:39:b5:48:87:d5:c0:f4:d8:ed:
e2:c7:d2:62:a5:92:1c:e4:de:b5:06:b8:96:c4:7f:
5c:77:61:bf:16:02:70:33:f1:21:fb:a5:d3:a0:78:
ea:a8:cb:dc:9f:f6:bf:9a:29:fb:2d:1d:19:f9:28:
41:ae:f5:25:bd:a1:b1:ed:4a:0e:6a:8b:c4:bc:ae:
ca:22:a4:cb:a2:76:5d:0c:1e:1b:ea:78:69:d9:63:
3d:8e:35:74:c9:67:21:94:7e:61:ff:48:08:dd:57:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DC:1C:A9:BF:59:C5:47:9A:C9:35:2F:01:04:BF:18:FC:29:4F:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qdwcqb9ZxUeayTUvAQS_GPwpT24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:22:17:e3:90:91:62:08:aa:97:54:2b:d4:76:2f:af:1f:4c:
5e:ac:18:cf:d7:08:7c:54:a0:2c:1f:f2:82:4d:ea:c8:d4:12:
ed:30:6a:58:81:a2:f7:eb:f0:1a:99:88:f3:c7:45:ad:22:f6:
3a:09:3f:ef:87:78:1a:a0:a3:71:4a:9e:0b:15:33:23:f0:30:
29:bb:77:2c:56:cd:0f:23:6e:4e:4e:1c:8d:18:af:5e:64:7a:
51:f2:0f:0e:42:39:fe:3f:6f:f4:d3:55:a8:b2:90:95:20:97:
82:a0:ae:26:38:bf:d0:d5:d1:90:b3:d3:9c:5f:86:a3:af:6f:
96:b3:53:e7:cb:1b:ba:fe:a8:4f:c1:05:b0:03:2b:cb:5b:23:
2d:08:3c:df:7e:34:af:98:0e:a9:6f:1b:4b:9e:b8:6c:d0:13:
fd:b2:2f:52:11:29:ed:57:20:ba:41:60:7a:03:d3:49:3f:c8:
fd:8c:98:37:37:84:8d:30:74:4e:b6:d7:47:43:b3:ff:71:a3:
b3:78:d7:71:92:90:0b:55:22:36:21:55:6c:68:d9:d4:1d:d0:
dd:6c:6c:1e:06:fe:bb:e1:fd:97:ee:98:b2:f3:8e:75:d7:f3:
52:24:fc:76:dd:ec:06:d1:2a:d4:93:92:7c:f4:97:fa:21:46:
4c:9f:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:22 2025 by rpki-client