Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rqiCJWwMlJvO8uMxh0jtc3_0zE0.roa
File: rqiCJWwMlJvO8uMxh0jtc3_0zE0.roa (raw, json)
Hash identifier: 4TdXBUU1rNDuhMrBY0u+GxQ63q9aW4JWxxvOxU24/k4=
Subject key identifier: AE:A8:82:25:6C:0C:94:9B:CE:F2:E3:31:87:48:ED:73:7F:F4:CC:4D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEFE0135533426A24B587F27F6CE8DEE8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rqiCJWwMlJvO8uMxh0jtc3_0zE0.roa
Signing time: Tue 21 Nov 2023 03:15:21 +0000
ROA not before: Tue 21 Nov 2023 03:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:e0:13:55:33:42:6a:24:b5:87:f2:7f:6c:e8:de:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 03:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea882256c0c949bcef2e3318748ed737ff4cc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:7b:fb:1e:8a:b0:ac:77:a6:45:98:b0:b3:
94:4a:5b:d9:6e:ed:2f:3b:3a:f3:a2:06:f9:d4:62:
70:bc:78:b3:81:5d:eb:a4:dc:e6:b0:d7:78:5f:c0:
f4:6e:0c:92:d3:25:42:c8:ee:6e:a9:54:23:86:ea:
ca:a8:5e:cb:22:5d:94:b9:16:1b:18:47:b6:57:b9:
77:d6:d9:77:50:4c:29:7e:2c:92:b7:58:36:9d:94:
54:23:cc:75:26:64:c3:d0:e6:25:97:26:5b:3d:4a:
fa:a7:85:82:da:d3:f4:d9:96:c0:1f:1f:54:28:ee:
7f:98:14:26:e4:03:c0:db:8c:29:f4:3c:a6:3f:9d:
ea:9d:13:98:1a:97:3b:ca:6b:df:85:f2:bc:04:8a:
fc:58:7b:08:9e:0e:80:0c:31:74:f4:df:3a:88:59:
3e:5b:0f:08:d2:98:df:af:be:4b:d4:59:1b:47:45:
32:bb:55:76:cf:93:df:b3:62:a0:26:94:3c:16:ae:
e0:b3:15:f2:6d:1a:9c:18:52:9d:d2:63:49:f0:f9:
6b:9f:a2:ec:e2:be:5e:08:83:a7:b6:4e:4e:a4:15:
53:6f:90:01:65:15:5c:cd:3b:5a:c5:77:a6:ab:eb:
11:30:e2:47:2f:46:98:76:ef:3b:16:02:01:b4:5a:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:82:25:6C:0C:94:9B:CE:F2:E3:31:87:48:ED:73:7F:F4:CC:4D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rqiCJWwMlJvO8uMxh0jtc3_0zE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:e8:ed:ca:2c:25:8c:8a:fa:7a:b3:f3:d8:70:9f:0f:98:55:
02:fb:54:65:61:d2:2d:1e:e4:5e:0f:9d:dc:4f:af:4b:a2:05:
8a:d3:87:4b:b1:ac:8a:b0:c2:78:76:af:38:3d:ec:3e:b7:cc:
66:f6:27:51:d3:cd:c0:3d:66:e1:69:e8:c8:c3:8a:24:54:14:
13:c1:c1:dd:1e:1e:1a:77:73:3c:5a:f0:bd:d6:ff:0d:88:99:
1a:b4:e0:51:49:5b:b1:69:f7:e5:ed:ed:79:a9:4d:b9:22:3a:
44:49:92:55:f7:41:de:c8:0c:90:87:ce:c7:64:c8:b7:9d:98:
0f:90:cb:da:2f:9f:2d:c4:90:8b:72:3b:6f:17:02:f7:d4:51:
0f:f1:f2:5c:47:0e:1d:84:36:b6:c9:a6:a1:6b:e8:3e:8d:2b:
2c:2c:44:ba:4a:13:9c:a0:e3:3f:ac:49:de:4c:4b:87:d2:a5:
a1:c3:3c:cf:8d:67:14:ea:b6:7d:d7:16:bd:54:3d:54:af:59:
44:b1:1d:7a:5a:ca:67:85:f3:18:45:f4:c8:2d:ec:61:19:df:
58:f9:e6:8d:76:70:d9:49:9b:3d:6b:05:f8:ef:2e:11:77:96:
c0:e4:ae:a4:82:c9:3f:0d:97:55:b7:8f:5e:31:b2:58:38:3b:
dc:01:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 06:07:24 2025 by rpki-client