Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qi7Fuo-FL_Qz9aIykbS1p7SYRwo.roa
File: qi7Fuo-FL_Qz9aIykbS1p7SYRwo.roa (raw, json)
Hash identifier: ufDkBORegKDXFJepsy8oIB43FRxyHB/4SE+UoPtojxk=
Subject key identifier: AA:2E:C5:BA:8F:85:2F:F4:33:F5:A2:32:91:B4:B5:A7:B4:98:47:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B19B8131EC5A7703EBF3E1B1B772CF68C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qi7Fuo-FL_Qz9aIykbS1p7SYRwo.roa
Signing time: Tue 10 Oct 2023 13:12:55 +0000
ROA not before: Tue 10 Oct 2023 13:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:b8:13:1e:c5:a7:70:3e:bf:3e:1b:1b:77:2c:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 13:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa2ec5ba8f852ff433f5a23291b4b5a7b498470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:ff:10:b3:6b:61:31:38:b5:11:a4:b0:6e:
f4:87:51:c5:55:09:d8:5e:c1:2a:2d:af:2f:4f:0d:
99:29:da:0a:8d:5e:a2:22:3e:33:41:de:dc:a4:94:
04:63:60:1a:65:79:ab:21:b0:e1:34:0e:5d:d9:8c:
43:ef:de:c1:78:61:dd:76:3e:35:d2:a3:31:6e:ab:
2f:97:f1:5d:2c:03:8b:d3:90:dd:5b:21:9e:42:2b:
1a:49:e7:de:be:ca:0f:13:a8:26:ef:80:92:ad:1f:
97:fe:e4:17:25:f7:db:7c:c6:a1:f5:fc:cb:81:53:
d5:84:4f:f3:0a:a5:c7:a3:8d:5a:de:82:be:86:84:
92:91:84:c5:81:7d:02:6f:a6:b1:22:2e:44:c2:4e:
cc:d3:84:6d:62:7a:e5:c4:c4:3d:86:06:fa:be:b8:
a3:4f:38:ad:11:d6:23:a8:a3:1e:ab:c3:0f:7f:6e:
37:ca:00:ef:39:92:33:7c:65:61:31:dc:50:23:4d:
5b:8a:47:19:cd:60:01:ab:ae:55:e0:b3:44:99:1a:
dc:c4:2e:3e:fc:d2:2a:f1:c1:56:74:c7:fe:09:fc:
04:59:df:73:9f:50:a7:61:33:cf:c8:8e:cf:f2:b0:
de:21:88:be:b4:df:a2:3d:b0:f9:d9:c6:75:45:5b:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:C5:BA:8F:85:2F:F4:33:F5:A2:32:91:B4:B5:A7:B4:98:47:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qi7Fuo-FL_Qz9aIykbS1p7SYRwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:bf:a9:23:17:4c:e8:19:8d:1e:be:b9:64:4d:11:fb:21:40:
90:02:70:9a:86:1a:1f:ea:be:0a:cb:08:2c:c3:60:ea:b1:9b:
27:52:0f:e2:dd:5c:6c:f3:03:68:cd:5b:4b:07:92:c3:15:d9:
0f:47:48:c9:75:27:36:49:d5:70:94:32:9c:4e:76:a4:17:1e:
7e:7c:07:8d:2f:b1:16:f4:db:7d:11:72:29:a4:56:69:b9:dc:
90:56:c9:9f:fd:12:99:41:55:3e:77:66:8f:a8:d5:60:34:8d:
a7:a9:a2:ee:f1:3b:42:7c:fb:f3:5a:7e:d2:4b:5b:2b:98:f2:
6d:b3:69:1c:cd:e3:c0:a3:bf:dd:38:c5:c7:e9:70:31:b6:49:
bd:c5:a4:25:c7:91:c8:56:84:f5:b3:dc:a4:c6:7d:c7:94:40:
23:37:b6:c9:e0:53:3d:7e:30:a9:e1:6b:82:d1:2a:2d:e0:0a:
2f:8a:d5:64:d7:83:d1:91:16:0d:9b:d7:5a:82:aa:30:d9:45:
12:7d:a8:89:b6:9d:38:eb:fa:5a:00:ce:8b:45:ce:2e:bf:1b:
37:d9:f8:2a:22:18:4c:e0:e2:59:f9:b9:8b:00:e9:7a:49:0e:
f4:dc:a5:ab:e8:e9:04:d4:21:42:c0:5b:51:41:2e:4a:f0:07:
31:bc:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:18:47 2025 by rpki-client