Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1qqdnkvcaO15WixD7gwo8DVZCUY.roa
File: 1qqdnkvcaO15WixD7gwo8DVZCUY.roa (raw, json)
Hash identifier: 4LpsCNeHslzFOe9ShN5cM/NgrmPVwZ77ORJaEgjEZao=
Subject key identifier: D6:AA:9D:9E:4B:DC:68:ED:79:5A:2C:43:EE:0C:28:F0:35:59:09:46
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C375212E45B47EA7C836C559DC58BE00B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1qqdnkvcaO15WixD7gwo8DVZCUY.roa
Signing time: Tue 05 Dec 2023 00:12:54 +0000
ROA not before: Tue 05 Dec 2023 00:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:52:12:e4:5b:47:ea:7c:83:6c:55:9d:c5:8b:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 00:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6aa9d9e4bdc68ed795a2c43ee0c28f035590946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:27:ee:82:c9:3a:90:01:9f:04:d2:6f:5a:
0c:20:e2:a8:67:bc:20:c0:47:54:34:cd:df:f8:b9:
65:8c:97:2a:71:ba:79:e1:bc:d8:51:2e:7e:3f:19:
56:74:e8:d7:68:5d:7e:59:19:52:43:2f:aa:eb:1d:
ec:49:6f:ae:0b:8a:19:23:f0:84:1e:f5:b5:41:8c:
ab:97:78:76:b5:13:56:22:7e:9c:a4:87:c7:02:73:
8d:0b:ae:ca:38:ea:fe:69:43:6d:ed:1e:c5:a9:ec:
20:fc:9f:02:7b:c9:ee:19:41:a8:2d:c6:9d:70:d6:
fb:98:f7:6a:48:49:9d:66:5b:a0:dc:98:00:5a:51:
bc:20:27:c4:15:b7:22:bc:04:b4:54:6b:be:6b:29:
90:ae:bd:86:cd:48:ca:b9:c0:6f:bc:27:49:f1:1b:
7b:a1:79:0a:46:6d:31:2c:5f:90:3f:3f:6d:55:8a:
17:5e:da:7d:90:82:70:1c:33:a5:63:64:e9:73:29:
9c:45:4e:03:60:45:6e:54:4c:ad:5a:77:67:39:f6:
a1:c1:8a:e2:e3:25:fe:b6:7c:45:b8:89:29:c2:d9:
17:6e:ad:1c:b0:5f:68:73:45:5c:6f:27:9e:c7:fc:
6f:de:3e:a3:55:6a:1c:f4:db:42:8b:10:0f:9f:6b:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:9D:9E:4B:DC:68:ED:79:5A:2C:43:EE:0C:28:F0:35:59:09:46
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1qqdnkvcaO15WixD7gwo8DVZCUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:d6:66:da:23:4a:05:3c:f1:86:17:10:32:9b:45:b5:b8:5b:
41:96:ba:71:91:5b:d6:40:03:7b:3d:3e:19:c8:08:b0:9b:f0:
28:78:d0:66:0c:ce:0d:f4:a6:60:1e:a0:40:d6:e0:5a:92:ea:
4a:8d:8b:2e:eb:1d:8c:0b:ba:0f:68:c5:7d:70:11:d4:9f:81:
30:31:8f:c4:dc:67:2b:9f:8c:81:88:84:84:fc:f3:bd:81:84:
f9:ce:cc:5a:53:43:60:42:af:78:8f:45:44:ec:78:d3:9a:f5:
f4:5e:9b:9c:ab:0a:af:9e:23:27:10:e6:f2:22:ff:c4:a2:bc:
aa:46:69:1d:a6:f8:75:53:f0:7f:3d:a1:f9:c0:2e:92:07:b0:
ad:19:fe:3f:a4:4c:5d:fe:7d:5e:3c:64:ad:53:ee:2c:8f:48:
ce:91:44:1e:15:fc:21:df:b0:66:71:3b:42:9e:46:e9:dc:a2:
13:b5:bd:e4:4d:b5:44:7e:a1:4d:5f:ed:4b:f4:94:06:14:c7:
7a:a9:2e:a0:73:c5:10:bc:2d:d9:c4:7e:b4:b6:cd:c5:b3:d6:
b4:f8:a1:d4:db:0a:59:91:6d:af:23:58:22:0a:d2:7a:f4:d7:
ce:9f:1a:77:74:f2:cf:31:37:99:de:fa:1b:4b:e9:ea:7c:78:
af:d8:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:09:37 2025 by rpki-client