Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q8XmMQiLgTDjwGeSpEnSecATZng.roa
File: Q8XmMQiLgTDjwGeSpEnSecATZng.roa (raw, json)
Hash identifier: 9L9fNV3Ej+KjRT0VZDKkBIHbvgGC4ncxzuJhBR8Hr6I=
Subject key identifier: 43:C5:E6:31:08:8B:81:30:E3:C0:67:92:A4:49:D2:79:C0:13:66:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C111869689D74CF9A8D620F4D561256A3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q8XmMQiLgTDjwGeSpEnSecATZng.roa
Signing time: Mon 27 Nov 2023 14:04:21 +0000
ROA not before: Mon 27 Nov 2023 14:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:1118:5655/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:18:69:68:9d:74:cf:9a:8d:62:0f:4d:56:12:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 14:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43c5e631088b8130e3c06792a449d279c0136678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:c5:4b:37:d6:e8:b3:62:86:49:45:cd:3c:
4f:5b:71:cd:45:4c:c7:92:20:cf:ed:9a:b4:46:13:
af:7e:de:ae:01:9d:7a:dd:c4:3d:87:f3:89:39:c3:
06:cb:6c:5f:fa:2e:e3:cf:bc:ec:7f:81:b7:2d:db:
e8:35:e2:d4:21:5d:c2:9b:9f:65:0a:5f:52:bf:7b:
f0:11:d0:93:7b:88:a4:98:95:7a:42:b1:4d:99:a5:
7f:ab:c2:ce:2e:27:8c:b4:fc:5b:b4:da:5f:ef:30:
ad:e4:72:5f:f8:46:68:38:ba:ef:2d:6a:98:d4:16:
ac:c5:45:d0:e7:2a:b9:b2:ed:62:ae:88:dc:71:ee:
8d:4b:99:f9:a1:f1:23:7a:89:05:e4:d0:24:4d:31:
6f:d7:50:af:08:ea:d6:5c:6d:23:c8:14:56:a2:37:
7a:1b:e6:02:be:c1:b0:ee:b2:54:53:e2:08:dd:d9:
bb:c0:0b:47:a6:d3:e1:d9:0c:44:4e:94:af:bc:02:
6f:40:40:0c:4f:4a:10:f7:a4:a6:f5:6b:20:90:60:
e3:38:53:43:a7:8d:8e:d2:d5:8b:b7:69:81:e7:58:
e3:3a:37:80:fc:43:0a:d3:22:fc:5b:09:f4:c2:39:
fb:28:ee:ba:38:2d:65:36:4b:db:b6:fc:e2:03:5d:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:E6:31:08:8B:81:30:E3:C0:67:92:A4:49:D2:79:C0:13:66:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Q8XmMQiLgTDjwGeSpEnSecATZng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:4c:0d:ff:aa:c1:fc:da:40:3c:67:43:69:5e:b6:e1:c7:16:
e9:73:8a:8f:a5:73:55:5a:f2:72:58:f4:c5:d7:38:90:17:f5:
5b:4b:09:48:4b:fe:50:4f:3e:7b:9d:65:bf:4a:a7:4e:c5:7f:
86:58:90:49:ec:26:b2:6d:73:71:ca:e5:f6:17:7b:f4:96:73:
9f:64:c4:fd:84:64:41:71:c6:9a:76:1f:ca:98:41:e6:c4:78:
1e:a9:01:e6:30:73:e8:76:bf:91:3e:0f:71:0b:5f:7d:08:b3:
0a:36:4e:53:72:48:fa:69:22:88:9a:86:77:c8:68:9f:9c:5d:
b6:68:c8:bc:77:22:fc:36:e6:a1:3d:85:27:34:d2:c2:04:12:
15:3b:6b:25:3b:5b:ec:98:4e:20:02:6e:83:96:19:a5:42:1e:
65:99:d3:a4:53:c2:05:51:3e:9e:ea:66:fa:e5:53:a9:67:db:
45:a6:63:a3:7d:f1:48:a0:bb:32:12:f3:f1:7b:6b:58:b6:42:
a1:6b:fc:f9:d8:2a:fd:1f:b7:81:98:d2:ac:6a:a4:52:19:51:
65:01:85:aa:e7:e6:66:79:83:95:10:93:43:54:8c:d9:7d:cf:
ce:34:43:1e:28:a7:80:24:5d:72:7e:cb:08:98:05:fd:8a:f2:
ec:53:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:35 2025 by rpki-client