Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/scquZse_MftdSZBrZwl-QCfS-6Q.roa
File: scquZse_MftdSZBrZwl-QCfS-6Q.roa (raw, json)
Hash identifier: PxtwFuPrPFta1JoVTTx4WY5n0BF6cVS9iQqO+acori0=
Subject key identifier: B1:CA:AE:66:C7:BF:31:FB:5D:49:90:6B:67:09:7E:40:27:D2:FB:A4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2D6B636CD53BB5C86007D9D46710DA3C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/scquZse_MftdSZBrZwl-QCfS-6Q.roa
Signing time: Sun 03 Dec 2023 02:04:21 +0000
ROA not before: Sun 03 Dec 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:2d6b:2e0e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:6b:63:6c:d5:3b:b5:c8:60:07:d9:d4:67:10:da:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1caae66c7bf31fb5d49906b67097e4027d2fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:37:b1:8e:3a:b2:78:a7:8e:4f:e1:0f:28:
3f:e1:68:10:b6:17:71:64:94:de:82:69:3b:51:95:
d6:21:63:9e:98:8a:64:9a:11:30:8d:8d:cc:fb:fb:
29:01:5b:7f:1e:75:ff:55:cb:9f:ad:e1:86:f5:eb:
d8:6f:c5:ca:75:04:60:d2:a2:d6:e0:6b:b0:ff:56:
76:01:24:66:6e:79:c5:62:91:96:45:34:05:55:00:
1e:be:b5:8f:9c:06:1d:c5:11:7f:5d:bf:39:cb:ee:
f0:e9:6e:8d:69:a9:e7:c2:b4:d7:96:d4:7e:c3:1c:
d2:3c:77:fe:30:fb:ba:26:e6:43:e4:ae:4c:5f:8b:
65:84:0d:7d:f7:2b:03:58:bb:71:6b:1f:ea:ba:dc:
63:5f:e7:62:9c:8b:41:d4:c8:23:33:c6:e0:a1:52:
a4:b1:ae:f4:88:a0:55:ae:77:d3:7b:b1:26:e6:69:
cf:14:aa:98:7c:b3:71:ea:4f:40:7f:12:7b:4e:ec:
ad:e2:7c:89:ab:3c:02:90:1e:f6:24:45:a3:b5:4d:
78:a2:30:13:05:a7:38:2f:4c:f7:a5:9d:3b:18:19:
09:29:07:0c:f8:d8:cd:3e:42:74:c3:9e:53:5c:d5:
d5:4c:e4:10:ec:31:88:66:0c:16:f5:cc:ef:8c:82:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:AE:66:C7:BF:31:FB:5D:49:90:6B:67:09:7E:40:27:D2:FB:A4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/scquZse_MftdSZBrZwl-QCfS-6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:35:f7:56:d9:d3:e2:90:e9:ff:8d:aa:48:4d:6a:f8:37:f9:
a6:55:15:69:3d:7f:26:35:c0:54:92:58:68:10:af:b4:d3:a2:
61:88:7d:e9:e4:be:05:6c:ee:c8:27:fb:d1:f7:25:b8:4e:0e:
1a:f3:69:7c:51:4a:6a:22:39:85:3b:be:9e:48:0b:2c:b4:71:
77:36:0e:77:c2:67:76:f8:6f:e8:0e:ef:3c:53:55:d7:aa:d9:
57:22:a9:fe:ba:20:12:04:3c:9b:4a:49:b5:99:ad:48:9a:ea:
25:c0:a9:a2:c4:06:9a:af:e2:38:c9:79:32:72:14:7c:22:5f:
85:cc:fa:1d:1d:2f:a3:bf:a2:bb:29:d1:79:89:5a:d4:67:8d:
47:4b:1b:4e:8f:68:ae:85:90:a8:4f:92:b1:55:aa:fa:3d:d2:
5d:36:21:dc:b1:1c:8b:d9:aa:3e:12:97:e3:73:eb:1a:96:b5:
49:19:0e:03:1f:5f:20:a2:da:0e:34:d0:62:e1:ab:e9:0b:9c:
70:76:b5:65:32:03:33:b3:6a:d2:45:2d:81:c2:15:73:b9:3e:
bd:c6:38:1a:54:c0:30:25:1d:c4:c6:c0:dd:1e:35:be:30:79:
ae:94:c9:42:d4:13:bc:ed:9e:bc:9f:40:85:b5:1a:8e:29:ee:
ff:2c:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:59:16 2025 by rpki-client