Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QEzNuf9WyXgZAvJFatioFBIrSpg.roa
File: QEzNuf9WyXgZAvJFatioFBIrSpg.roa (raw, json)
Hash identifier: zI8hcD/XNI053CueH5lh+5hyAWhGfDo0IwKae1ZdC2I=
Subject key identifier: 40:4C:CD:B9:FF:56:C9:78:19:02:F2:45:6A:D8:A8:14:12:2B:4A:98
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC182D089E01A77E101C9BC8CA288C943
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QEzNuf9WyXgZAvJFatioFBIrSpg.roa
Signing time: Sun 12 Nov 2023 03:10:57 +0000
ROA not before: Sun 12 Nov 2023 03:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:82:d0:89:e0:1a:77:e1:01:c9:bc:8c:a2:88:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 03:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=404ccdb9ff56c9781902f2456ad8a814122b4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:50:14:c5:a5:fd:b3:e1:54:43:53:a3:b8:
bc:19:c0:6b:d8:db:c9:0d:b1:07:75:b4:38:b4:8e:
58:b1:db:57:83:fc:3e:d3:96:bc:c9:9d:9c:7c:41:
49:fe:bb:aa:2d:0e:5e:0c:85:13:e9:ee:fb:30:fa:
48:16:cd:94:79:5e:fc:24:25:e7:68:54:9e:5d:bd:
ad:18:af:d5:4d:9e:c4:bd:81:ec:4c:70:37:a8:76:
a1:7f:67:c5:af:62:bd:83:ca:6f:5c:7c:7e:08:9f:
9b:f9:44:6a:e9:fa:db:97:68:bd:2f:d8:82:cc:86:
15:21:b6:fc:be:b8:97:24:4e:7b:d0:ae:6a:29:44:
7d:d5:d9:64:0b:85:76:69:e9:fe:ec:29:b4:38:47:
4a:cc:91:f8:16:90:5c:7f:3d:b4:ae:f4:c9:07:63:
25:bd:e7:93:52:3d:bd:15:fe:59:3b:86:17:ef:be:
22:18:63:fd:80:a6:bb:ce:d8:d7:50:cd:8e:5f:6b:
c7:80:54:b9:55:7e:95:f7:f0:30:7d:92:85:cb:8c:
cf:db:bf:60:71:66:90:6a:0f:c2:a4:70:c2:78:83:
78:47:76:83:08:3f:0e:25:af:b1:4e:13:f1:7b:8a:
d4:85:80:3d:44:b9:d0:15:1b:84:b5:d8:6a:a8:6d:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4C:CD:B9:FF:56:C9:78:19:02:F2:45:6A:D8:A8:14:12:2B:4A:98
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QEzNuf9WyXgZAvJFatioFBIrSpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3c:53:83:6a:fd:25:50:b1:b1:8c:af:78:7c:66:f3:27:f4:
ee:55:13:fc:19:21:7a:99:45:a1:49:a1:60:fe:ad:93:cf:d4:
aa:da:2e:74:de:bf:41:6e:d0:13:57:e3:41:25:0d:22:59:09:
39:fd:4d:57:67:f6:60:d0:f3:de:bd:84:d7:09:6b:33:21:8e:
db:67:f2:1b:32:d7:6f:db:e1:73:16:de:70:fe:3d:ec:5d:0b:
84:93:58:40:8f:92:7b:a9:bb:77:1e:dd:d7:bc:5c:26:7f:6a:
d9:40:98:cd:b7:17:00:20:97:36:fa:b1:11:8a:50:f5:6c:24:
73:50:bc:51:b0:29:bb:fa:53:bf:c3:1b:00:2d:41:01:10:88:
1a:6d:78:64:11:12:5a:01:ea:1f:6b:7b:89:ae:51:75:fd:6f:
90:e0:0e:02:ec:41:fc:9a:20:e7:cb:70:dc:7d:89:85:1e:3a:
a4:24:5d:84:9f:e1:1b:97:6f:15:85:d1:fe:19:eb:61:aa:6e:
43:de:39:85:df:b9:b4:00:f0:4a:0c:67:38:c7:87:66:70:16:
db:d0:e3:7a:59:fe:3e:63:fa:8e:df:25:97:b6:d5:a2:ee:52:
60:c5:dd:a0:1c:d8:bb:7a:95:e1:b4:70:fa:64:5e:86:94:a8:
bf:47:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:47:32 2025 by rpki-client