Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QJU8AWUoiBhxVReMeq66MQ_xkyI.roa
File: QJU8AWUoiBhxVReMeq66MQ_xkyI.roa (raw, json)
Hash identifier: sLujE2EzgTs2Tzp2ZVVMYSnto6xP/ecd63nP2g5amf0=
Subject key identifier: 40:95:3C:01:65:28:88:18:71:55:17:8C:7A:AE:BA:31:0F:F1:93:22
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C464FE3EBADBE92DC47FA71B2FEE2E8F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QJU8AWUoiBhxVReMeq66MQ_xkyI.roa
Signing time: Thu 07 Dec 2023 22:04:49 +0000
ROA not before: Thu 07 Dec 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:464f:6d23/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:4f:e3:eb:ad:be:92:dc:47:fa:71:b2:fe:e2:e8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40953c01652888187155178c7aaeba310ff19322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:ad:64:fb:93:a3:34:ba:7f:48:f0:7b:cf:
4b:78:d8:69:85:3a:94:1b:56:e9:c8:95:3c:18:40:
25:6d:ca:b7:64:e5:2a:f5:8f:d9:0f:8b:92:16:09:
a6:80:76:ab:b5:d5:eb:98:df:20:f5:cc:96:99:9d:
0e:51:f1:98:b1:db:d2:41:4d:6e:ae:e4:f8:bf:a7:
2f:48:df:f6:b6:88:c8:c4:0d:46:fa:79:ad:a3:3b:
6a:33:22:fb:40:9e:c4:98:56:f7:07:74:03:32:fc:
d5:7c:ea:2c:4c:78:ba:bd:91:52:96:53:aa:4d:d3:
6f:67:05:72:6c:5e:f4:df:26:ef:50:c8:c8:3a:4c:
eb:0b:29:ee:d6:53:3f:cf:f1:63:61:f2:c3:7b:d9:
ef:93:3b:48:b4:4b:1e:7e:a5:92:66:b3:95:e1:d2:
09:5c:59:bf:f0:85:cc:53:5e:e8:b4:cf:7c:11:05:
17:56:48:17:fc:d7:2c:fa:55:21:b4:dd:22:83:93:
b4:f4:99:92:dc:eb:a2:e2:77:66:3e:cb:c6:55:de:
69:cc:03:29:e0:98:78:c1:70:0f:52:47:35:35:8d:
30:19:e1:62:99:77:d1:56:94:f1:10:7c:1d:27:dc:
6f:70:5f:7f:28:ce:05:9b:f5:c3:35:89:56:42:32:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:3C:01:65:28:88:18:71:55:17:8C:7A:AE:BA:31:0F:F1:93:22
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QJU8AWUoiBhxVReMeq66MQ_xkyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:68:91:a3:34:64:3a:00:83:13:ea:bd:94:e7:a0:92:b1:c9:
58:09:86:91:91:81:dc:24:36:f4:88:6e:2d:e2:68:18:9a:55:
e7:98:90:ff:28:81:44:e4:c2:54:b6:ad:1f:04:36:fe:59:58:
ef:23:bc:fe:d6:c5:03:89:e8:88:bd:84:05:14:94:de:50:16:
5a:fa:c3:be:69:96:e1:98:e7:25:49:ac:33:fe:bc:67:22:1a:
52:b8:e1:b8:79:c8:6c:1b:dd:7d:b0:c1:82:4a:cb:9c:33:9c:
30:d4:e2:6a:a5:26:b1:55:e2:03:3e:c9:87:fb:32:12:62:11:
d2:44:aa:95:0e:ae:a1:b0:ad:89:fa:be:4e:c0:f7:db:97:3e:
02:3d:70:aa:d9:c6:42:42:c0:2a:e9:14:9d:b0:f4:44:3e:3d:
d3:51:65:ec:d6:d1:cf:cd:62:19:86:97:d8:e8:ee:04:d8:c1:
70:9d:28:da:f1:72:9f:d3:d0:10:8f:85:a9:37:3e:a2:ff:1f:
41:48:aa:6a:53:7e:6f:7a:24:b7:25:ed:2c:54:a6:f3:21:89:
fe:48:e3:1b:38:56:b0:27:72:8b:da:b2:8e:c8:ac:8c:c8:8b:
e3:1d:66:30:60:46:a9:3b:23:a7:f7:d5:fa:71:33:a3:12:a8:
b9:4f:3e:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxGT+Prrb6S3Ef6cbL+4ujxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA3MjIwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDk1M2MwMTY1Mjg4ODE4NzE1NTE3OGM3YWFlYmEzMTBmZjE5MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht2tZPuTozS6f0jwe89LeNhphTqU
G1bpyJU8GEAlbcq3ZOUq9Y/ZD4uSFgmmgHartdXrmN8g9cyWmZ0OUfGYsdvSQU1u
ruT4v6cvSN/2tojIxA1G+nmtoztqMyL7QJ7EmFb3B3QDMvzVfOosTHi6vZFSllOq
TdNvZwVybF703ybvUMjIOkzrCynu1lM/z/FjYfLDe9nvkztItEsefqWSZrOV4dIJ
XFm/8IXMU17otM98EQUXVkgX/Ncs+lUhtN0ig5O09JmS3Oui4ndmPsvGVd5pzAMp
4Jh4wXAPUkc1NY0wGeFimXfRVpTxEHwdJ9xvcF9/KM4Fm/XDNYlWQjIh8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFECVPAFlKIgYcVUXjHquujEP8ZMiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvUUpVOEFXVW9pQmh4VlJlTWVxNjZNUV94a3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJBokaM0ZDoAgxPqvZTn
oJKxyVgJhpGRgdwkNvSIbi3iaBiaVeeYkP8ogUTkwlS2rR8ENv5ZWO8jvP7WxQOJ
6Ii9hAUUlN5QFlr6w75pluGY5yVJrDP+vGciGlK44bh5yGwb3X2wwYJKy5wznDDU
4mqlJrFV4gM+yYf7MhJiEdJEqpUOrqGwrYn6vk7A99uXPgI9cKrZxkJCwCrpFJ2w
9EQ+PdNRZezW0c/NYhmGl9jo7gTYwXCdKNrxcp/T0BCPhak3PqL/H0FIqmpTfm96
JLcl7SxUpvMhif5I4xs4VrAncovaso7IrIzIi+MdZjBgRqk7I6f31fpxM6MSqLlP
PmA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:18 2025 by rpki-client