Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qwUvLH9v0y6ZHbbPwCKdZu_duX4.roa
File: qwUvLH9v0y6ZHbbPwCKdZu_duX4.roa (raw, json)
Hash identifier: pMd21zeCdGpGCjOS0faFRuo0JX0rgltNUqMd01vIDBc=
Subject key identifier: AB:05:2F:2C:7F:6F:D3:2E:99:1D:B6:CF:C0:22:9D:66:EF:DD:B9:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C03CAA593F54332C4629422F24A9EA6D9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qwUvLH9v0y6ZHbbPwCKdZu_duX4.roa
Signing time: Sat 25 Nov 2023 00:04:21 +0000
ROA not before: Sat 25 Nov 2023 00:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:3ca:685e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:ca:a5:93:f5:43:32:c4:62:94:22:f2:4a:9e:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 00:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab052f2c7f6fd32e991db6cfc0229d66efddb97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:f6:ea:2d:4e:a0:40:42:92:02:b2:cd:b4:
dc:ba:3c:d5:5d:a2:29:16:f5:97:e6:58:40:2e:47:
54:27:63:3b:11:1d:2c:46:17:c2:ef:47:fd:56:1d:
47:51:11:4d:0f:50:fb:4c:58:d8:c4:fc:a0:0d:92:
37:42:fe:eb:49:87:30:e1:46:06:08:1a:b3:97:cc:
4b:49:05:ec:90:7e:c5:31:77:e6:20:64:71:7f:48:
97:1d:d5:7e:de:33:0a:49:a6:26:13:30:91:c7:c8:
cf:e9:29:23:b8:b7:b1:83:67:4c:33:aa:5a:52:48:
cf:ad:32:db:89:fe:ad:5e:00:b5:94:65:d3:72:b6:
dc:05:5d:a0:80:3b:d4:e9:26:93:bb:3e:69:ac:fe:
0a:f3:da:b8:0c:eb:8a:55:75:a9:91:15:e9:09:4d:
75:d8:97:c0:38:84:ec:64:44:23:cf:e5:88:6c:29:
77:32:a3:6c:b3:cc:33:a5:6c:c3:9f:75:88:92:56:
f5:d5:d2:a0:70:eb:0d:91:e4:4e:57:7f:b6:6f:74:
f4:23:bd:9e:6b:e5:22:95:8a:b5:57:50:ef:2c:a0:
57:ef:77:f2:c0:6f:9c:bf:f3:82:ee:3a:a5:57:8e:
04:dd:c2:f5:b4:31:ee:c0:9b:c6:ca:20:42:89:eb:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:2F:2C:7F:6F:D3:2E:99:1D:B6:CF:C0:22:9D:66:EF:DD:B9:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/qwUvLH9v0y6ZHbbPwCKdZu_duX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:59:6b:0c:2f:96:65:2c:ea:c1:0d:9f:34:d5:4e:60:a5:07:
ba:40:f3:51:f6:53:16:5c:bf:7d:1f:16:fd:ba:fa:29:94:1e:
87:3c:8f:83:7a:81:e9:4b:35:5f:3a:b7:fe:6d:a1:1c:6b:cf:
49:f0:87:ad:0a:7c:14:ac:cf:eb:54:43:83:49:9c:a9:22:f0:
8c:4e:5d:aa:81:8c:97:6f:e1:48:37:3c:9b:f8:64:3a:42:a3:
17:ed:a2:4a:7b:5d:23:1c:85:b4:40:e4:61:1d:11:8b:a5:61:
6f:52:a9:93:62:76:e9:11:de:8c:51:ce:68:7a:2c:5a:3d:e6:
64:b6:bf:4c:da:ef:4c:90:41:90:ac:21:d8:a0:0b:56:2d:92:
51:ce:f7:c3:a4:8d:62:e3:a2:fc:8f:e3:03:ff:bd:e5:c0:37:
3a:f7:90:07:68:dd:d8:fd:ab:22:b1:af:99:55:d1:9a:30:e7:
4c:77:d8:8e:1f:be:a1:48:25:9f:97:7b:9f:91:52:c3:9d:9e:
84:de:22:dc:7b:78:d1:1d:4b:8d:05:77:ea:9f:2b:12:0f:55:
7d:93:ce:eb:1c:8d:b0:93:27:92:7c:8c:e9:63:a3:76:5f:a9:
d1:ef:33:ad:40:fc:4d:ae:c7:63:6e:ab:0f:bf:0a:40:dc:15:
8f:c2:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:32 2025 by rpki-client