Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqOCgVJVZLiADkZo1EMEJQupPJw.roa
File: JqOCgVJVZLiADkZo1EMEJQupPJw.roa (raw, json)
Hash identifier: nkwFHx5UMl5lFgQq/Xj4mLBDBGlp5g5b+wna2uvF+yM=
Subject key identifier: 26:A3:82:81:52:55:64:B8:80:0E:46:68:D4:43:04:25:0B:A9:3C:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC0376384AF2068789BAD150953FE52D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqOCgVJVZLiADkZo1EMEJQupPJw.roa
Signing time: Sat 11 Nov 2023 21:08:57 +0000
ROA not before: Sat 11 Nov 2023 21:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:37:63:84:af:20:68:78:9b:ad:15:09:53:fe:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 21:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a38281525564b8800e4668d44304250ba93c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:e4:d5:a6:0e:50:bb:e7:9d:c8:11:3e:b1:
84:26:8c:61:5b:6f:74:b2:c3:18:bb:89:d2:ae:40:
1a:a3:9d:5b:7c:f4:52:96:88:d0:b3:73:2a:d2:5d:
a4:b6:81:e2:53:de:8f:63:7a:82:98:ac:66:38:4e:
d5:0b:1d:39:25:07:40:9c:4c:fd:fd:0f:cf:74:45:
37:da:cf:ac:a4:79:7d:c5:76:7b:e7:fb:23:bb:86:
ba:88:fd:84:ae:08:a4:77:e6:2c:c8:e2:ea:c7:b6:
02:c1:32:ed:68:de:21:ef:3f:a0:2b:5d:19:b2:03:
f3:8d:9a:78:db:78:4a:38:59:e3:87:84:10:66:0d:
ac:7c:1c:05:9e:e9:73:52:75:21:c6:a0:c7:00:10:
2e:ac:5a:46:a6:34:df:88:a4:15:c0:d8:f5:61:7f:
e9:1e:31:71:2f:a0:e1:cd:56:26:66:54:b4:08:d3:
53:e9:e0:62:b5:93:3c:6f:fb:32:37:f7:07:01:95:
8a:56:2d:a0:1b:f3:7e:4d:3e:53:f4:0b:17:15:c0:
87:b7:5f:72:fb:0f:57:64:a9:21:76:bc:02:5e:c9:
ee:27:2f:c7:2a:eb:b9:f8:c0:d6:34:9f:b1:04:46:
74:cd:8c:45:fd:12:32:b5:67:a4:64:e4:13:fa:3c:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:82:81:52:55:64:B8:80:0E:46:68:D4:43:04:25:0B:A9:3C:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JqOCgVJVZLiADkZo1EMEJQupPJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:e2:8f:1d:3c:94:f6:60:85:4e:07:89:1f:d7:75:5a:bf:8f:
ba:eb:94:96:2a:4d:6f:5b:c5:1a:13:25:20:5e:65:10:31:79:
76:39:bb:23:34:f6:fb:b7:30:12:8c:70:c5:57:b2:2e:78:94:
db:ec:c3:27:9a:e9:d3:1a:09:c1:92:80:11:12:90:27:2d:53:
87:28:6b:7e:24:53:71:fe:eb:ff:7a:85:18:4f:ba:28:43:5a:
40:cb:e9:cb:ff:7c:d9:79:76:9b:be:35:dc:af:3b:26:cd:d3:
90:72:81:80:6b:b2:2a:9d:f9:2d:f2:f3:66:d4:3a:ea:01:49:
25:68:dd:0c:42:86:3a:a0:ed:cd:c4:87:3a:5c:99:b2:d4:17:
2e:31:04:27:ab:82:f5:94:41:2a:24:e4:d6:6f:63:75:5e:4c:
c4:50:8f:2b:5b:a8:6a:5c:51:f1:ff:53:1b:a7:2c:be:23:f3:
6f:31:d0:f4:cb:c9:e1:ba:7c:0f:09:6e:40:da:d9:a4:cd:93:
ab:a6:0e:00:ed:07:35:15:37:56:1e:a9:b6:95:df:00:07:04:
23:d2:eb:4a:df:87:53:a6:89:ab:09:2d:e6:9a:95:6b:12:07:
40:75:10:d4:5e:bc:ce:e8:83:c5:bd:68:10:36:3c:f0:a1:cd:
f8:8a:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:24 2025 by rpki-client